Archive
July 2022
Vulnerabilities first published in this month (UTC), newest first.
1,993 results · Feed
-
Medium 4.9
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XML Publisher). Support…
-
Medium 6.1
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported …
-
Medium 5.9
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are a…
-
Medium 6.5
Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (c…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
High 7.3
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manag…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are aff…
-
High 7.5
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon). The supported …
-
High 8.2
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported versio…
-
Medium 4.4
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Su…
-
High 7.2
Vulnerability in the Oracle Database - Enterprise Edition Recovery component of Oracle Database Server. For supported v…
-
High 8.8
Vulnerability in the Oracle Database - Enterprise Edition Sharding component of Oracle Database Server. For supported v…
-
Medium 5.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 5.8
Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.3.…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that…
-
Medium 4.2
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Supported versions that are affected…
-
Low 2.7
Vulnerability in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server. Supported…
-
High 8.1
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications…
-
Medium 6.7
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: In…
-
Medium 5.3
CRLF injection in request headers
undici is an HTTP/1.1 client, written from scratch for Node.js. It is possible to inject CRLF sequences into request headers in undici in versions less than 5.7.1. A fix was released in version 5.8.0. Sanitizing all HTTP headers from untrusted sources to elim…
-
High 7.0CVE-2022-31144 Public exploit
Potential heap overflow in Redis
Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflow, and potentially remote code execution. This problem affects versions on the 7.x branch prior to 7…
-
Medium 5.5
The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (app…
-
Unscored —
DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lz…
-
Unscored —
DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in b…
-
Unscored —
DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_infl…
-
Unscored —
DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse eleme…
-
Unscored —
DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in g…
-
Unscored —
Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite …
-
Unscored —
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in t…
-
Unscored —
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in t…
-
Unscored —
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in t…
-
Unscored —
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a cross-site scripting (XSS) vulnerabi…
-
Unscored —
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows attackers to access the core log file and perform session…
-
Unscored —CVE-2022-34534 Scanner template
Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call.
-
Unscored —
Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows unauthenticated attackers to view internal paths and scri…
-
Unscored —
Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the body function at /web/api/v…
-
Unscored —
Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the generate_response function …
-
Unscored —
Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the handle_file_upload function…
-
Unscored —
Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the post function at /web/api/v…
-
Medium 6.5
TIBCO Data Virtualization Access Control Vulnerability
The Column Based Security component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains an easily exploitable vulnerability that allows a low privileged attacker with network access to obtain read acce…