CVEs published July 4, 2022
38 CVEs were published on July 4, 2022: 1 critical, 3 high.
- Published
- 38
- Critical
- 1
- High
- 3
- Medium
- 5
- Low
- 0
- Unrated
- 29
- Now in CISA KEV
- 0
- Fix available
- 11
Most affected products
- Cybozu Garoon
- 15
- NVIDIA DGX A100
- 5
- OMRON Machine automation controller NJ series, Machine auto…
- 3
- Ninja Forms Contact Form – The Drag and Drop Form Builder f…
- 2
- django
- 1
- Gallery – Image and Video Gallery with Thumbnails
- 1
- hpjansson/chafa
- 1
- Import any XML or CSV File to WordPress
- 1
- KDDI HOME SPOT CUBE2
- 1
- microweber/microweber
- 1
Critical 1
High 3
- CVE-2022-31600NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this NVIDIA DGX A100
- CVE-2022-31599NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialiNVIDIA DGX A100
- CVE-2022-33971Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, MachiOMRON Machine automation controller NJ series, Machine auto…
Medium, low and unrated 34
- CVE-2022-34918An issue was discovered in the Linux kernel through 5.18.9.
- CVE-2022-34829Zoho ManageEngine ADSelfService Plus before 6203 allows a denial of service (application restart) via a crafted payload to the Mobile App De
- CVE-2022-31603NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global dataNVIDIA DGX A100
- CVE-2022-31602NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploNVIDIA DGX A100
- CVE-2022-31601NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker to cause an out-of-boNVIDIA DGX A100
- CVE-2022-33171The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a FindOneOptions object.typeorm
- CVE-2022-2268WP All Import < 3.6.8 - Admin+ Arbitrary File UploadImport any XML or CSV File to WordPress
- CVE-2022-1967WP Championship < 9.3 - Multiple CSRFWP Championship
- CVE-2022-1946Gallery < 2.0.0 - Reflected Cross-Site ScriptingGallery – Image and Video Gallery with Thumbnails
- CVE-2022-1301WP Contact Slider < 2.4.7 - Editor+ Stored Cross-Site ScriptingWP Contact Slider
- CVE-2022-0250Redirection for Contact Form 7 < 2.5.0 - Reflected Cross-Site ScriptingRedirection for Contact Form
- CVE-2021-25066Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting via ImportNinja Forms Contact Form – The Drag and Drop Form Builder f…
- CVE-2021-25056Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site ScriptingNinja Forms Contact Form – The Drag and Drop Form Builder f…
- CVE-2022-2300Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber/microweber
- CVE-2022-2301Buffer Over-read in hpjansson/chafahpjansson/chafa
- CVE-2022-29892Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to repeatedly displaCybozu Garoon
- CVE-2022-29513Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote authenticated attacker with an administratiCybozu Garoon
- CVE-2022-29484Operation restriction bypass vulnerability in Space of Cybozu Garoon 4.0.0 to 5.9.0 allows a remote authenticated attacker to delete the datCybozu Garoon
- CVE-2022-29471Browse restriction bypass vulnerability in Bulletin of Cybozu Garoon allows a remote authenticated attacker to obtain the data of Bulletin.Cybozu Garoon
- CVE-2022-29467Address information disclosure vulnerability in Cybozu Garoon 4.2.0 to 5.5.1 allows a remote authenticated attacker to obtain some data of ACybozu Garoon
- CVE-2022-28718Operation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1 allow a remote authenticated attacker to alter the daCybozu Garoon
- CVE-2022-28713Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of FacilityCybozu Garoon
- CVE-2022-28692Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the datCybozu Garoon
- CVE-2022-27807Improper input validation vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to disable to add CatCybozu Garoon
- CVE-2022-27803Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data ofCybozu Garoon
- CVE-2022-27661Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the dCybozu Garoon
- CVE-2022-27627Cross-site scripting vulnerability in Organization's Information of Cybozu Garoon 4.10.2 to 5.5.1 allows a remote attacker to execute an arbCybozu Garoon
- CVE-2022-26368Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authentiCybozu Garoon
- CVE-2022-26054Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data Cybozu Garoon
- CVE-2022-26051Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the datCybozu Garoon
- CVE-2022-33948HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server.KDDI HOME SPOT CUBE2
- CVE-2022-33208Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, MachiOMRON Machine automation controller NJ series, Machine auto…
- CVE-2022-32284Use of insufficiently random values vulnerability exists in Vnet/IP communication module VI461 of YOKOGAWA Wide Area Communication Router (WYokogawa Electric Communication Module for Wide Area Commun…
- CVE-2022-34265An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6.django