Skip to content
OpenAdvisories

Archive

18 July 2022

Vulnerabilities first published on this day (UTC), newest first.

100 results · Feed

  • Unscored —

    RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 implements the incorrect exception priotrity when accessi…

  • Unscored —

    The component mcontrol.action in RISCV ISA Sim commit ac466a21df442c59962589ba296c702631e041b5 contains the incorrect m…

  • Unscored —

    CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b imp…

  • Unscored —

    The *tval of ecall/ebreak in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a was discovered to be incorrect.

  • Unscored —

    CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a treats non-standard fence instructions as illegal which can affect…

  • Unscored —

    CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a implements an incorrect exception type when an illegal virtual add…

  • Unscored —

    CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b imp…

  • Unscored —

    The mstatus.sd field in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a does not update when the mstatus.fs field …

  • Unscored —

    CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted det instructions rather …

  • Unscored —

    CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted sfence.vma instructions …

  • Unscored —

    Rocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain insufficient cryptography via the…

  • Critical 9.8

    Hudson XML API susceptible to External Entity Injection Vunerability prior to v3.3.2

    Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 allows XXE attacks.

  • Unscored —

    HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588.

  • Unscored —

    HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273.

  • Unscored —

    Nginx NJS v0.7.5 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_…

  • Unscored —

    Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_value_to_number at src/njs_value_conversion…

  • Unscored —

    Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_djb_hash at src/njs_djb_hash.c.

  • Unscored —

    Nginx NJS v0.7.4 was discovered to contain an out-of-bounds read via njs_scope_value at njs_scope.h.

  • Unscored —

    Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_utf8_next at src/njs_utf8.h.

  • Unscored —

    Nginx NJS v0.7.4 was discovered to contain a segmentation violation via njs_value_property at njs_value.c.

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

  • Low 2.5

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

  • High 7.8
    CVE-2022-28672 Public exploit

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

  • Low 3.3

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2…

  • High 7.6

    An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise p…

  • Medium 6.5

    IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site request forgery w…