CVEs published August 24, 2022
64 CVEs were published on August 24, 2022: 2 critical, 14 high. 2 are now in CISA KEV.
- Published
- 64
- Critical
- 2
- High
- 14
- Medium
- 10
- Low
- 0
- Unrated
- 38
- Now in CISA KEV
- 2
- Fix available
- 25
Most affected products
- Android
- 7
- kernel
- 5
- Apple macOS
- 4
- Apple macOS · Apple tvOS +1
- 4
- ABB Zenon
- 3
- Apple macOS · Apple watchOS
- 2
- getkirby/cms
- 2
- glibc
- 2
- Kajitori Co. Exment · exceedone/exment +1
- 2
- AMQ Broker · org.apache.activemq:artemis-core-client
- 1
Critical 2
High 14
- CVE-2022-32840This issue was addressed with improved checks.Apple macOS · Apple watchOS
- CVE-2022-32813The issue was addressed with improved memory handling.Apple macOS · Apple tvOS +1
- CVE-2022-32837This issue was addressed with improved checks.Apple macOS · Apple tvOS
- CVE-2022-32811A memory corruption vulnerability was addressed with improved locking.Apple macOS
- CVE-2022-32812The issue was addressed with improved memory handling.Apple macOS
- CVE-2022-32810The issue was addressed with improved memory handling.Apple macOS · Apple watchOS
- CVE-2022-34838ABB Ability TM Operations Data Management Zenon Zenon Log Server file access controlABB Zenon
- CVE-2022-24375Denial of Service (DoS)node-opcua
- CVE-2022-25903Denial of Service (DoS)opcua
- CVE-2021-3998A flaw was found in glibc.glibc
- CVE-2021-3999A flaw was found in glibc.glibc
- CVE-2022-32793Multiple out-of-bounds write issues were addressed with improved bounds checking.Apple macOS · Apple tvOS +1
- CVE-2022-32893An out-of-bounds write issue was addressed with improved bounds checking.Apple Safari · Apple iOS and iPadOS +1
- CVE-2022-32894An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
Medium, low and unrated 48
- CVE-2022-32857This issue was addressed by using HTTPS when sending information over the network.Apple macOS · Apple tvOS +1
- CVE-2022-32838A logic issue was addressed with improved state management.Apple macOS
- CVE-2022-32834An access issue was addressed with improvements to the sandbox.Apple macOS
- CVE-2018-14519An issue was discovered in Kirby 2.5.12.getkirby/cms
- CVE-2018-14520An issue was discovered in Kirby 2.5.12.getkirby/cms
- CVE-2022-37178An issue was discovered in 72crm 9.0.
- CVE-2022-3718172crm 9.0 has an Arbitrary file upload vulnerability.
- CVE-2021-43309ReDoS in uri-template-lite URI.expand functionuri-template-lite
- CVE-2022-2569ARC Informatique PcVueARC Informatique PcVue 12 OAuth web service configuration ·…
- CVE-2022-34836ABB Ability TM Operations Data Management Zenon Zenon Log Server file access controlABB Zenon
- CVE-2022-34837ABB Ability TM Operations Data Management Zenon Zenon Log Server file access controlABB Zenon
- CVE-2021-4040A flaw was found in AMQ Broker.AMQ Broker · org.apache.activemq:artemis-core-client
- CVE-2021-4041A flaw was found in ansible-runner.ansible-runner
- CVE-2021-4159A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures.kernel
- CVE-2021-4158A NULL pointer dereference issue was found in the ACPI code of QEMU.QEMU
- CVE-2021-4155A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size.kernel
- CVE-2021-4142The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw.candlepin
- CVE-2021-4125It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as kube-reporting/hive
- CVE-2021-4122It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device.cryptsetup
- CVE-2021-4217A flaw was found in unzip.unzip
- CVE-2021-4218A flaw was found in the Linux kernel’s implementation of reading the SVC RDMA counters.kernel
- CVE-2021-4213A flaw was found in JSS, where it did not properly free up all memory.JSS
- CVE-2021-4209A NULL pointer dereference flaw was found in GnuTLS.GnuTLS
- CVE-2021-4178A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above.kubernetes-client · io.fabric8:kubernetes-client
- CVE-2022-20122The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue usAndroid
- CVE-2021-39815The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it (which makes it available to be freed), and continue usAndroid
- CVE-2021-0947The method PVRSRVBridgeTLDiscoverStreams allocates puiStreamsInt on the heap, fills the contents of the buffer via TLServerDiscoverStreamsKMAndroid
- CVE-2021-0946The method PVRSRVBridgePMRPDumpSymbolicAddr allocates puiMemspaceNameInt on the heap, fills the contents of the buffer via PMR_PDumpSymbolicAndroid
- CVE-2021-0891An unprivileged app can trigger PowerVR driver to return an uninitialized heap memory causing information disclosure.Product: AndroidVersionAndroid
- CVE-2021-0887In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data.Android
- CVE-2021-0698In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data.Android
- CVE-2022-36633Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution.github.com/gravitational/teleport
- CVE-2022-37153An issue was discovered in Artica Proxy 4.30.000000.
- CVE-2022-33172de.fac2 1.34 allows bypassing the User Presence protection mechanism when there is malware on the victim's PC.
- CVE-2022-38089Stored cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earliKajitori Co. Exment
- CVE-2022-38080Reflected cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and eaKajitori Co. Exment · exceedone/exment +1
- CVE-2022-38078Movable Type XMLRPC API provided by Six Apart Ltd.Six Apart Movable Type XMLRPC API
- CVE-2022-37333SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7)Kajitori Co. Exment · exceedone/exment +1
- CVE-2022-37418The Remote Keyless Entry (RKE) receiving unit on certain Nissan, Kia, and Hyundai vehicles through 2017 allows remote attackers to perform u
- CVE-2022-37305The Remote Keyless Entry (RKE) receiving unit on certain Honda vehicles through 2018 allows remote attackers to perform unlock operations an
- CVE-2022-36945The Remote Keyless Entry (RKE) receiving unit on certain Mazda vehicles through 2020 allows remote attackers to perform unlock operations an
- CVE-2021-4028A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a sokernel
- CVE-2021-4037Kernel: security regression for cve-2018-13405Linux kernel · Red Hat Enterprise Linux
- CVE-2021-4189A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode.python · libpython +1
- CVE-2021-4204An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation.kernel
- CVE-2021-4214A heap overflow flaw was found in libpngs' pngimage.c program.libpng
- CVE-2022-27812Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lea
- CVE-2022-2978A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with foKernel