2022 CVEs (page 107)
Page 107 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-32899 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13, watchOS 9. An app may be able… |
CVE-2022-32898 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13, watchOS 9. An app may be able… |
CVE-2022-32895 | Medium | 4.7 | 2022-11-01 | A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file… |
CVE-2022-32892 | High | 8.6 | 2022-11-01 | An access issue was addressed with improvements to the sandbox. This issue is fixed in Safari 16, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13. A sandbox… |
CVE-2022-32890 | High | 8.6 | 2022-11-01 | A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. A sandboxed process may be able to circumvent sandbox restrictions. |
CVE-2022-32889 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16, watchOS 9. An app may be able to execute arbitrary code with kernel privi… |
CVE-2022-32888 | High | 8.8 | 2022-11-01 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPa… |
CVE-2022-32887 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16. An app may be able to execute arbitrary code with kernel privileges. |
CVE-2022-32881 | Medium | 5.5 | 2022-11-01 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6, tv… |
CVE-2022-32879 | Low | 2.4 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, watchOS 9, tvOS 16. A us… |
CVE-2022-32877 | Medium | 5.5 | 2022-11-01 | A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Monterey 12.6. An app may be able to access… |
CVE-2022-32875 | Medium | 5.0 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, watchOS 9, macOS Monterey 12.6… |
CVE-2022-32870 | Low | 2.4 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. A user with physical access to a device… |
CVE-2022-32867 | Low | 2.4 | 2022-11-01 | This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. A user with physical access to an iOS device may be ab… |
CVE-2022-32866 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, watchOS 9, macOS Monterey 12.6, tvOS 16. An… |
CVE-2022-32865 | High | 7.8 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kerne… |
CVE-2022-32862 | Medium | 5.5 | 2022-11-01 | This issue was addressed with improved data protection. This issue is fixed in macOS Big Sur 11.7.1, macOS Ventura 13, macOS Monterey 12.6.1. An app with root… |
CVE-2022-32859 | Medium | 5.3 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in iOS 16. Deleted contacts may still appear in spotlight search results. |
CVE-2022-32858 | Medium | 5.5 | 2022-11-01 | The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13, watchOS 9. An app may be able to leak sensitive kernel… |
CVE-2022-32835 | Low | 3.3 | 2022-11-01 | This issue was addressed with improved entitlements. This issue is fixed in iOS 16, watchOS 9. An app may be able to read a persistent device identifier. |
CVE-2022-32827 | Medium | 5.5 | 2022-11-01 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16, macOS Ventura 13. An app may be able to cause a denial-o… |
CVE-2022-32794 | High | 7.8 | 2022-11-01 | A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6… |
CVE-2022-26762 | High | 7.8 | 2022-11-01 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious applic… |
CVE-2022-26730 | High | 8.8 | 2022-11-01 | A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is fixed in macOS Vent… |
CVE-2022-26719 | High | 8.8 | 2022-11-01 | A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey… |
CVE-2022-26717 | High | 8.8 | 2022-11-01 | A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iOS 15.5 and iPadOS 15.5, macOS Monterey 1… |
CVE-2022-26716 | High | 8.8 | 2022-11-01 | A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey… |
CVE-2022-26710 | High | 8.8 | 2022-11-01 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS… |
CVE-2022-26709 | High | 8.8 | 2022-11-01 | A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 1… |
CVE-2022-22677 | Medium | 4.3 | 2022-11-01 | A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 1… |
CVE-2022-22658 | Medium | 6.5 | 2022-11-01 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 16.0.3. Processing a maliciously crafted email message may l… |
CVE-2022-43362 | High | 7.2 | 2022-11-01 | Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parameter at loan_by_class.php. |
CVE-2022-43361 | Medium | 4.8 | 2022-11-01 | Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component pop_chart.php. |
