CVE-2021-3800
- EPSS 0.06%
- Veröffentlicht 23.08.2022 16:15:09
- Zuletzt bearbeitet 21.11.2024 06:22:28
A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.
CVE-2022-35278
- EPSS 7.5%
- Veröffentlicht 23.08.2022 15:15:11
- Zuletzt bearbeitet 21.11.2024 07:11:01
In Apache ActiveMQ Artemis prior to 2.24.0, an attacker could show malicious content and/or redirect users to a malicious URL in the web console by using HTML in the name of an address or queue.
CVE-2022-37434
- EPSS 92.3%
- Veröffentlicht 05.08.2022 07:15:07
- Zuletzt bearbeitet 30.05.2025 20:15:30
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib s...
CVE-2022-34526
- EPSS 0.31%
- Veröffentlicht 29.07.2022 23:15:08
- Zuletzt bearbeitet 21.11.2024 07:09:42
A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted TIFF file parsed by the "tiffsplit" or "tiffcrop" utilities.
CVE-2022-36946
- EPSS 4.54%
- Veröffentlicht 27.07.2022 20:15:08
- Zuletzt bearbeitet 05.05.2025 16:15:18
nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encou...
CVE-2022-36879
- EPSS 0.03%
- Veröffentlicht 27.07.2022 04:15:10
- Zuletzt bearbeitet 05.05.2025 16:15:17
An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
CVE-2022-21569
- EPSS 0.38%
- Veröffentlicht 19.07.2022 22:15:13
- Zuletzt bearbeitet 21.11.2024 06:44:58
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple prot...
CVE-2022-21547
- EPSS 0.3%
- Veröffentlicht 19.07.2022 22:15:12
- Zuletzt bearbeitet 21.11.2024 06:44:55
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple pro...
CVE-2022-21549
- EPSS 0.2%
- Veröffentlicht 19.07.2022 22:15:12
- Zuletzt bearbeitet 21.11.2024 06:44:56
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily e...
CVE-2022-21550
- EPSS 39.13%
- Veröffentlicht 19.07.2022 22:15:12
- Zuletzt bearbeitet 21.11.2024 06:44:56
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.36 and prior, 7.5.26 and prior, 7.6.22 and prior and and 8.0.29 and prior. Difficult to exploit vulnerability allow...