Security Vulnerabilities - CVEs Published In 2022
In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.
CVSS Score
7.5
EPSS Score
0.016
Published
2022-09-01
In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.
CVSS Score
9.8
EPSS Score
0.017
Published
2022-09-01
In LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw\src\x3f\x3f_utils_patched.cpp) that can be triggered via a crafted X3F file.
CVSS Score
5.5
EPSS Score
0.004
Published
2022-09-01
In LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function (libraw\src\x3f\x3f_utils_patched.cpp) when reading data from an image file.
CVSS Score
5.5
EPSS Score
0.003
Published
2022-09-01
In LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function (libraw\src\x3f\x3f_utils_patched.cpp) which can be triggered via an image with a large row_stride field.
CVSS Score
5.5
EPSS Score
0.004
Published
2022-09-01
In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()" function (libraw\src\decoders\dng.cpp) when reading data from the image file.
CVSS Score
5.5
EPSS Score
0.003
Published
2022-09-01
In LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function (libraw\src\decoders\crx.cpp) when processing cr3 files.
CVSS Score
5.5
EPSS Score
0.003
Published
2022-09-01
NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality.
CVSS Score
6.5
EPSS Score
0.023
Published
2022-09-01
Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in PluginlySpeaking Easy Org Chart plugin <= 3.1 at WordPress.
CVSS Score
5.4
EPSS Score
0.006
Published
2022-09-01
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Simon Ward MP3 jPlayer plugin <= 2.7.3 at WordPress.
CVSS Score
5.4
EPSS Score
0.005
Published
2022-09-01