CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
KernelLinuxip: Fix data-races around sysctl_ip_prot_sock.No scoreKernelLinuxudp: Fix a data-race around sysctl_udp_l3mdev_accept.No scoreKernelLinuxipv4: Fix data-races around sysctl_fib_multipath_hash_fields.No scoreKernelLinuxtcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.No scoreKernelLinuxtcp: Fix data-races around sysctl_tcp_recovery.No scoreKernelLinuxtcp: Fix a data-race around sysctl_tcp_early_retrans.No scoreKernelLinuxtcp: Fix data-races around sysctl_tcp_slow_start_after_idle.No scoreKernelLinuxtcp: Fix data-races around sysctl_tcp_max_reordering.No scoreKernelLinuxgpio: gpio-xilinx: Fix integer overflowNo scoreKernelLinuxspi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfersNo scoreKernelLinuxKVM: Don't null dereference ops->destroyNo scoreKernelLinuxmm/mempolicy: fix uninit-value in mpol_rebind_policy()No scoreKernelLinuxcrypto: qat - fix memory leak in RSANo scoreKernelLinuxperf/x86/intel/lbr: Fix unchecked MSR access error on HSWNo scoreKernelLinuxcrypto: qat - add param check for DHNo scoreKernelLinuxcrypto: qat - add param check for RSANo scorelibredwgOSS-FuzzHeap-buffer-overflow in dynapi_set_helperNo scorelibredwgOSS-FuzzHeap-buffer-overflow in dwg_decode_LWPOLYLINE_privateNo scoreghostscriptOSS-FuzzUNKNOWN WRITE in pdfi_repair_fileNo scorelibredwgOSS-FuzzHeap-buffer-overflow in dwg_geojson_featureNo score- tem flex-1085, flex-1085 firmware +1 moreTEM FLEX-1085 reboot denial of service7.5 High
- gutenberg project gutenbergThe Gutenberg plugin through 13.7.3 for WordPress allows stored XSS by the Contributor role via...3.0 Low
oqscrates.iooqs's Post-Quantum Key Encapsulation Mechanism SIKE brokenNo scorelibredwgOSS-FuzzHeap-double-free in dwg_free_common_entity_dataNo score- hcl commerce, hcltechsw hcl commerce +1 moreHCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785)3.9 Low
- elliegridEllieGrid Android Application version 3.4.1 is vulnerable to Code Injection. The application...9.8 Critical
- trend micro apex one, worry-free business security, trend micro, inc. micro worry-free business security +1 more +3 moreA link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free...7.8 High
- trendmicro security, trend micro security(consumer) +1 moreTrend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information...7.1 High
- trend micro vpn proxy one pro (consumer), trendmicro vpn proxy one pro +1 moreTrend Micro VPN Proxy Pro version 5.2.1026 and below contains a vulnerability involving some...7.8 High
- dedecmsDedeCMS v5.7.95 was discovered to contain a remote code execution (RCE) vulnerability via the...9.8 Critical
- dlink dsl-3782 firmwareD-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function...8.8 High
- dlink dsl-3782 firmwareD-Link DSL-3782 v1.03 and below was discovered to contain a command injection vulnerability via...8.8 High
- dpgaspar flask-appbuilderPossible to infer sensitive information through query strings in Flask-AppBuilder2.7 Low
- prestashopRemote code execution in prestashop9.8 Critical
scrapyPyPIScrapy before 2.6.2 and 1.8.3 vulnerable to one proxy sending credentials to anotherNo score- hiby r3 pro firmware, r3 pro saber firmware +1 moreHiby R3 PRO firmware v1.5 to v1.7 was discovered to contain a file upload vulnerability via the...9.8 Critical
mezzio/mezzio-swoolePackagistmezzio-swoole Applications Using Diactoros Vulnerable to HTTP Host Header AttackNo score- typelevel fs2mTLS client verification is skipped in fs2 on Node.js9.1 Critical
- sonicwall hosted email security, email security +1 moreImproperly Implemented Security Check vulnerability in the SonicWall Hosted Email Security leads...7.5 High
- sonicwall analytics, analytics on-prem, gms +1 more +3 moreImproper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL...9.8 Critical
webminMageiaUpdated webmin packages fix security vulnerabilityNo score- chia network cat1 standardchia-blockchain tokens can be inflated to an arbitrary extent7.5 High
- sonicwall switch, sws12-10fpoe firmware, sws12-8 firmware +5 more +7 moreImproper neutralization of special elements used in a user input allows an authenticated...8.8 High
- autodesk design reviewA Double Free vulnerability allows remote attackers to execute arbitrary code through...8.8 High
- autodesk design reviewA maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced...7.8 High
- autodesk design reviewA maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through...7.8 High
- dogtagpkiAccess to external entities when parsing XML documents can lead to XML external entity (XXE)...7.5 High
- floating div project div, pluginlyspeaking floating div (wordpress plugin) +1 moreWordPress Floating Div plugin <= 3.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- western digital sweet b library, westerndigital sweet b +1 moreAlgorithm incorrectly returning error and Invalid unreduced value written to output buffer5.3 Medium
- western digital sweet b library, westerndigital sweet b +1 moreShared secret or Point multiplication of NIST P-256 points with X coordinate of zero5.3 Medium
- Show moreLoading…