CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- mozilla firefox, firefox esr, thunderbird +2 moreWhen visiting directory listings for `chrome://` URLs as source text, some parameters were...5.3 Medium
- mozilla firefoxWhen using the Performance API, an attacker was able to notice subtle differences between...6.1 Medium
- mozilla firefoxWhen loading a script with Subresource Integrity, attackers with an injection capability could...4.3 Medium
- rizinRizin v0.4.0 and below was discovered to contain an integer overflow via the function...5.5 Medium
- sambaA flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access...5.4 Medium
- sambaA flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with...8.1 High
- sambaA flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it....8.8 High
- sambaA flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure...4.3 Medium
- sambaA flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service...8.8 High
- tencent qqThe QQ application 8.7.1 for Android and iOS does not enforce the permission requirements (e.g.,...7.5 High
- tencent wechatIn the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive...7.5 High
- hashicorp vaultHashiCorp Vault and Vault Enterprise through 2022-07-17 have Incorrect Access Control.9.1 Critical
- motorola ace ip gateway \(4600\) firmware, moscad ip gateway firmware +1 moreThe Motorola MOSCAD and ACE line of RTUs through 2022-05-02 omit an authentication requirement....7.5 High
- motorola ace1000 firmwareMotorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom...8.8 High
- motorola ace1000 firmwareThe Motorola ACE1000 RTU through 2022-05-02 has default credentials. It exposes an SSH interface...9.8 Critical
- motorola ace1000 firmwareThe Motorola ACE1000 RTU through 2022-05-02 ships with a hardcoded SSH private key and...9.8 Critical
- motorola ace1000 firmwareThe Motorola ACE1000 RTU through 2022-05-02 mishandles firmware integrity. It utilizes either the...7.2 High
- motorola ace1000 firmwareThe Motorola ACE1000 RTU through 2022-05-02 uses ECB encryption unsafely. It can communicate with...9.8 Critical
- bakerhughes bently nevada 3701\/40 firmware, bently nevada 3701\/44 firmware, bently nevada 3701\/46 firmware +1 more +3 moreThe Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a...9.8 Critical
- bakerhughes bently nevada 3701\/40 firmware, bently nevada 3701\/44 firmware, bently nevada 3701\/46 firmware +1 more +3 moreBently Nevada condition monitoring equipment through 2022-04-29 mishandles authentication. It...9.1 Critical
- omron cp1w-cif41 firmware, sysmac cj2h firmware, sysmac cj2m firmware +4 more +6 moreThe Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18...9.8 Critical
- omron nj101-1000 firmware, nj101-1020 firmware, nj101-9000 firmware +22 more +24 moreThe Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series)...9.8 Critical
- omron cp1w-cif41 firmware, sysmac cj2h firmware, sysmac cj2m firmware +4 more +6 moreIn Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to...7.5 High
- omron cp1w-cif41 firmware, cx-programmer, sysmac cj2h firmware +5 more +7 moreOmron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They...7.5 High
- motorolasolutions mdlcThe Motorola MOSCAD Toolbox software through 2022-05-02 relies on a cleartext password. It...7.5 High
- motorolasolutions mdlcThe Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three...9.8 Critical
- emerson deltav distributed control systemThe Emerson DeltaV Distributed Control System (DCS) through 2022-04-29 mishandles authentication....7.8 High
- emerson openbsiEmerson OpenBSI through 2022-04-29 uses weak cryptography. It is an engineering environment for...5.5 Medium
- emerson deltav distributed control system sq controller firmware, deltav distributed control system sx controller firmware, se4002s1t2b6 high side 40-pin mass i\/o terminal block firmware +21 more +23 moreThe Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29...5.5 Medium
- emerson deltav distributed control system sq controller firmware, deltav distributed control system sx controller firmware, se4002s1t2b6 high side 40-pin mass i\/o terminal block firmware +21 more +23 moreThe Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29...5.5 Medium
- emerson deltav distributed control system sq controller firmware, deltav distributed control system sx controller firmware, se4002s1t2b6 high side 40-pin mass i\/o terminal block firmware +21 more +23 moreThe Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29...5.5 Medium
- emerson deltav distributed control system, deltav distributed control system sq controller firmware, deltav distributed control system sx controller firmware +22 more +24 moreThe Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29...5.5 Medium
- digitus inmailxInMailX Outlook Plugin < 3.22.0101 is vulnerable to Cross Site Scripting (XSS). InMailX...5.4 Medium
- jtekt nano 10gx tuc-1157 firmware, nano cpu tuc-6941 firmware, pc10b-p tcc-6373 firmware +14 more +16 moreJTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP...9.1 Critical
- jtekt nano 10gx tuc-1157 firmware, nano cpu tuc-6941 firmware, pc10b-p tcc-6373 firmware +14 more +16 moreJTEKT TOYOPUC PLCs through 2022-04-29 do not ensure data integrity. They utilize the...9.8 Critical
- ibm sterling partner engagement manager, sterling partner engagement manager on cloud +1 moreIBM Sterling Partner Engagement Manager 6.1, 6.2, and Cloud 22.2 do not limit the length of a...7.5 High
- ibm security verify information queueIBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which...3.1 Low
- ibm robotic process automationIBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user with access to the...4.2 Medium
- artica pfms pandora fms, pandora fms fms +1 moreRelative Path Traversal to Remote Code Execution in File Manager5.7 Medium
- zohocorp manageengine supportcenter plusIn Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to...9.8 Critical
- techvill paymoneyPaymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS)...5.4 Medium
- inoutscripts blockchain altexchangerInout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting (XSS)...5.4 Medium
- fruits bazar project bazarFruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recover_email...9.8 Critical
- garage management system project management systemOrange Station 1.0 was discovered to contain a SQL injection vulnerability via the username...9.8 Critical
- oretnom23 warehouse management systemWarehouse Management System v1.0 was discovered to contain a SQL injection vulnerability via the...7.5 High
- online fire reporting system project fire reporting systemOnline Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter.8.8 High
- tortall yasmAn issue was discovered in yasm version 1.3.0. There is a use-after-free in yasm_intnum_destroy()...5.5 Medium
- tortall yasmAn issue was discovered in yasm version 1.3.0. There is a use-after-free in...5.5 Medium
- tortall yasmAn issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in...5.5 Medium
- tortall yasmAn issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in inc_fopen() in...5.5 Medium
- Show moreLoading…