# CVEs published 2022-07-21 81 CVEs were published on July 21, 2022: 6 critical, 7 high. Days are UTC. - [CVE-2022-0980](https://cve.now/CVE-2022-0980.md): Use after free in New Tab Page in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extens (no CVSS, Google Chrome) - [CVE-2022-0979](https://cve.now/CVE-2022-0979.md): Use after free in Safe Browsing in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage i (no CVSS, Google Chrome) - [CVE-2022-0978](https://cve.now/CVE-2022-0978.md): Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafte (no CVSS, Google Chrome) - [CVE-2022-0977](https://cve.now/CVE-2022-0977.md): Use after free in Browser UI in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in (no CVSS, Google Chrome) - [CVE-2022-0976](https://cve.now/CVE-2022-0976.md): Heap buffer overflow in GPU in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a cr (no CVSS, Google Chrome) - [CVE-2022-0975](https://cve.now/CVE-2022-0975.md): Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafte (no CVSS, Google Chrome) - [CVE-2022-0974](https://cve.now/CVE-2022-0974.md): Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage i (no CVSS, Google Chrome) - [CVE-2022-0973](https://cve.now/CVE-2022-0973.md): Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via (no CVSS, Google Chrome) - [CVE-2022-0972](https://cve.now/CVE-2022-0972.md): Use after free in Extensions in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extensio (no CVSS, Google Chrome) - [CVE-2022-0971](https://cve.now/CVE-2022-0971.md): Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compromised the renderer (no CVSS, Google Chrome) - [CVE-2022-34487](https://cve.now/CVE-2022-34487.md): WordPress Shortcode Addons plugin \<= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerability (CVSS 9.8, biplob018 Shortcode Addons) - [CVE-2022-33198](https://cve.now/CVE-2022-33198.md): WordPress Accordions plugin \<= 2.0.2 - Unauthenticated WordPress Options Change vulnerability (CVSS 9.8, Biplob Adhikari Accordions) - [CVE-2022-31475](https://cve.now/CVE-2022-31475.md): WordPress GiveWP plugin \<= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability (CVSS 5.5, GiveWP) - [CVE-2022-28700](https://cve.now/CVE-2022-28700.md): WordPress GiveWP plugin \<= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability (CVSS 9.1, GiveWP) - [CVE-2022-30536](https://cve.now/CVE-2022-30536.md): WordPress WP Maintenance plugin \<= 6.0.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 3.4, Florent Maillefaud WP Maintenance) - [CVE-2022-28666](https://cve.now/CVE-2022-28666.md): WordPress Custom Product Tabs for WooCommerce plugin \<= 1.7.7 - Broken Access Control vulnerability (CVSS 5.3, YIKES Custom Product Tabs for WooCommerce) - [CVE-2022-35899](https://cve.now/CVE-2022-35899.md): There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4. (no CVSS) - [CVE-2022-30337](https://cve.now/CVE-2022-30337.md): WordPress WP Meta SEO plugin \<= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, JoomUnited WP Meta SEO) - [CVE-2022-32430](https://cve.now/CVE-2022-32430.md): An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the applicatio (no CVSS, io.github.talelin:lin-cms-core) - [CVE-2022-30628](https://cve.now/CVE-2022-30628.md): Supersmart.me – Walk Through access to business information without authentication (CVSS 4.8, Supersmart.me – Walk Through) - [CVE-2022-34767](https://cve.now/CVE-2022-34767.md): ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan Authorization Bypass (CVSS 5.9, ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan) - [CVE-2022-0902](https://cve.now/CVE-2022-0902.md): ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root access (CVSS 8.1, ABB RMC-100 · ABB RMC-100-LITE +5) - [CVE-2022-28877](https://cve.now/CVE-2022-28877.md): Local Privilege Escalation Vulnerability in F-Secure & WithSecure Windows Endpoint Products (CVSS 4.3, All F-Secure and WithSecure Endpoint Protection Products fo…) - [CVE-2022-36313](https://cve.now/CVE-2022-36313.md): An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. (CVSS 5.5, file-type) - [CVE-2022-32289](https://cve.now/CVE-2022-32289.md): WordPress Popup Builder plugin \<= 4.1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Popup Status Change (CVSS 5.4, Sygnoos Popup Builder) - [CVE-2022-31170](https://cve.now/CVE-2022-31170.md): OpenZeppelin Contracts's ERC165Checker may revert instead of returning false (CVSS 7.5, openzeppelin-contracts · @openzeppelin/contracts +1) - [CVE-2022-31172](https://cve.now/CVE-2022-31172.md): OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers (CVSS 7.5, openzeppelin-contracts · @openzeppelin/contracts +1) - [CVE-2022-31169](https://cve.now/CVE-2022-31169.md): Cranelift vulnerable to miscompilation of constant values in division on AArch64 (CVSS 5.9, bytecodealliance wasmtime · wasmtime +1) - [CVE-2022-31164](https://cve.now/CVE-2022-31164.md): Tovy before v0.7.51 vulnerable to users logging in as and impersonating other users (CVSS 7.5, tovyblox tovy) - [CVE-2022-31163](https://cve.now/CVE-2022-31163.md): TZInfo relative path traversal vulnerability allows loading of arbitrary files (CVSS 7.5, tzinfo) - [CVE-2022-31162](https://cve.now/CVE-2022-31162.md): Slack Morphism for Rust before 0.41.0 can accidentally leak Slack OAuth client information in application debug logs (CVSS 7.5, abdolence slack-morphism-rust · slack-morphism) - [CVE-2022-32556](https://cve.now/CVE-2022-32556.md): An issue was discovered in Couchbase Server before 7.0.4. (no CVSS) - [CVE-2022-20912](https://cve.now/CVE-2022-20912.