Vulnerabilities > Linuxfoundation
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-10-07 | CVE-2022-26475 | Out-of-bounds Write vulnerability in multiple products In wlan, there is a possible out of bounds write due to a missing bounds check. | 6.7 |
| 2022-10-07 | CVE-2022-32589 | Improper Resource Shutdown or Release vulnerability in multiple products In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. | 7.5 |
| 2022-10-07 | CVE-2022-32590 | Improper Check for Unusual or Exceptional Conditions vulnerability in multiple products In wlan, there is a possible use after free due to an incorrect status check. | 6.7 |
| 2022-10-07 | CVE-2022-32592 | Out-of-bounds Write vulnerability in multiple products In cpu dvfs, there is a possible out of bounds write due to a missing bounds check. | 6.7 |
| 2022-10-06 | CVE-2022-39222 | Missing Authorization vulnerability in Linuxfoundation DEX Dex is an identity service that uses OpenID Connect to drive authentication for other apps. | 6.5 |
| 2022-10-03 | CVE-2022-38817 | Missing Authentication for Critical Function vulnerability in Linuxfoundation Dapr Dashboard Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data. | 7.5 |
| 2022-09-24 | CVE-2022-36025 | Incorrect Conversion between Numeric Types vulnerability in Linuxfoundation Besu Besu is a Java-based Ethereum client. | 9.1 |
| 2022-09-09 | CVE-2022-31006 | Unspecified vulnerability in Linuxfoundation Indy-Node indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. | 7.5 |
| 2022-09-06 | CVE-2022-31020 | Unspecified vulnerability in Linuxfoundation Indy-Node Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. | 8.8 |
| 2022-08-12 | CVE-2022-35942 | Unspecified vulnerability in Linuxfoundation Loopback-Connector-Postgresql Improper input validation on the `contains` LoopBack filter may allow for arbitrary SQL injection. | 10.0 |