CVEs published July 15, 2022
78 CVEs were published on July 15, 2022: 1 critical, 36 high.
- Published
- 78
- Critical
- 1
- High
- 36
- Medium
- 13
- Low
- 7
- Unrated
- 21
- Now in CISA KEV
- 0
- Fix available
- 13
Most affected products
- Adobe Acrobat Reader
- 19
- Parallels Desktop
- 5
- Adobe InCopy
- 4
- Adobe InDesign
- 4
- URVE Web Manager
- 3
- Adobe Character Animator
- 2
- Adobe Photoshop
- 2
- grafana · github.com/grafana/grafana
- 2
- Octopus Deploy Octopus Server
- 2
- packbackbooks lti-1-3-php-library · packbackbooks/lti-1-3-p…
- 2
Critical 1
High 36
- CVE-2022-34891This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1.Parallels Desktop
- CVE-2022-34890This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 (51537).Parallels Desktop
- CVE-2022-34889This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (51537).Parallels Desktop
- CVE-2022-25891Denial of Service (DoS)github.com/containrrr/shoutrrr/pkg/util · github.com/contai…
- CVE-2021-34987This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.1 (49187).Parallels Desktop
- CVE-2021-34986This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.0 (49183).Parallels Desktop
- CVE-2022-31159Partial Path Traversal in com.amazonaws:aws-java-sdk-s3 aws-sdk-java · com.amazonaws:aws-java-sdk-s3
- CVE-2022-31157Use of a Broken or Risky Cryptographic Algorithm in packbackbooks/lti-1-3-php-librarypackbackbooks lti-1-3-php-library · packbackbooks/lti-1-3-p…
- CVE-2022-31158Authentication Bypass by Capture-replay in packbackbooks/lti-1-3-php-librarypackbackbooks lti-1-3-php-library · packbackbooks/lti-1-3-p…
- CVE-2022-34251Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-34249Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-34250Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-34247Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2022-34245Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2022-34246Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2022-34243Adobe Photoshop U3D File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-34241Adobe Character Animator SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe Character Animator
- CVE-2022-34242Adobe Character Animator SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Character Animator
- CVE-2022-34228Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-34230Adobe Acrobat Reader Use After Free could lead to Arbitrary code executionAdobe Acrobat Reader
- CVE-2022-34229Adobe Acrobat Reader DC AcroForm rect Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-34226Adobe Acrobat Reader DC PDF Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-34225Adobe Acrobat Reader DC AcroForm exportValues Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-34222Adobe Acrobat Reader DC query Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-34223Adobe Acrobat Reader DC AcroForm currentValueIndices Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-34219Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-34217Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-34220Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-34221Adobe Acrobat Reader Type Confusion vulnerability could lead to Arbitrary code executionAdobe Acrobat Reader
- CVE-2022-34215Adobe Acrobat Reader DC Annotation Polygon Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-34216Adobe Acrobat Reader DC PDF Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-31107Grafana account takeover via OAuth vulnerabilitygrafana · github.com/grafana/grafana
- CVE-2022-31097Stored XSS in Grafana's Unified Alertinggrafana · github.com/grafana/grafana
- CVE-2022-2420URVE Web Manager uploader.php unrestricted uploadURVE Web Manager
- CVE-2022-2419URVE Web Manager upload.php unrestricted uploadURVE Web Manager
- CVE-2022-2418URVE Web Manager img_upload.php unrestricted uploadURVE Web Manager
Medium, low and unrated 41
- CVE-2022-35906An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x.
- CVE-2022-35905An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x.
- CVE-2022-35904An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x.
- CVE-2022-35903An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x.
- CVE-2022-35902An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x.
- CVE-2022-35901An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x.
- CVE-2022-35900An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x.
- CVE-2022-35890An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17.
- CVE-2022-32434EIPStackGroup OpENer v2.3.0 was discovered to contain a stack overflow via /bin/posix/src/ports/POSIX/OpENer+0x56073d.
- CVE-2022-25869All versions of the package angular; all versions of the package angularjs.core; all versions of the package angularjs are vulnerable to Croangular · org.webjars.npm:angular +4
- CVE-2022-25858Regular Expression Denial of Service (ReDoS)terser
- CVE-2022-30634Indefinite hang with large buffers on Windows in crypto/randGo standard library crypto/rand · stdlib
- CVE-2022-31153OpenZeppelin Contracts for Cairo account cannot process transactions on GoerliOpenZeppelin cairo-contracts · openzeppelin-cairo-contracts
- CVE-2022-34252Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe InCopy
- CVE-2022-34248Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe InDesign
- CVE-2022-23201Adobe RoboHelp Reflected XSS could lead to Arbitrary code executionAdobe RoboHelp
- CVE-2022-34244Adobe Photoshop U3D File Parsing Access of Uninitialized Pointer Information Disclosure VulnerabilityAdobe Photoshop
- CVE-2022-34239Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-34233Adobe Acrobat Reader DC Doc print Use-After-Free Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-34236Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-34237Adobe Acrobat Reader DC Font Parsing Use-After-Free Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-34232Adobe Acrobat Reader DC Annotation print Use-After-Free Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-34234Adobe Acrobat Reader DC Doc printWithParams Use-After-Free Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-23141ZXMP M721 has an information leak vulnerability.ZXMP M721
- CVE-2020-35305Cross site scripting (XSS) in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog.gollum
- CVE-2022-30245Honeywell Alerton Compass Software 1.6.5 allows unauthenticated configuration changes from remote users.
- CVE-2022-30244Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated programming writes from remote users.
- CVE-2022-30243Honeywell Alerton Visual Logic through 2022-05-04 allows unauthenticated programming writes from remote users.
- CVE-2022-30242Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated configuration changes from remote users.
- CVE-2021-36461An Arbitrary File Upload vulnerability exists in Microweber 1.1.3 that allows attackers to getshell via the Settings Upload Picture section
- CVE-2022-34826In Couchbase Server 7.1.x before 7.1.1, an encrypted Private Key passphrase may be leaked in the logs.
- CVE-2020-35261Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Restaurant Name field to /d
- CVE-2020-36550Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Table Name field to /dashbo
- CVE-2020-36551Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Item Name field to /dashboa
- CVE-2020-36552Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Made field to /dashboard/me
- CVE-2020-36553Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Area(food_type) field to /d
- CVE-2022-32118Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory parameter in backoffi
- CVE-2022-32119Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleri
- CVE-2022-29890In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link.Octopus Deploy Octopus Server
- CVE-2022-1881In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for a user to download Octopus Deploy Octopus Server
- CVE-2022-35409An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0.