The OPSWAT Vulnerability Assessment technology supports file based and endpoint application vulnerability assessment. Learn how MetaDefender Kiosk and MetaDefender Access leverages this technology to protect your organization.
We continuously enhance our platform to decrease your organization's security risk and prevent malware attacks. The first table below lists the hashes of vulnerable application installers, IoT software and firmware was added to the OPSWAT database during July 27 - August 3, 2022. The second table lists the new CVEs and application versions for which support was added.
To take advantage of these capabilities, please always update your OPSWAT Vulnerability Engine to the latest version. If you have questions or interest in using the engine to better protect your organization, please contact OPSWAT.
Endpoint Application Vulnerabilities
OPSWAT Vulnerability Engine added support to detect the following application vulnerabilities
PRODUCT | VENDOR | VERSION | CVE | CVE DETAILS | CVSS SCORE |
|---|---|---|---|---|---|
WinSCP | Martin Prikryl | 5.1.3 and prior | CVE-2019-6111 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2019-6111 | 5.8 |
LibreOffice | The Document Foundation | 7.3.2.999998 and prior | CVE-2022-26306 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-26306 | |
LibreOffice | The Document Foundation | 7.3.1.999998 and prior | CVE-2022-26305 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-26305 | |
LibreOffice | The Document Foundation | 7.3.2.999998 and prior | CVE-2022-26307 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-26307 | |
LibreOffice | The Document Foundation | 7.3.2.999998 and prior | CVE-2022-26306 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-26306 | |
LibreOffice | The Document Foundation | 7.3.1.999998 and prior | CVE-2022-26305 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-26305 | |
LibreOffice | The Document Foundation | 7.3.2.999998 and prior | CVE-2022-26307 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-26307 | |
PHP | The PHP Group | 5.2.7 and prior | CVE-2008-2371 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2008-2371 | 7.5 |
PHP | The PHP Group | 5.2.7 and prior | CVE-2008-2371 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2008-2371 | 7.5 |
MySQL Server | Oracle Corporation | 8.0.12 and prior | CVE-2018-3133 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2018-3133 | 4.0 |
MySQL Server | Oracle Corporation | 5.7.21 and prior | CVE-2018-2819 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2018-2819 | 4.0 |
MySQL Server | Oracle Corporation | 5.7.21 and prior | CVE-2018-2817 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2018-2817 | 4.0 |
MySQL Server | Oracle Corporation | 5.7.16 and prior | CVE-2017-3257 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3257 | 4.0 |
MySQL Server | Oracle Corporation | 5.7.16 and prior | CVE-2017-3258 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3258 | 4.0 |
MySQL Server | Oracle Corporation | 5.7.16 and prior | CVE-2017-3265 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3265 | 4.9 |
MySQL Server | Oracle Corporation | 5.7.17 and prior | CVE-2017-3453 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-3453 | 4.0 |
MySQL Server | Oracle Corporation | 5.7.21 and prior | CVE-2018-2782 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2018-2782 | 4.0 |
MySQL Server | Oracle Corporation | 5.7.21 and prior | CVE-2018-2784 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2018-2784 | 4.0 |
MySQL Server | Oracle Corporation | 8.0.20 and prior | CVE-2020-14725 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-14725 | 4.0 |
MySQL Server | Oracle Corporation | 8.0.20 and prior | CVE-2020-14586 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-14586 | 4.0 |
MySQL Server | Oracle Corporation | 8.0.20 and prior | CVE-2020-14576 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-14576 | 4.0 |
Node.js | OpenJS Foundation | 18.4.999999.999998 and prior | CVE-2022-32212 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-32212 | |
Node.js LTS | Joyent, Inc. | 16.15.999999.999998 and prior | CVE-2022-32212 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-32212 | |
Node.js LTS | Joyent, Inc. | 16.13.1.999998 and prior | CVE-2022-21824 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-21824 | 6.4 |
Node.js Current | Joyent, Inc. | 18.4.999999.999998 and prior | CVE-2022-32212 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-32212 | |
Node.js LTS | Joyent, Inc. | 16.15.999999.999998 and prior | CVE-2022-32212 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-32212 | |
Node.js LTS | Joyent, Inc. | 16.13.1.999998 and prior | CVE-2022-21824 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-21824 | 6.4 |
Java SE Development Kit | Oracle Corporation | 9.0.0.0 and prior | CVE-2017-10345 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-10345 | 2.6 |
Java SE Development Kit | Oracle Corporation | 9.0.0.0 and prior | CVE-2017-10346 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-10346 | 6.8 |
Java SE Development Kit | Oracle Corporation | 9.0.0.0 and prior | CVE-2017-10347 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-10347 | 5.0 |
Java SE Development Kit | Oracle Corporation | 18.0.1.1.0 and prior | CVE-2022-21540 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-21540 | |
Java SE Development Kit | Oracle Corporation | 18.0.1.1.0 and prior | CVE-2022-21541 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-21541 | |
Java SE Development Kit | Oracle Corporation | 17.0.3.1.0 and prior | CVE-2022-21549 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-21549 | |
Java SE Development Kit | Oracle Corporation | 18.0.1.1.0 and prior | CVE-2022-34169 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-34169 | |
Java SE Development Kit | Oracle Corporation | 11.0.13.0 and prior | CVE-2022-21271 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-21271 | 5.0 |
Java SE Development Kit | Oracle Corporation | 18.0.0.0 and prior | CVE-2022-21434 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-21434 | 5.0 |
Java SE Development Kit | Oracle Corporation | 18.0.0.0 and prior | CVE-2022-21426 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-21426 | 5.0 |
Java SE Development Kit | Oracle Corporation | 14.0.0.0 and prior | CVE-2020-2800 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-2800 | 5.8 |
Java | Oracle Corporation | 9.0.0.0 and prior | CVE-2017-10345 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-10345 | 2.6 |
Java | Oracle Corporation | 9.0.0.0 and prior | CVE-2017-10346 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-10346 | 6.8 |
Java | Oracle Corporation | 9.0.0.0 and prior | CVE-2017-10347 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-10347 | 5.0 |
Java | Oracle Corporation | 18.0.1.1.0 and prior | CVE-2022-21540 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-21540 | |
Java | Oracle Corporation | 18.0.1.1.0 and prior | CVE-2022-21541 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-21541 | |
Java | Oracle Corporation | 17.0.3.1.0 and prior | CVE-2022-21549 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-21549 | |
Java | Oracle Corporation | 18.0.1.1.0 and prior | CVE-2022-34169 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-34169 | |
Java | Oracle Corporation | 11.0.13.0 and prior | CVE-2022-21271 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-21271 | 5.0 |
Java | Oracle Corporation | 18.0.0.0 and prior | CVE-2022-21434 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-21434 | 5.0 |
Java | Oracle Corporation | 18.0.0.0 and prior | CVE-2022-21426 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2022-21426 | 5.0 |
Java | Oracle Corporation | 14.0.0.0 and prior | CVE-2020-2800 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-2800 | 5.8 |
Java | Oracle Corporation | 9.0.0.0 and prior | CVE-2017-10345 | https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-10345 | 2.6 |
