2022 CVEs (page 108)
Page 108 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2572 | Critical | 9.8 | 2022-11-01 | In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keys of a disabled/dele… |
CVE-2022-44542 | Critical | 9.8 | 2022-11-01 | lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object destructor execution via a key/value pair i… |
CVE-2022-43355 | High | 7.2 | 2022-11-01 | Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_servic… |
CVE-2022-43354 | High | 7.2 | 2022-11-01 | Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/manage_request. |
CVE-2022-43353 | High | 7.2 | 2022-11-01 | Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order. |
CVE-2022-43752 | High | 7.8 | 2022-10-31 | Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalation vulnerability. A low privileged user c… |
CVE-2022-40296 | Critical | 9.8 | 2022-10-31 | The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints, potentially includ… |
CVE-2022-40295 | Medium | 4.9 | 2022-10-31 | The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which could lead to the com… |
CVE-2022-40294 | High | 8.8 | 2022-10-31 | The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within export data and then t… |
CVE-2022-40293 | Critical | 9.8 | 2022-10-31 | The application was vulnerable to a session fixation that could be used hijack accounts. |
CVE-2022-40292 | Medium | 5.3 | 2022-10-31 | The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve information on each account within the syst… |
CVE-2022-40291 | High | 8.8 | 2022-10-31 | The application was vulnerable to Cross-Site Request Forgery (CSRF) attacks, allowing an attacker to coerce users into sending malicious requests to the site… |
CVE-2022-40290 | Medium | 6.1 | 2022-10-31 | The application was vulnerable to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the barcode generation functionality, allowing atta… |
CVE-2022-40289 | Critical | 9.0 | 2022-10-31 | The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the upload and download functionality, which could be leveraged to esc… |
CVE-2022-40288 | Critical | 9.0 | 2022-10-31 | The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the user profile data fields, which could be leveraged to escalate pri… |
CVE-2022-40287 | Critical | 9.0 | 2022-10-31 | The application was found to be vulnerable to an authenticated Stored Cross-Site Scripting (XSS) vulnerability in messaging functionality, leading to privileg… |
CVE-2022-40190 | High | 8.8 | 2022-10-31 | SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting (XSS). The web application does not adequately sanitize request… |
CVE-2022-3785 | Medium | 6.3 | 2022-10-31 | A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4_DataBuffer::SetDataSize of th… |
CVE-2022-3784 | Medium | 6.3 | 2022-10-31 | A vulnerability classified as critical was found in Axiomatic Bento4 5e7bb34. Affected by this vulnerability is the function AP4_Mp4AudioDsiParser::ReadBits of… |
CVE-2022-3783 | Low | 3.5 | 2022-10-31 | A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unknown processing of the file components/u… |
CVE-2022-3059 | High | 8.6 | 2022-10-31 | The application was vulnerable to multiple instances of SQL injection (authenticated and unauthenticated) through a vulnerable parameter. Due to the stacked q… |
CVE-2022-39020 | High | 7.6 | 2022-10-31 | Multiple instances of XSS (stored and reflected) was found in the application. For example, features such as student assessment submission, file upload, news… |
CVE-2022-39019 | Medium | 6.3 | 2022-10-31 | Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to upload malicious files to the applicatio… |
CVE-2022-39018 | High | 8.2 | 2022-10-31 | Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL. |
CVE-2022-39017 | High | 8.2 | 2022-10-31 | Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-… |
CVE-2022-39016 | High | 8.2 | 2022-10-31 | Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload. |
CVE-2022-42925 | Critical | 9.9 | 2022-10-31 | There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to privilege escalate in… |
CVE-2022-42924 | High | 7.6 | 2022-10-31 | Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated… |
CVE-2022-42923 | High | 8.3 | 2022-10-31 | Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated… |
CVE-2022-41779 | High | 8.8 | 2022-10-31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the device connects to an… |
CVE-2022-41776 | High | 7.5 | 2022-10-31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allo… |
CVE-2022-41772 | Critical | 9.8 | 2022-10-31 | Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal. This path traver… |
CVE-2022-41688 | Critical | 9.8 | 2022-10-31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lack proper authentication for functions that create and modify user groups. An attack… |
CVE-2022-41681 | Critical | 9.9 | 2022-10-31 | There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to privilege escalate in… |
CVE-2022-41680 | High | 7.6 | 2022-10-31 | Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated… |
CVE-2022-41679 | Medium | 4.7 | 2022-10-31 | Forma LMS version 3.1.0 and earlier are affected by an Cross-Site scripting vulnerability, that could allow a remote attacker to inject javascript code on the… |
CVE-2022-41657 | Critical | 9.8 | 2022-10-31 | Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operati… |
CVE-2022-41644 | High | 8.8 | 2022-10-31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that changes group privileges. An attacker could… |
CVE-2022-41629 | High | 7.5 | 2022-10-31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which could allow an att… |
CVE-2022-40202 | Critical | 9.8 | 2022-10-31 | The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. An attacker could provide… |
CVE-2022-3499 | Medium | 6.5 | 2022-10-31 | An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a scenario where unauthorized disclosure of… |
CVE-2022-38142 | Critical | 9.8 | 2022-10-31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port withou… |
