Skip to content
OpenAdvisories

Archive

July 2022

Vulnerabilities first published in this month (UTC), newest first.

84 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-34265 Public exploit EPSS 74%

    Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection

    An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind cho…

  • Unscored —
    CVE-2022-34913 Public exploit

    md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters t…

  • Critical 9.9
    CVE-2022-2185 Public exploit Scanner template EPSS 77%

    A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior t…

  • Critical 9.8
    CVE-2022-2274 Public exploit EPSS 48%

    RSA implementation bug in AVX512IFMA instructions

    The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happe…