Archive
July 2022
Vulnerabilities first published in this month (UTC), newest first.
1,993 results · Feed
-
Critical 9.1
JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol (configurable on …
-
Unscored —
JTEKT TOYOPUC PLCs through 2022-04-29 do not ensure data integrity. They utilize the unauthenticated CMPLink/TCP protoc…
-
Unscored —
A memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c function in how the A…
-
Unscored —
A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel. This flaw …
-
High 7.5
IBM Sterling Partner Engagement Manager 6.1, 6.2, and Cloud 22.2 do not limit the length of a connection which could ca…
-
Low 3.1
IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker …
-
Medium 4.2
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user with access to the local host (client mach…
-
Medium 5.7
Relative Path Traversal to Remote Code Execution in File Manager
Pandora FMS v7.0NG.760 and below allows a relative path traversal in File Manager where a privileged user could upload a .php file outside the intended images directory which is restricted to execute the .php file. The impact could lead to a Remote Code Execu…
-
Unscored —
In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. (An API …
-
Unscored —
Inout Blockchain AltExchanger v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the compo…
-
Unscored —
Paymoney v3.3 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the first_nam…
-
Unscored —
Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recover_email parameter at user_passw…
-
Unscored —
Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
-
Unscored —
Warehouse Management System v1.0 was discovered to contain a SQL injection vulnerability via the cari parameter.
-
Unscored —
Online Fire Reporting System 1.0 is vulnerable to SQL Injection via the date parameter.
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasm_intnum_destroy() in libyasm/intnum.c.
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a use-after-free in expr_traverse_nodes_post() in libyasm/expr.…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr__copy_except() in libya…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in inc_fopen() in modules/preprocs/nasm/…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmacro() in modules/prepro…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_smacro() in modules/prepro…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a use-after-free in pp_getline() in modules/preprocs/nasm/nasm-…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a use-after-free in error() in modules/preprocs/nasm/nasm-pp.c.
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in if_condition() in modules/preproc…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in nasm_parser_directive() in module…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in find_cc() in modules/preprocs/nas…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmac_params() in modules/p…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in hash() in modules/preprocs/nasm/n…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in do_directive() in modules/preproc…
-
Unscored —
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr_get_intnum() in libyasm…
-
Unscored —
An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread() in stream.c:1538.
-
Unscored —
An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_malloc() in nasmlib/alloc.c.
-
Unscored —
An issue was discovered in lrzip version 0.641. There are memory leaks in fill_buffer() in stream.c.
-
Unscored —
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer o…
-
Unscored —
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer d…
-
Unscored —
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer d…
-
Unscored —
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer d…
-
Unscored —
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer d…
-
Unscored —
An issue was discovered in mjs(mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer ov…
-
Unscored —
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer d…