Archive
July 2022
Vulnerabilities first published in this month (UTC), newest first.
344 results · Clear filters · Feed
-
High 8.0
WAVLINK WN535K2/WN535K3 nightled.cgi os command injection
A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument start_hour leads to os command injection. The exploit has bee…
-
High 8.0
WAVLINK WN535K2/WN535K3 os command injection
A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disc…
-
High 7.1
keylime %post scriplet allows for privilege escalation from keylime user to root
A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime user to root. This issue affects: openSUSE Tumbleweed keylime versions prior to 6.4.2-1.1.
-
High 7.7
TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling
A remote attacker with general user privilege can send a message to Teamplus Pro’s chat group that exceeds message size limit, to terminate other recipients’ Teamplus Pro chat process.
-
High 7.5
Data Systems Consulting Co., Ltd. BPM - XML External Entity (XXE) Injection
Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input. An unauthenticated remote attacker can perform XML injection attack to access arbitrary system files.
-
High 7.5
In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc becaus…
-
High 8.2
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
High 7.5
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar…
-
High 7.5
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that …
-
High 7.5
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Support…
-
High 7.5
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions…
-
High 7.8
Vulnerability in the Oracle Crystal Ball product of Oracle Construction and Engineering (component: Installation). Supp…
-
High 7.2
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Search). Supported versio…
-
High 7.1
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: In…
-
High 7.4
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). Supported ve…
-
High 8.1
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework…
-
High 7.6
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is af…
-
High 7.3
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manag…
-
High 7.5
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon). The supported …
-
High 8.2
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported versio…
-
High 7.2
Vulnerability in the Oracle Database - Enterprise Edition Recovery component of Oracle Database Server. For supported v…
-
High 8.8
Vulnerability in the Oracle Database - Enterprise Edition Sharding component of Oracle Database Server. For supported v…
-
High 8.1
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications…
-
High 7.0CVE-2022-31144 Public exploit
Potential heap overflow in Redis
Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7…
-
High 7.5
IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to …
-
High 7.1
IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injecti…
-
High 7.5
Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attacke…
-
High 7.5
Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recov…
-
High 7.8
Use After Free in gpac/gpac
Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV.
-
High 7.3CVE-2022-2467 Scanner template
SourceCodester Garage Management System login.php sql injection
A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username with the input 1@a.com' AND (SELECT 6427 FROM (…
-
High 7.8CVE-2022-30526 Public exploit
A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 …
-
High 7.5
Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets
The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are re…
-
High 7.8
Integer Overflow or Wraparound in gpac/gpac
Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV.
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…