12 July 2022

5 results · Clear filters · Feed

• Critical 9.8
  CVE-2022-35628 EPSS 27%

  SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"

  A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.

  in2code/lux Packagist
  Jul 12, 2022
• Critical 9.8
  CVE-2022-1737

  Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write

  Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial…

  Pyramid Solutions EtherNet/IP Adapter DLL Kit (EIPA) EtherNet/IP Scanner DLL Kit (EIPS) EtherNet/IP Adapter Development Kit (EADK)
  Jul 12, 2022
• Critical 9.9
  CVE-2022-1025

  Improper access control allows admin privilege escalation in Argo CD

  All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level.

  github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go
  Jul 12, 2022
• Critical 10.0
  CVE-2022-34819

  A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions <…

  Siemens SIMATIC CP 1243-8 IRC SIMATIC CP 1542SP-1 IRC SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL ICS / OT
  Jul 12, 2022
• Critical 9.6
  CVE-2022-26649

  A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions…

  Siemens SCALANCE X202-2P IRT PRO SCALANCE X206-1LD SCALANCE X204-2FM ICS / OT
  Jul 12, 2022