Security Vulnerabilities - CVEs Published In August 2022
In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.
CVSS Score
9.8
EPSS Score
0.039
Published
2022-08-17
The vulnerability causing from insufficient verification procedures for downloaded files during WebCube update. Remote attackers can bypass this verification logic to update both digitally signed and unauthorized files, enabling remote code execution.
CVSS Score
8.8
EPSS Score
0.004
Published
2022-08-17
This vulnerability occured by sending a malicious POST request to a specific page while logged in random user from some family of IPTIME NAS. Remote attackers can steal root privileges by changing the password of the root through a POST request.
CVSS Score
8.0
EPSS Score
0.004
Published
2022-08-17
The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to execute arbitrary code on the targeted Softing Secure Integration Server V1.22.
CVSS Score
7.2
EPSS Score
0.568
Published
2022-08-17
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service.
CVSS Score
3.2
EPSS Score
0.0
Published
2022-08-17
Use After Free in GitHub repository vim/vim prior to 9.0.0221.
CVSS Score
7.6
EPSS Score
0.001
Published
2022-08-17
Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java.
CVSS Score
9.8
EPSS Score
0.002
Published
2022-08-17
DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php.
CVSS Score
9.8
EPSS Score
0.127
Published
2022-08-17
DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php.
CVSS Score
7.2
EPSS Score
0.154
Published
2022-08-17
DedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in member_toadmin.php.
CVSS Score
7.2
EPSS Score
0.046
Published
2022-08-17