Security Vulnerabilities - CVEs Published In July 2022
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a treats non-standard fence instructions as illegal which can affect the function of the application.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-07-18
Nginx NJS v0.7.5 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-07-18
HTMLDoc v1.9.15 was discovered to contain a heap overflow via (write_header) /htmldoc/htmldoc/html.cxx:273.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-07-18
HTMLDoc v1.9.12 and below was discovered to contain a heap overflow via e_node htmldoc/htmldoc/html.cxx:588.
CVSS Score
7.5
EPSS Score
0.001
Published
2022-07-18
Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 allows XXE attacks.
CVSS Score
9.8
EPSS Score
0.006
Published
2022-07-18
Nginx NJS v0.7.4 was discovered to contain a segmentation violation via njs_value_property at njs_value.c.
CVSS Score
7.5
EPSS Score
0.004
Published
2022-07-18
Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_utf8_next at src/njs_utf8.h.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-07-18
Nginx NJS v0.7.4 was discovered to contain an out-of-bounds read via njs_scope_value at njs_scope.h.
CVSS Score
9.1
EPSS Score
0.004
Published
2022-07-18
Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_djb_hash at src/njs_djb_hash.c.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-07-18
Nginx NJS v0.7.5 was discovered to contain a segmentation violation via njs_value_to_number at src/njs_value_conversion.h.
CVSS Score
7.5
EPSS Score
0.002
Published
2022-07-18