July 2022

6 results · Clear filters · Feed

• High 8.8
  CVE-2022-1364 Exploited Public exploit EPSS 14%

  Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Jul 26, 2022

  KEV Apr 15, 2022
• High 8.8
  CVE-2022-1096 Exploited Public exploit EPSS 25%

  Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corru…

  Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  Jul 22, 2022

  KEV Mar 28, 2022
• Critical 9.8
  CVE-2022-26138 Exploited Public exploit EPSS 98%

  The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in t…

  Atlassian Questions For Confluence Web / CMS
  Jul 20, 2022

  KEV Jul 29, 2022
• Critical 9.8
  CVE-2022-35405 Exploited Public exploit EPSS 100%

  Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote cod…

  Jul 19, 2022

  KEV Sep 22, 2022
• High 8.8
  CVE-2022-33891 Exploited Public exploit EPSS 93%

  Apache Spark shell command injection vulnerability via Spark UI

  The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in H…

  Apache Software Foundation Apache Spark pyspark org.apache.spark:spark-parent_2.12 Maven PyPI
  Jul 18, 2022

  KEV Mar 7, 2023
• Critical 9.8
  CVE-2022-26352 Exploited · Ransomware Public exploit EPSS 91%

  An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form re…

  Jul 17, 2022

  KEV Aug 25, 2022