Skip to content
OpenAdvisories

Archive

1 July 2022

Vulnerabilities first published on this day (UTC), newest first.

← June 2022 2022 / July /1 August 2022 →
  1. 184
  2. 28
  3. 33
  4. 438
  5. 532
  6. 695
  7. 748
  8. 825
  9. 91
  10. 102
  11. 11205
  12. 12186
  13. 1354
  14. 1468
  15. 1581
  16. 1612
  17. 1776
  18. 18100
  19. 19136
  20. 2097
  21. 2183
  22. 2273
  23. 234
  24. 243
  25. 25102
  26. 26115
  27. 27115
  28. 2893
  29. 2941
  30. 301
  31. 3112
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-31943

    Unrestricted Upload of File with Dangerous Type in MCMS

    MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability.

    net.mingsoft:ms-mcms Maven
  • Critical 9.8
    CVE-2022-31605

    Unsafe yaml deserialization in NVFlare

    NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.safe_load(). The deserialization of Untrusted Data, may allow an unprivileged network attacker to cause Remote Code Exe…

    NVIDIA NVIDIA FLARE nvflare PyPI
  • Critical 9.8
    CVE-2022-31604

    Unsafe deserialisation in the PKI implementation scheme of NVFlare

    NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pickle and no safe deserialization. The deserialization of Untrusted Data may allow an unprivileged network attacker to c…

    NVIDIA NVIDIA FLARE nvflare PyPI
  • Critical 9.9
    CVE-2022-2185 Public exploit Scanner template EPSS 77%

    A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior t…

    GitLab GitLab Web / CMS
  • Critical 9.1
    CVE-2022-2253

    Distributed Data Systems WebHMI OS Command Injection

    A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 may send OS commands to execute on the host server.

    Distributed Data Systems WebHMI
  • Critical 9.8
    CVE-2022-2274 Public exploit EPSS 48%

    RSA implementation bug in AVX512IFMA instructions

    The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happe…

    OpenSSL OpenSSL openssl edk2 Debian Ubuntu crates.io