Archive
June 2022
Vulnerabilities first published in this month (UTC), newest first.
2,191 results · Feed
-
High 7.8
A vulnerability has been identified in Xpedition Designer VX.2.10 (All versions < VX.2.10 Update 13), Xpedition Designe…
-
Unscored —
A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC …
-
Medium 4.9
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application discl…
-
Critical 9.8
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does …
-
High 7.2
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does …
-
High 8.8
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected software does not…
-
Medium 6.1CVE-2022-29034 EPSS 29%
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An error message pop up wind…
-
Medium 5.9
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An attacker in machine-in-th…
-
Unscored —
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is …
-
Unscored —
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2). Affected application is …
-
Unscored —
A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions…
-
Unscored —
A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versio…
-
High 7.3
Cross-site Scripting (XSS) - Stored in nocodb/nocodb
Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+.
-
High —
Apache Flume vulnerable to a JNDI RCE in JMSSource
Apache Flume versions 1.4.0 through 1.9.0 are vulnerable to a remote code execution (RCE) attack when a configuration uses a JMS Source with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JN…
-
Unscored —
Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' ve…
-
Unscored —
Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, whi…
-
Unscored —
Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v…
-
Unscored —
Directory traversal vulnerability in T&D Data Server (Japanese Edition) Ver.2.22 and earlier, T&D Data Server (English …
-
Unscored —
Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and ear…
-
Unscored —
Cross-site scripting vulnerability in SHIRASAGI v1.0.0 to v1.14.2, and v1.15.0 allows a remote attacker to inject an ar…
-
Unscored —
'Mobaoku-Auction&Flea Market' App for iOS versions prior to 5.5.16 improperly verifies server certificates, which may a…
-
Unscored —
Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using 'File Sanitization Library' 1.043…
-
Unscored —
Heap-based buffer overflow exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.…
-
Unscored —
An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database inf…
-
Unscored —CVE-2022-31446 EPSS 35%
Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability v…
-
Unscored —
Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /rep…
-
High 8.1
Splunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation
In Splunk Enterprise and Universal Forwarder versions before 9.0, the Splunk command-line interface (CLI) did not validate TLS certificates while connecting to a remote Splunk platform instance by default. After updating to version 9.0, see Configure TLS host…
-
High 8.4CVE-2022-22057 Public exploit
Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timel…
-
Unscored —
The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a ma…
-
Unscored —
Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP fi…
-
Unscored —
An issue was discovered in Couchbase Server before 7.0.4. The Backup Service log leaks unredacted usernames and documen…
-
Unscored —
An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permi…
-
Unscored —
Couchbase Server 5.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor.
-
Unscored —
XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-contro…
-
Medium 6.6
Electron's AutoUpdater module fails to validate certain nested components of the bundle
Electron is a framework for writing cross-platform desktop applications using JavaScript (JS), HTML, and CSS. A vulnerability in versions prior to 18.0.0-beta.6, 17.2.0, 16.2.6, and 15.5.5 allows attackers who have control over a given apps update server / up…
-
Low 2.2
Exposure of Resource to Wrong Sphere in Electron
Electron is a framework for writing cross-platform desktop applications using JavaScript (JS), HTML, and CSS. A vulnerability in versions prior to 18.0.0-beta.6, 17.2.0, 16.2.6, and 15.5.5 allows a renderer with JS execution to obtain access to a new renderer…
-
Unscored —
Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor.
-
Unscored —
An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during…
-
Unscored —
An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing internal settings.
-
Unscored —
An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager coo…