CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- clusterlabs booth, debian linux, fedoraproject fedora +2 moreThe authfile directive in the booth config file is ignored, preventing use of authentication in...6.5 Medium
- feehi cmsFeehi CMS Cross-site Scripting5.4 Medium
- fossil-scm fossilFossil 2.18 on Windows allows attackers to cause a denial of service (daemon crash) via an XSS...5.5 Medium
- kabir-m-alhasan student management systemA stored cross-site scripting (XSS) vulnerability in /nav_bar_action.php of Student Management...5.4 Medium
- shopwarePersistent cross site scripting in customer module in Shopware5.4 Medium
- getlaminas laminas-diactorosHTTP Host Header Attack Vulnerability in laminas-diactoros7.2 High
- helpsystems goanywhere managed file transferA path traversal vulnerability exists within GoAnywhere MFT before 6.8.3 that utilize self...6.5 Medium
- veritas netbackupIn Veritas NetBackup OpsCenter, a DOM XSS attack can occur. This affects 8.x through 8.3.0.2, 9.x...5.4 Medium
- veritas netbackupIn Veritas NetBackup OpsCenter, an attacker with local access to a NetBackup OpsCenter server...9.3 Critical
- veritas netbackupIn Veritas NetBackup OpsCenter, an unauthenticated remote attacker may be able to perform remote...9.8 Critical
- veritas netbackupIn Veritas NetBackup OpsCenter, an unauthenticated remote attacker may compromise the host by...9.8 Critical
- veritas netbackupIn Veritas NetBackup OpsCenter, a hard-coded credential exists that could be used to exploit the...8.4 High
- veritas netbackupIn Veritas NetBackup OpsCenter, certain endpoints could allow an unauthenticated remote attacker...4.3 Medium
- veritas netbackupIn Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may...9.9 Critical
- veritas netbackupIn Veritas NetBackup, an attacker with unprivileged local access to a NetBackup Client may send...7.8 High
- veritas netbackupIn Veritas NetBackup, the NetBackup Client allows arbitrary command execution from any remote...9.0 Critical
- aveva platform common services (pcs) portal, platform common services, batch management +5 more +7 moreAVEVA PCS Portal Uncontrolled Search Path Element7.3 High
- visam vbase pro-rt/ server-rt (web remote), vbase web-remote +1 moreVISAM VBASE Editor Cross Site Scripting5.3 Medium
- visam vbase pro-rt/ server-rt (web remote), vbase web-remote +1 moreVISAM VBASE Editor Improper Access Control7.4 High
- visam vbase pro-rt/ server-rt (web remote), vbase web-remote +1 moreVISAM VBASE Editor Improper Restriction of XML5.9 Medium
- rockwell automation controllogix 5570 controllers, armor compact guardlogix 5370 controllers, armor guardlogix safety controllers +13 more +15 moreRockwell Automation CompactLogix 5370 and ControlLogix 5570 Controllers Improper Input Validation5.8 Medium
- patlite nhl-fb2 firmware, nhp-fb2 firmware +1 moreOn Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by...7.5 High
- cuppacmsCuppa CMS v1.0 was discovered to contain a local file inclusion (LFI) vulnerability via the...7.5 High
- barangay management system project management systemBarangay Management System v1.0 was discovered to contain a remote code execution (RCE)...7.2 High
drupal/tagifyPackagistThis module provides a widget to transform entity reference fields into a more user-friendly tags input component with a great performance. The module doesn't sufficiently check access for the add ope…No scoredrupal/pdf_apiPackagistThis module enables you to generate PDF versions of content. Some installations of the module make use of the dompdf/dompdf third-party dependency. Security vulnerabilities exist for versions of dompd…No score- bxslider wp project wp, nico amarilla bxslider wp (wordpress plugin) +1 moreWordPress BxSlider WP plugin <= 2.0.0 - Authenticated Cross-Site Scripting (XSS) vulnerability5.4 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- hestiacp hestiacp/hestiacp, control panel +1 moreOS Command Injection in hestiacp/hestiacp9.9 Critical
- gpac, gpac gpac/gpac +1 moreNULL Pointer Dereference in gpac/gpac5.7 Medium
- jenkins lucene-search, jenkins project lucene-search plugin +1 moreJenkins Lucene-Search Plugin vulnerable to reflected (XSS) cross-site scripting6.1 Medium
- jenkins coverity, jenkins project coverity plugin +1 moreMissing permission check in Coverity Plugin allows capturing credentials8.1 High
- jenkins coverity, jenkins project coverity plugin +1 moreJenkins Coverity Plugin vulnerable to cross-site request forgery (CSRF)8.8 High
- jenkins coverity, jenkins project coverity plugin +1 moreJenkins Coverity Plugin allows attackers with Overall/Read permission to enumerate credentials IDs4.3 Medium
- jenkins buckminster, jenkins project buckminster plugin +1 moreJenkins Buckminster Plugin does not perform a permission check in a method implementing form validation4.3 Medium
- jenkins google cloud backup, jenkins project google cloud backup plugin +1 moreJenkins Google Cloud Backup Plugin allows attackers with Overall/Read permission to request a manual backup.4.3 Medium
- jenkins google cloud backup, jenkins project google cloud backup plugin +1 moreCSRF vulnerability in Jenkins Google Cloud Backup Plugin8.0 High
- jenkins android signing, jenkins project android signing plugin +1 moreJenkins Android Signing Plugin allows attackers to check whether attacker-specified file patterns match workspace contents4.3 Medium
- jenkins files found trigger, jenkins project files found trigger plugin +1 moreJenkins Files Found Trigger Plugin allows attackers to check for existence of attacker-specified file path on Jenkins controller file system4.3 Medium
- jenkins openstack heat, jenkins project openstack heat plugin +1 moreJenkins Openstack Heat Plugin does not perform permission checks in methods implementing form validation4.3 Medium
- jenkins openstack heat, jenkins project openstack heat plugin +1 moreMissing permission checks in Jenkins openstack-heat Plugin4.3 Medium
- jenkins openstack heat, jenkins project openstack heat plugin +1 moreCSRF vulnerability in Jenkins openstack-heat Plugin6.5 Medium
- jenkins lucene-search, jenkins project lucene-search plugin +1 moreLucene-Search Plugin does not perform permission checks in several HTTP endpoints5.4 Medium
- jenkins openshift deployer, jenkins project openshift deployer plugin +1 moreMissing permission check in Jenkins OpenShift Deployer Plugin6.5 Medium
- jenkins openshift deployer, jenkins project openshift deployer plugin +1 moreCSRF vulnerability in Jenkins OpenShift Deployer Plugin6.5 Medium
- jenkins openshift deployer, jenkins project openshift deployer plugin +1 moreMissing permission check in Jenkins OpenShift Deployer Plugin6.5 Medium
- jenkins openshift deployer, jenkins project openshift deployer plugin +1 moreCSRF vulnerability in Jenkins OpenShift Deployer Plugin6.5 Medium
- jenkins maven metadata, jenkins project maven metadata plugin for jenkins ci server plugin +1 moreStored XSS vulnerability in Jenkins Maven Metadata Plugin for Jenkins CI server plugin5.4 Medium
- jenkins repository connector, jenkins project repository connector plugin +1 moreJenkins Repository Connector Plugin does not perform a permission check in a method implementing form validation4.3 Medium
- Show moreLoading…