CVEs published June 10, 2022
42 CVEs were published on June 10, 2022: 0 critical, 12 high.
- Published
- 42
- Critical
- 0
- High
- 12
- Medium
- 8
- Low
- 6
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- PHPList
- 8
- IBM Spectrum Copy Data Management
- 5
- convert-svg-core
- 2
- Dell SupportAssist Consumer
- 2
- com.alibaba:fastjson
- 1
- couchbase
- 1
- Dell SupportAssist Client Commercial
- 1
- Dell SupportAssist Client Consumer
- 1
- gatsby-plugin-mdx
- 1
- git-promise
- 1
High 12
- CVE-2022-25851Denial of Service (DoS)jpeg-js
- CVE-2022-25845Deserialization of Untrusted Datacom.alibaba:fastjson
- CVE-2022-24278Directory Traversalconvert-svg-core
- CVE-2022-24376Command Injectiongit-promise
- CVE-2022-29095Dell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client Commercial versions (3.1.1 and prior) contain aDell SupportAssist Consumer
- CVE-2022-29094Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versionDell SupportAssist Client Consumer
- CVE-2022-29093Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versionDell SupportAssist Client Commercial
- CVE-2022-29092Dell SupportAssist Client Consumer versions (3.11.0 and versions prior) and Dell SupportAssist Client Commercial versions (3.2.0 and versionDell SupportAssist Consumer
- CVE-2022-24429Arbitrary Code Injectionconvert-svg-core
- CVE-2022-25863Deserialization of Untrusted Datagatsby-plugin-mdx
- CVE-2017-20029PHPList Edit Subscription index.php sql injectionPHPList
- CVE-2022-2042Use After Free in vim/vimvim/vim
Medium, low and unrated 30
- CVE-2021-41756dynamicMarkt <= 3.10 is affected by SQL injection in the kat parameter of index.php.
- CVE-2021-41755dynamicMarkt <= 3.10 is affected by SQL injection in the kat1 parameter of index.php.
- CVE-2021-41754dynamicMarkt <= 3.10 is affected by SQL injection in the parent parameter of index.php.
- CVE-2022-21211Denial of Service (DoS)posix
- CVE-2022-32981An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms.
- CVE-2022-31287An issue was discovered in Bento4 v1.2.
- CVE-2022-31285An issue was discovered in Bento4 1.2.
- CVE-2022-31282Bento4 MP4Dump v1.2 was discovered to contain a segmentation violation via an unknown address at /Source/C++/Core/Ap4DataBuffer.cpp:175.
- CVE-2018-17240There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sens
- CVE-2022-31402ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/webservices/export-v2.php.
- CVE-2022-29948Due to an insecure design, the Lepin EP-KP001 flash drive through KP001_V19 is vulnerable to an authentication bypass attack that enables an
- CVE-2022-31769IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration information stored inIBM Spectrum Copy Data Management
- CVE-2022-30611IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to cross-site scripting, caused by improper validation of user-suppIBM Spectrum Copy Data Management
- CVE-2022-30610IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to reverse tabnabbing where it could allow a page linked to from wiIBM Spectrum Copy Data Management
- CVE-2022-22479IBM Spectrum Copy Data Management 2.2.0.0through 2.2.15.0 is vulnerable to cross-site request forgery which could allow an attacker to execuIBM Spectrum Copy Data Management
- CVE-2022-22426IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused IBM Spectrum Copy Data Management
- CVE-2022-32978There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS sc
- CVE-2021-44117A Cross Site Request Forgery (CSRF) vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/sitevariables/delete/4
- CVE-2021-44582A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remote malicious user to
- CVE-2022-31788IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.
- CVE-2022-27502RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% f
- CVE-2022-32563An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2.couchbase
- CVE-2021-42811Vulnerability in SafeNet KeySecureThales DIS SafeNet KeySecure
- CVE-2017-20036PHPList Bounce Rule Persistent cross site scritingPHPList
- CVE-2017-20035PHPList Subscribe Persistent cross site scritingPHPList
- CVE-2017-20034PHPList List Name Persistent cross site scritingPHPList
- CVE-2017-20033PHPList Reflected cross site scritingPHPList
- CVE-2017-20032PHPList Subscription sql injectionPHPList
- CVE-2017-20031PHPList information disclosurePHPList
- CVE-2017-20030PHPList Sending Campain sql injectionPHPList