CVEs published July 23, 2022
4 CVEs were published on July 23, 2022: 0 critical, 1 high.
- Published
- 4
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 3
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- django-rest-framework
- 1
- InfiniteWP Client Plugin
- 1
High 1
Medium, low and unrated 3
- CVE-2022-36414There is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter Beyond Compare 4.2.0 through 4.4.2 before
- CVE-2022-36415A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE
- CVE-2018-25045Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoedjango-rest-framework