CVEs published July 21, 2022
81 CVEs were published on July 21, 2022: 6 critical, 7 high.
- Published
- 81
- Critical
- 6
- High
- 7
- Medium
- 50
- Low
- 1
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 18
Most affected products
- Cisco Small Business RV Series Router Firmware
- 35
- Google Chrome
- 10
- Cisco Nexus Dashboard
- 9
- GiveWP
- 2
- openzeppelin-contracts · @openzeppelin/contracts +1
- 2
- ABB RMC-100 · ABB RMC-100-LITE +5
- 1
- abdolence slack-morphism-rust · slack-morphism
- 1
- All F-Secure and WithSecure Endpoint Protection Products fo…
- 1
- ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan
- 1
- Biplob Adhikari Accordions
- 1
Critical 6
- CVE-2022-34487WordPress Shortcode Addons plugin <= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerabilitybiplob018 Shortcode Addons
- CVE-2022-33198WordPress Accordions plugin <= 2.0.2 - Unauthenticated WordPress Options Change vulnerabilityBiplob Adhikari Accordions
- CVE-2022-28700WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerabilityGiveWP
- CVE-2022-20857Cisco Nexus Dashboard Unauthorized Access VulnerabilitiesCisco Nexus Dashboard
- CVE-2022-20858Cisco Nexus Dashboard Unauthorized Access VulnerabilitiesCisco Nexus Dashboard
- CVE-2022-20861Cisco Nexus Dashboard Unauthorized Access VulnerabilitiesCisco Nexus Dashboard
High 7
- CVE-2022-0902ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root accessABB RMC-100 · ABB RMC-100-LITE +5
- CVE-2022-31170 OpenZeppelin Contracts's ERC165Checker may revert instead of returning falseopenzeppelin-contracts · @openzeppelin/contracts +1
- CVE-2022-31172OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signersopenzeppelin-contracts · @openzeppelin/contracts +1
- CVE-2022-31164Tovy before v0.7.51 vulnerable to users logging in as and impersonating other userstovyblox tovy
- CVE-2022-31163TZInfo relative path traversal vulnerability allows loading of arbitrary filestzinfo
- CVE-2022-31162Slack Morphism for Rust before 0.41.0 can accidentally leak Slack OAuth client information in application debug logsabdolence slack-morphism-rust · slack-morphism
- CVE-2022-20860Cisco Nexus Dashboard SSL Certificate Validation VulnerabilityCisco Nexus Dashboard
Medium, low and unrated 68
- CVE-2022-0980Use after free in New Tab Page in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extensGoogle Chrome
- CVE-2022-0979Use after free in Safe Browsing in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage iGoogle Chrome
- CVE-2022-0978Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafteGoogle Chrome
- CVE-2022-0977Use after free in Browser UI in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage inGoogle Chrome
- CVE-2022-0976Heap buffer overflow in GPU in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crGoogle Chrome
- CVE-2022-0975Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafteGoogle Chrome
- CVE-2022-0974Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage iGoogle Chrome
- CVE-2022-0973Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via Google Chrome
- CVE-2022-0972Use after free in Extensions in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extensioGoogle Chrome
- CVE-2022-0971Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compromised the renderer Google Chrome
- CVE-2022-31475WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerabilityGiveWP
- CVE-2022-30536WordPress WP Maintenance plugin <= 6.0.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityFlorent Maillefaud WP Maintenance
- CVE-2022-28666WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.7 - Broken Access Control vulnerabilityYIKES Custom Product Tabs for WooCommerce
- CVE-2022-35899There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4.
- CVE-2022-30337WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerabilityJoomUnited WP Meta SEO
- CVE-2022-32430An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the applicatioio.github.talelin:lin-cms-core
- CVE-2022-30628Supersmart.me – Walk Through access to business information without authenticationSupersmart.me – Walk Through
- CVE-2022-34767ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan Authorization BypassALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan
- CVE-2022-28877Local Privilege Escalation Vulnerability in F-Secure & WithSecure Windows Endpoint ProductsAll F-Secure and WithSecure Endpoint Protection Products fo…
- CVE-2022-36313An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js.file-type
- CVE-2022-32289WordPress Popup Builder plugin <= 4.1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Popup Status ChangeSygnoos Popup Builder
- CVE-2022-31169Cranelift vulnerable to miscompilation of constant values in division on AArch64bytecodealliance wasmtime · wasmtime +1
- CVE-2022-32556An issue was discovered in Couchbase Server before 7.0.4.
- CVE-2022-20912Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20913Cisco Nexus Dashboard Arbitrary File Write VulnerabilityCisco Nexus Dashboard
- CVE-2022-20916Cisco IoT Control Center Cross-Site Scripting VulnerabilityCisco IoT Control Center
- CVE-2022-20909Cisco Nexus Dashboard Privilege Escalation VulnerabilitiesCisco Nexus Dashboard
- CVE-2022-20910Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20911Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20878Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20879Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20880Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20881Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20882Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20883Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20884Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20885Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20886Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20887Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20888Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20889Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20890Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20891Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20892Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20893Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20894Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20895Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20896Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20897Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20898Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20899Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20900Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20901Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20902Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20903Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20904Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20906Cisco Nexus Dashboard Privilege Escalation VulnerabilitiesCisco Nexus Dashboard
- CVE-2022-20907Cisco Nexus Dashboard Privilege Escalation VulnerabilitiesCisco Nexus Dashboard
- CVE-2022-20908Cisco Nexus Dashboard Privilege Escalation VulnerabilitiesCisco Nexus Dashboard
- CVE-2020-36557A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-fre
- CVE-2020-36558A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault
- CVE-2022-20873Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20874Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20875Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20876Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20877Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-28860An authentication downgrade in the server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smar
- CVE-2022-28861The server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart camera Axis M1125) to see FTP