June 2022

10 results · Clear filters · Feed

• High 7.5
  CVE-2022-33082 Public exploit

  Denial of service in Open Policy Agent

  An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (DoS) via a crafted input.

  opa github.com/open-policy-agent/opa Wolfi Go
  Jun 30, 2022
• High 8.1
  CVE-2022-31101 Public exploit Scanner template EPSS 23%

  SQL Injection in prestashop/blockwishlist

  prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are …

  PrestaShop blockwishlist prestashop/blockwishlist Packagist
  Jun 27, 2022
• High 7.5
  CVE-2022-28171 Public exploit EPSS 52%

  The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to …

  Hikvision DS-A71024/48R-CVS,DS-A72024/48R-CVS DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D
  Jun 27, 2022
• High 7.5
  CVE-2022-31626 Public exploit EPSS 58%

  mysqlnd/pdo password buffer overflow

  In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigg…

  PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
  Jun 16, 2022
• High 8.8
  CVE-2022-33140 Public exploit

  Improper Neutralization of Command Elements in Shell User Group Provider

  The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUs…

  Apache Software Foundation Apache NiFi Apache NiFi Registry org.apache.nifi:nifi Maven
  Jun 15, 2022
• High 7.5
  CVE-2021-30327 Public exploit

  Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdra…

  Qualcomm Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music
  Jun 14, 2022
• High 8.4
  CVE-2022-22057 Public exploit

  Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timel…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Jun 14, 2022
• High 8.1
  CVE-2022-25845 Public exploit EPSS 19%

  Deserialization of Untrusted Data

  The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking remote serve…

  com.alibaba:fastjson Maven
  Jun 10, 2022
• High 8.8
  CVE-2022-29778 Public exploit

  D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the para…

  Jun 3, 2022
• High 7.8
  CVE-2022-30190 Exploited · Ransomware Public exploit EPSS 99%

  Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

  A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. Th…

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jun 1, 2022

  KEV Jun 14, 2022