# CVEs published 2022-06-10

42 CVEs were published on June 10, 2022: 0 critical, 12 high. Days are UTC.

- [CVE-2021-41756](https://cve.now/CVE-2021-41756.md): dynamicMarkt \<= 3.10 is affected by SQL injection in the kat parameter of index.php. (no CVSS)
- [CVE-2021-41755](https://cve.now/CVE-2021-41755.md): dynamicMarkt \<= 3.10 is affected by SQL injection in the kat1 parameter of index.php. (no CVSS)
- [CVE-2021-41754](https://cve.now/CVE-2021-41754.md): dynamicMarkt \<= 3.10 is affected by SQL injection in the parent parameter of index.php. (no CVSS)
- [CVE-2022-25851](https://cve.now/CVE-2022-25851.md): Denial of Service (DoS) (CVSS 7.5, jpeg-js)
- [CVE-2022-21211](https://cve.now/CVE-2022-21211.md): Denial of Service (DoS) (CVSS 5.9, posix)
- [CVE-2022-25845](https://cve.now/CVE-2022-25845.md): Deserialization of Untrusted Data (CVSS 8.1, com.alibaba:fastjson)
- [CVE-2022-24278](https://cve.now/CVE-2022-24278.md): Directory Traversal (CVSS 7.5, convert-svg-core)
- [CVE-2022-24376](https://cve.now/CVE-2022-24376.md): Command Injection (CVSS 7.2, git-promise)
- [CVE-2022-29095](https://cve.now/CVE-2022-29095.md): Dell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client Commercial versions (3.1.1 and prior) contain a (CVSS 8.3, Dell SupportAssist Consumer)
- [CVE-2022-29094](https://cve.now/CVE-2022-29094.md): Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and version (CVSS 7.1, Dell SupportAssist Client Consumer)
- [CVE-2022-29093](https://cve.now/CVE-2022-29093.md): Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and version (CVSS 7.1, Dell SupportAssist Client Commercial)
- [CVE-2022-29092](https://cve.now/CVE-2022-29092.md): Dell SupportAssist Client Consumer versions (3.11.0 and versions prior) and Dell SupportAssist Client Commercial versions (3.2.0 and version (CVSS 7.8, Dell SupportAssist Consumer)
- [CVE-2022-24429](https://cve.now/CVE-2022-24429.md): Arbitrary Code Injection (CVSS 7.5, convert-svg-core)
- [CVE-2022-25863](https://cve.now/CVE-2022-25863.md): Deserialization of Untrusted Data (CVSS 8.1, gatsby-plugin-mdx)
- [CVE-2022-32981](https://cve.now/CVE-2022-32981.md): An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. (no CVSS)
- [CVE-2022-31287](https://cve.now/CVE-2022-31287.md): An issue was discovered in Bento4 v1.2. (no CVSS)
- [CVE-2022-31285](https://cve.now/CVE-2022-31285.md): An issue was discovered in Bento4 1.2. (no CVSS)
- [CVE-2022-31282](https://cve.now/CVE-2022-31282.md): Bento4 MP4Dump v1.2 was discovered to contain a segmentation violation via an unknown address at /Source/C++/Core/Ap4DataBuffer.cpp:175. (no CVSS)
- [CVE-2018-17240](https://cve.now/CVE-2018-17240.md): There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attacker to exfiltrate sens (no CVSS)
- [CVE-2022-31402](https://cve.now/CVE-2022-31402.md): ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/webservices/export-v2.php. (no CVSS)
- [CVE-2022-29948](https://cve.now/CVE-2022-29948.md): Due to an insecure design, the Lepin EP-KP001 flash drive through KP001\_V19 is vulnerable to an authentication bypass attack that enables an (no CVSS)
- [CVE-2022-31769](https://cve.now/CVE-2022-31769.md): IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration information stored in (CVSS 5.3, IBM Spectrum Copy Data Management)
- [CVE-2022-30611](https://cve.now/CVE-2022-30611.md): IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to cross-site scripting, caused by improper validation of user-supp (CVSS 5.4, IBM Spectrum Copy Data Management)
- [CVE-2022-30610](https://cve.now/CVE-2022-30610.md): IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to reverse tabnabbing where it could allow a page linked to from wi (CVSS 4.4, IBM Spectrum Copy Data Management)
- [CVE-2022-22479](https://cve.now/CVE-2022-22479.md): IBM Spectrum Copy Data Management 2.2.0.0through 2.2.15.0 is vulnerable to cross-site request forgery which could allow an attacker to execu (CVSS 5.0, IBM Spectrum Copy Data Management)
- [CVE-2022-22426](https://cve.now/CVE-2022-22426.md): IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused (CVSS 2.9, IBM Spectrum Copy Data Management)
- [CVE-2022-32978](https://cve.now/CVE-2022-32978.md): There is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS sc (no CVSS)
- [CVE-2021-44117](https://cve.now/CVE-2021-44117.md): A Cross Site Request Forgery (CSRF) vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/sitevariables/delete/4 (no CVSS)
- [CVE-2021-44582](https://cve.now/CVE-2021-44582.md): A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remote malicious user to (no CVSS)
- [CVE-2022-31788](https://cve.now/CVE-2022-31788.md): IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname. (no CVSS)
- [CVE-2022-27502](https://cve.now/CVE-2022-27502.md): RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% f (no CVSS)
- [CVE-2022-32563](https://cve.now/CVE-2022-32563.md): An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. (no CVSS, couchbase)
- [CVE-2021-42811](https://cve.now/CVE-2021-42811.md): Vulnerability in SafeNet KeySecure (CVSS 3.3, Thales DIS SafeNet KeySecure)
- [CVE-2017-20036](https://cve.now/CVE-2017-20036.md): PHPList Bounce Rule Persistent cross site scriting (CVSS 3.5, PHPList)
- [CVE-2017-20035](https://cve.now/CVE-2017-20035.md): PHPList Subscribe Persistent cross site scriting (CVSS 3.5, PHPList)
- [CVE-2017-20034](https://cve.now/CVE-2017-20034.md): PHPList List Name Persistent cross site scriting (CVSS 3.5, PHPList)
- [CVE-2017-20033](https://cve.now/CVE-2017-20033.md): PHPList Reflected cross site scriting (CVSS 4.3, PHPList)
- [CVE-2017-20032](https://cve.now/CVE-2017-20032.md): PHPList Subscription sql injection (CVSS 6.3, PHPList)
- [CVE-2017-20031](https://cve.now/CVE-2017-20031.md): PHPList information disclosure (CVSS 2.7, PHPList)
- [CVE-2017-20030](https://cve.now/CVE-2017-20030.md): PHPList Sending Campain sql injection (CVSS 4.7, PHPList)
- [CVE-2017-20029](https://cve.now/CVE-2017-20029.md): PHPList Edit Subscription index.php sql injection (CVSS 7.3, PHPList)
- [CVE-2022-2042](https://cve.now/CVE-2022-2042.md): Use After Free in vim/vim (CVSS 7.4, vim/vim)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-06-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.