CVE-2022-43331 | High | 7.2 | 2022-11-01 | Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php_action/printOrder.php. |
CVE-2022-43330 | High | 7.2 | 2022-11-01 | Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php. |
CVE-2022-43329 | High | 7.2 | 2022-11-01 | Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php. |
CVE-2022-43328 | High | 7.2 | 2022-11-01 | Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php. |
CVE-2022-3781 | Medium | 6.5 | 2022-11-01 | Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manager 2022.2.26 and pri… |
CVE-2022-3780 | High | 7.5 | 2022-11-01 | Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deleted users to access… |
CVE-2022-3304 | High | 8.8 | 2022-11-01 | Use after free in CSS in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2022-3786 | High | 7.5 | 2022-11-01 | A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain si… |
CVE-2022-3602 | High | 7.5 | 2022-11-01 | A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain si… |
CVE-2022-23738 | Medium | 5.7 | 2022-11-01 | An improper cache key vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to access private repository files through a… |
CVE-2022-40839 | High | 7.5 | 2022-11-01 | A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate databas… |
CVE-2022-39369 | High | 8.0 | 2022-11-01 | phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service (CAS) server. The phpCAS lib… |
CVE-2022-3804 | Medium | 4.3 | 2022-11-01 | A vulnerability was found in eolinker apinto-dashboard. It has been classified as problematic. Affected is an unknown function of the file /login. The manipula… |
CVE-2022-3803 | Low | 3.5 | 2022-11-01 | A vulnerability was found in eolinker apinto-dashboard and classified as problematic. This issue affects some unknown processing of the file /api/discoveries/… |
CVE-2022-3802 | Medium | 6.3 | 2022-11-01 | A vulnerability has been found in IBAX go-ibax and classified as critical. This vulnerability affects unknown code of the file /api/v2/open/rowsInfo. The manip… |
CVE-2022-3801 | Medium | 6.3 | 2022-11-01 | A vulnerability, which was classified as critical, was found in IBAX go-ibax. This affects an unknown part of the file /api/v2/open/rowsInfo. The manipulation… |
CVE-2022-3800 | Medium | 6.3 | 2022-11-01 | A vulnerability, which was classified as critical, has been found in IBAX go-ibax. Affected by this issue is some unknown functionality of the file /api/v2/ope… |
CVE-2022-3799 | Medium | 6.3 | 2022-11-01 | A vulnerability classified as critical was found in IBAX go-ibax. Affected by this vulnerability is an unknown functionality of the file /api/v2/open/tablesInf… |
CVE-2022-3798 | Medium | 6.3 | 2022-11-01 | A vulnerability classified as critical has been found in IBAX go-ibax. Affected is an unknown function of the file /api/v2/open/tablesInfo. The manipulation le… |
CVE-2022-3797 | Medium | 6.3 | 2022-11-01 | A vulnerability was found in eolinker apinto-dashboard. It has been rated as problematic. This issue affects some unknown processing of the file /login. The ma… |
CVE-2022-34662 | Medium | 6.5 | 2022-11-01 | When users add resources to the resource center with a relation path will cause path traversal issues and only for logged-in users. You could upgrade to versio… |
CVE-2022-31777 | Medium | 5.4 | 2022-11-01 | A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the… |
CVE-2022-43223 | High | 7.5 | 2022-11-01 | open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service (DoS)… |
CVE-2022-43222 | High | 7.5 | 2022-11-01 | open5gs v2.4.11 was discovered to contain a memory leak in the component src/smf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service… |
CVE-2022-43221 | High | 7.5 | 2022-11-01 | open5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service… |
CVE-2022-43127 | High | 7.2 | 2022-11-01 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/update_status.php. |
CVE-2022-43126 | High | 7.2 | 2022-11-01 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/manage_test.php. |
CVE-2022-43125 | High | 7.2 | 2022-11-01 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/manage_appointment.p… |
CVE-2022-43124 | High | 7.2 | 2022-11-01 | Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user. |
CVE-2022-43086 | Medium | 4.9 | 2022-11-01 | Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via update_customer.php. |
