CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- western digital sweet b library, westerndigital sweet b +1 morePoint Compression/Decompression of NIST P-256 points with X coordinate of zero5.3 Medium
- western digital sweet b library, westerndigital sweet b +1 moreSweet-B Library: Point compress/decompress using the wrong bit for sign5.3 Medium
- rapid7 velociraptorXSS in User Interface4.8 Medium
- rapid7 velociraptorFilesystem race on temporary files5.5 Medium
- rapid7 velociraptorUnsafe HTML Injection in Artifact Collection Report6.1 Medium
- rapid7 velociraptorVelociraptor Client ID Spoofing5.4 Medium
- garage management system project management system, sourcecodester garage management system +1 moreSourceCodester Garage Management System createUser.php cross site scripting3.5 Low
- garage management system project management system, sourcecodester garage management system +1 moreSourceCodester Garage Management System createUser.php access control6.3 Medium
- garage management system project management system, sourcecodester garage management system +1 moreSourceCodester Garage Management System edituser.php sql injection6.3 Medium
- autodesk autocad, autocad advance steel, autocad architecture +7 more +9 moreParsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated...7.8 High
- autodesk fusion 360An attacker can force the victim’s device to perform arbitrary HTTP requests in WAN through a...7.8 High
- ibm powervm vios, powervm virtual i\/o server +1 moreIBM PowerVM VIOS 3.1 could allow a remote attacker to tamper with system configuration or cause a...9.1 Critical
- linux kernel, netapp h300s firmware, h410c firmware +15 more +17 moreThe Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (...7.8 High
- eclipse californium, the eclipse foundation eclipse californium +1 moreEclipse Californium denial of service (DoS) via Datagram Transport Layer Security (DTLS) handshake on parameter mismatch7.5 High
- inavitas solar logSQL Injection in Inavitas Solar Log9.4 Critical
- runatlantis atlantisTiming Attack7.5 High
- google llc play services sdk, google play services software development kit +1 moreIncorrect signature verification on Google play-services-basement in Google Play SDK5.7 Medium
mrubyOSS-FuzzUse-of-uninitialized-value in udivNo scorefluent-bitOSS-FuzzHeap-use-after-free in jsmn_parseNo scorelcmsOSS-FuzzUse-of-uninitialized-value in _LUTeval16No scorelcmsOSS-FuzzHeap-use-after-free in cmsFreeNamedColorListNo score- debian linux, fedoraproject fedora, libtiff +2 more +4 moreA stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This...6.5 Medium
- tp-link tl-r473g firmwareTP-LINK TL-R473G 2.0.1 Build 220529 Rel.65574n was discovered to contain a remote code execution...9.8 Critical
- png2webp project png2webppng2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This...5.5 Medium
- simplenetwork project simplenetworkSimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to...7.5 High
- picoc project picocPicoC v3.2.2 was discovered to contain a NULL pointer dereference at variable.c.5.5 Medium
- apple ipados, macos, tvos +2 more +4 moreThe issue was addressed with improved UI handling. This issue is fixed in watchOS 8.7, tvOS 15.6,...6.5 Medium
- apple ipados, macos, tvos +2 more +4 moreAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...8.8 High
- barangay management system project management systemBarangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the...8.8 High
- global-workqueue project global-workqueue, reqmon project reqmon, wmagent project wmagent +1 more +3 moreWMAgent arbitrary code execution via a crafted dbs-client package9.8 Critical
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3, 7.4, and 7.5 is vulnerable to local privilege escalation if this could be...7.4 High
- realtek rtl819x software development kitRealtek rtl819x-SDK before v3.6.1 allows command injection over the web interface.8.8 High
- advanced school management system project school management systemAdvanced School Management System v1.0 was discovered to contain a cross-site scripting (XSS)...4.8 Medium
- horde groupware, debian linux +1 moreHorde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which...8.0 High
- squirrel-lang squirrel, fedoraproject fedora +1 moresqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the...10.0 Critical
- dptech vpnDPTech VPN v8.1.28.0 was discovered to contain an arbitrary file read vulnerability.7.5 High
- opensourcepos open source point of saleOpen Source Point of Sale v3.3.7 was discovered to contain an arbitrary file upload vulnerability...7.2 High
- gnome libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morePossible cross-site scripting vulnerability in libxml after commit 960f0e2.6.1 Medium
- mb.miniaudioplayer project mb.miniaudioplayerWordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files is prone to multiple...7.5 High
- nodepdf project nodepdfInput passed to the Pdf() function is shell escaped and passed to child_process.exec() during PDF...9.8 Critical
- zulipIn zulip before 1.3.12, deactivated users could access messages if SSO was enabled.7.5 High
- zulipIn zulip before 1.3.12, bot API keys were accessible to other users in the same realm.4.3 Medium
- honeywell saia pg5 controls suiteSaia Burgess Controls (SBC) PCD through 2022-05-06 allows Authentication bypass. According to...8.1 High
- honeywell saia pg5 controls suiteSaia Burgess Controls (SBC) PCD through 2022-05-06 uses a Broken or Risky Cryptographic Algorithm...4.3 Medium
- honeywell safety manager firmwareHoneywell Experion PKS Safety Manager through 2022-05-06 has Missing Authentication for a...7.5 High
- honeywell safety manager firmwareHoneywell Experion PKS Safety Manager 5.02 uses Hard-coded Credentials. According to FSCT-2022...4.6 Medium
- honeywell safety manager firmwareHoneywell Experion PKS Safety Manager (SM and FSC) through 2022-05-06 has Insufficient...9.8 Critical
- honeywell safety manager firmwareHoneywell Experion PKS Safety Manager 5.02 has Insufficient Verification of Data Authenticity....6.8 Medium
- automattic automattic/mongoose, mongoosejs mongoose +1 morePrototype Pollution in automattic/mongoose7.0 High
- kippo-graph project kippo-graphIn kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in $file_link...6.4 Medium
- Show moreLoading…