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20913](https://cve.now/CVE-2022-20913.md): Cisco Nexus Dashboard Arbitrary File Write Vulnerability (CVSS 4.9, Cisco Nexus Dashboard) - [CVE-2022-20916](https://cve.now/CVE-2022-20916.md): Cisco IoT Control Center Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco IoT Control Center) - [CVE-2022-20909](https://cve.now/CVE-2022-20909.md): Cisco Nexus Dashboard Privilege Escalation Vulnerabilities (CVSS 6.0, Cisco Nexus Dashboard) - [CVE-2022-20910](https://cve.now/CVE-2022-20910.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20911](https://cve.now/CVE-2022-20911.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20878](https://cve.now/CVE-2022-20878.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20879](https://cve.now/CVE-2022-20879.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20880](https://cve.now/CVE-2022-20880.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20881](https://cve.now/CVE-2022-20881.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20882](https://cve.now/CVE-2022-20882.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20883](https://cve.now/CVE-2022-20883.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20884](https://cve.now/CVE-2022-20884.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20885](https://cve.now/CVE-2022-20885.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20886](https://cve.now/CVE-2022-20886.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20887](https://cve.now/CVE-2022-20887.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20888](https://cve.now/CVE-2022-20888.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20889](https://cve.now/CVE-2022-20889.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20890](https://cve.now/CVE-2022-20890.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20891](https://cve.now/CVE-2022-20891.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20892](https://cve.now/CVE-2022-20892.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20893](https://cve.now/CVE-2022-20893.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20894](https://cve.now/CVE-2022-20894.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20895](https://cve.now/CVE-2022-20895.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20896](https://cve.now/CVE-2022-20896.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20897](https://cve.now/CVE-2022-20897.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20898](https://cve.now/CVE-2022-20898.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20899](https://cve.now/CVE-2022-20899.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20900](https://cve.now/CVE-2022-20900.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20901](https://cve.now/CVE-2022-20901.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20902](https://cve.now/CVE-2022-20902.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20903](https://cve.now/CVE-2022-20903.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20904](https://cve.now/CVE-2022-20904.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20906](https://cve.now/CVE-2022-20906.md): Cisco Nexus Dashboard Privilege Escalation Vulnerabilities (CVSS 6.0, Cisco Nexus Dashboard) - [CVE-2022-20907](https://cve.now/CVE-2022-20907.md): Cisco Nexus Dashboard Privilege Escalation Vulnerabilities (CVSS 6.0, Cisco Nexus Dashboard) - [CVE-2022-20908](https://cve.now/CVE-2022-20908.md): Cisco Nexus Dashboard Privilege Escalation Vulnerabilities (CVSS 6.0, Cisco Nexus Dashboard) - [CVE-2020-36557](https://cve.now/CVE-2020-36557.md): A race condition in the Linux kernel before 5.6.2 between the VT\_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-fre (no CVSS) - [CVE-2020-36558](https://cve.now/CVE-2020-36558.md): A race condition in the Linux kernel before 5.5.7 involving VT\_RESIZEX could lead to a NULL pointer dereference and general protection fault (no CVSS) - [CVE-2022-20857](https://cve.now/CVE-2022-20857.md): Cisco Nexus Dashboard Unauthorized Access Vulnerabilities (CVSS 9.8, Cisco Nexus Dashboard) - [CVE-2022-20858](https://cve.now/CVE-2022-20858.md): Cisco Nexus Dashboard Unauthorized Access Vulnerabilities (CVSS 9.8, Cisco Nexus Dashboard) - [CVE-2022-20860](https://cve.now/CVE-2022-20860.md): Cisco Nexus Dashboard SSL Certificate Validation Vulnerability (CVSS 7.4, Cisco Nexus Dashboard) - [CVE-2022-20861](https://cve.now/CVE-2022-20861.md): Cisco Nexus Dashboard Unauthorized Access Vulnerabilities (CVSS 9.8, Cisco Nexus Dashboard) - [CVE-2022-20873](https://cve.now/CVE-2022-20873.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20874](https://cve.now/CVE-2022-20874.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20875](https://cve.now/CVE-2022-20875.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20876](https://cve.now/CVE-2022-20876.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-20877](https://cve.now/CVE-2022-20877.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities (CVSS 4.7, Cisco Small Business RV Series Router Firmware) - [CVE-2022-28860](https://cve.now/CVE-2022-28860.md): An authentication downgrade in the server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smar (no CVSS) - [CVE-2022-28861](https://cve.now/CVE-2022-28861.md): The server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart camera Axis M1125) to see FTP (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2022-07-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.