CVE-2022-43085 | High | 7.2 | 2022-11-01 | An arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2022-43084 | Medium | 4.8 | 2022-11-01 | A cross-site scripting (XSS) vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary web scripts or HTML vi… |
CVE-2022-43083 | High | 7.2 | 2022-11-01 | An arbitrary file upload vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary code via a crafted PHP fil… |
CVE-2022-43082 | Medium | 6.1 | 2022-11-01 | A cross-site scripting (XSS) vulnerability in /fastfood/purchase.php of Fast Food Ordering System v1.0 allows attackers to execute arbitrary web scripts or HTM… |
CVE-2022-43081 | High | 7.5 | 2022-11-01 | Fast Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /fastfood/purchase.php. |
CVE-2022-43079 | Medium | 6.1 | 2022-11-01 | A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scripts or HTML via a cr… |
CVE-2022-43078 | Medium | 4.8 | 2022-11-01 | A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Web-Based Student Clearance System v1.0 allows attackers to execute arbitrary web scripts o… |
CVE-2022-43076 | Medium | 4.8 | 2022-11-01 | A cross-site scripting (XSS) vulnerability in /admin/edit-admin.php of Web-Based Student Clearance System v1.0 allows attackers to execute arbitrary web script… |
CVE-2022-3789 | Medium | 5.5 | 2022-11-01 | A vulnerability has been found in Tim Campus Confession Wall and classified as critical. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2022-42327 | High | 7.1 | 2022-11-01 | x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global share… |
CVE-2022-42326 | Medium | 5.5 | 2022-11-01 | Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/v… |
CVE-2022-42325 | Medium | 5.5 | 2022-11-01 | Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/v… |
CVE-2022-42324 | Medium | 5.5 | 2022-11-01 | Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenbus library takes a C uint32_t out of the… |
CVE-2022-42323 | Medium | 5.5 | 2022-11-01 | Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulne… |
CVE-2022-42322 | Medium | 5.5 | 2022-11-01 | Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulne… |
CVE-2022-42321 | Medium | 6.5 | 2022-11-01 | Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations (e.g. for deleting a sub-tree of Xensto… |
CVE-2022-42320 | High | 7.0 | 2022-11-01 | Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid. When a domain is gone, there might be Xenst… |
CVE-2022-42319 | Medium | 6.5 | 2022-11-01 | Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might need to allocate quite large amounts of… |
CVE-2022-42318 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42317 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42316 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42315 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42314 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42313 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42312 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42311 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42310 | Medium | 5.5 | 2022-11-01 | Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphane… |
CVE-2022-42309 | High | 8.8 | 2022-11-01 | Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during node creation in an… |
CVE-2022-42252 | High | 7.5 | 2022-11-01 | If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rej… |
CVE-2022-3369 | High | 8.6 | 2022-11-01 | An Improper Access Control vulnerability in the bdservicehost.exe component, as used in Bitdefender Engines for Windows, allows an attacker to delete privilege… |
CVE-2022-25892 | High | 7.5 | 2022-11-01 | The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service (DoS) when supplied with a… |
CVE-2022-25885 | High | 7.5 | 2022-11-01 | The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service (DoS) when PDFStreamForResponse() is used with invalid d… |
CVE-2022-41553 | Medium | 6.5 | 2022-11-01 | Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi… |
CVE-2022-41552 | Critical | 9.8 | 2022-11-01 | Server-Side Request Forgery (SSRF) vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Data Center Analytics, Analytics probe components), Hita… |
CVE-2022-3373 | High | 8.8 | 2022-11-01 | Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (… |
CVE-2022-3370 | High | 8.8 | 2022-11-01 | Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2022-3191 | Medium | 6.6 | 2022-11-01 | Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Analyzer on Linux (Virtual Strage Software Agent component) allows local u… |