CVEs published August 22 to August 28, 2022
602 CVEs were published Aug 22 to Aug 28, 2022, 20 of them critical. CISA added 11 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 602
- Critical
- 20
- Added to CISA KEV
- 11
- Busiest day
- Thu, Aug 25 (232)
- Quietest day
- Sat, Aug 27 (9)
- August 22, 2022115 CVEs · 13 critical
- August 23, 202290 CVEs
- August 24, 202264 CVEs · 2 critical
- August 25, 2022232 CVEs · 2 critical
- August 26, 202256 CVEs
- August 27, 20229 CVEs · 1 critical
- August 28, 202236 CVEs · 2 critical
Added to CISA KEV 11
- CVE-2022-0028PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL FilteringPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2020-28949Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as fildrupal/core · pear/archive_tar
- CVE-2020-36193Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a relatpear/archive_tar
- CVE-2021-31010A deserialization issue was addressed through improved validation.Apple macOS · Apple watchOS
- CVE-2021-38406Delta Electronics DOPSoft 2 Out-of-Bounds WriteDelta Electronics DOPSoft
- CVE-2021-39226Snapshot authentication bypass in grafanagrafana · github.com/grafana/grafana
- CVE-2022-2294Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption viaGoogle Chrome
- CVE-2022-22963In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user toSpring Cloud Function · org.springframework.cloud:spring-cl…
- CVE-2022-24112apisix/batch-requests plugin allows overwriting the X-REAL-IP headerApache Software Foundation Apache APISIX
- CVE-2022-24706Remote Code Execution Vulnerability in PackagingApache Software Foundation Apache CouchDB
- CVE-2022-26352An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02.