Security Vulnerabilities - CVEs Published In July 2022
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at orders.php.
CVSS Score
9.8
EPSS Score
0.002
Published
2022-07-01
Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the security_5g parameter in the function formWifiBasicSet.
CVSS Score
8.8
EPSS Score
0.002
Published
2022-07-01
College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/teacher.php. This vulnerability is exploited via a crafted PHP file.
CVSS Score
8.8
EPSS Score
0.028
Published
2022-07-01
The package jsrsasign before 10.5.25 are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT signature with non Base64URL encoding special characters or number escaped characters may be validated as valid by mistake. Workaround: Validate JWS or JWT signature if it has Base64URL and dot safe string before executing JWS.verify() or JWS.verifyJWT() method.
CVSS Score
7.7
EPSS Score
0.018
Published
2022-07-01
All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git.
CVSS Score
8.1
EPSS Score
0.03
Published
2022-07-01
MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-07-01
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-07-01
MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-07-01
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-07-01
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-07-01