CVE-2022-31692 | Critical | 9.8 | 2022-10-31 | Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types… |
CVE-2022-31690 | High | 8.1 | 2022-10-31 | Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certa… |
CVE-2022-28763 | High | 8.8 | 2022-10-31 | The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL parsing vulnerability. If a malicious… |
CVE-2022-27583 | Critical | 9.1 | 2022-10-31 | A remote unprivileged attacker can interact with the configuration interface of a Flexi-Compact FLX3-CPUC1 or FLX3-CPUC2 running an affected firmware version t… |
CVE-2022-44081 | Medium | 5.5 | 2022-10-31 | Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail. |
CVE-2022-44079 | Medium | 5.5 | 2022-10-31 | pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component __sanitizer::StackDepotBase<__sanitizer::Sta… |
CVE-2022-43152 | Medium | 5.5 | 2022-10-31 | tsMuxer v2.6.16 was discovered to contain a heap overflow via the function BitStreamWriter::flushBits() at /tsMuxer/bitStream.h. |
CVE-2022-43151 | Medium | 5.5 | 2022-10-31 | timg v1.4.4 was discovered to contain a memory leak via the function timg::QueryBackgroundColor() at /timg/src/term-query.cc. |
CVE-2022-43148 | Medium | 5.5 | 2022-10-31 | rtf2html v0.2.0 was discovered to contain a heap overflow in the component /rtf2html/./rtf_tools.h. |
CVE-2022-39294 | High | 7.5 | 2022-10-31 | conduit-hyper integrates a conduit application with the hyper server. Prior to version 0.4.2, `conduit-hyper` did not check any limit on a request's length bef… |
CVE-2022-2741 | High | 8.2 | 2022-10-31 | The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN… |
CVE-2022-40471 | Critical | 9.8 | 2022-10-31 | Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in… |
CVE-2022-3774 | Medium | 5.4 | 2022-10-31 | A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fil… |
CVE-2022-3441 | Medium | 4.8 | 2022-10-31 | The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perf… |
CVE-2022-3440 | Medium | 6.1 | 2022-10-31 | The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape an URL before outputting it back in an attribute when a specific widget is present… |
CVE-2022-3420 | Medium | 4.8 | 2022-10-31 | The Official Integration for Billingo WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow high privilege users w… |
CVE-2022-3419 | Medium | 6.5 | 2022-10-31 | The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allowing any authenticated users like subsc… |
CVE-2022-3408 | Medium | 4.8 | 2022-10-31 | The WP Word Count WordPress plugin through 3.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to per… |
CVE-2022-3380 | High | 7.2 | 2022-10-31 | The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when a… |
CVE-2022-3374 | High | 7.2 | 2022-10-31 | The Ocean Extra WordPress plugin before 2.0.5 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privil… |
CVE-2022-3366 | High | 7.2 | 2022-10-31 | The PublishPress Capabilities WordPress plugin before 2.5.2, PublishPress Capabilities Pro WordPress plugin before 2.5.2 unserializes the content of imported f… |
CVE-2022-3360 | High | 8.1 | 2022-10-31 | The LearnPress WordPress plugin before 4.1.7.2 unserialises user input in a REST API endpoint available to unauthenticated users, which could lead to PHP Objec… |
CVE-2022-3357 | High | 8.8 | 2022-10-31 | The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection issues when a user i… |
CVE-2022-3334 | High | 7.2 | 2022-10-31 | The Easy WP SMTP WordPress plugin before 1.5.0 unserialises the content of an imported file, which could lead to PHP object injection issue when an admin impor… |
CVE-2022-3254 | Critical | 9.8 | 2022-10-31 | The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an… |
CVE-2022-3237 | Medium | 4.8 | 2022-10-31 | The WP Contact Slider WordPress plugin before 2.4.8 does not sanitize and escape its settings, allowing high privilege users such as admin to perform cross-Sit… |
CVE-2022-3096 | Medium | 5.4 | 2022-10-31 | The WP Total Hacks WordPress plugin through 4.7.2 does not prevent low privilege users from modifying the plugin's settings. This could allow users such as sub… |
CVE-2022-2627 | Medium | 6.1 | 2022-10-31 | The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected… |
CVE-2022-2190 | Medium | 6.1 | 2022-10-31 | The Gallery Plugin for WordPress plugin before 1.8.4.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which c… |
CVE-2022-2167 | Medium | 6.1 | 2022-10-31 | The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected… |
CVE-2022-3771 | Medium | 6.3 | 2022-10-31 | A vulnerability, which was classified as critical, has been found in easyii CMS. This issue affects the function file of the file helpers/Upload.php of the com… |
CVE-2022-3770 | Medium | 6.3 | 2022-10-31 | A vulnerability classified as critical was found in Yunjing CMS. This vulnerability affects unknown code of the file /index/user/upload_img.html. The manipulat… |
CVE-2022-40488 | Medium | 6.5 | 2022-10-31 | ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF). |
CVE-2022-40487 | Medium | 6.1 | 2022-10-31 | ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Search Users and Search Pages function. These vulner… |
CVE-2022-37623 | Critical | 9.8 | 2022-10-31 | Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js. |
CVE-2022-37620 | High | 7.5 | 2022-10-31 | A Regular Expression Denial of Service (ReDoS) flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression. |
CVE-2022-3766 | Medium | 6.1 | 2022-10-31 | Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8. |
CVE-2022-3765 | Medium | 5.4 | 2022-10-31 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.8. |
CVE-2022-40742 | Medium | 6.5 | 2022-10-31 | Mail SQR Expert system has a Local File Inclusion vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP fil… |
CVE-2022-40741 | Critical | 9.8 | 2022-10-31 | Mail SQR Expert’s specific function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to per… |
CVE-2022-40739 | Medium | 5.4 | 2022-10-31 | Ragic report generation page has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript to perform… |
CVE-2022-39027 | Medium | 5.4 | 2022-10-31 | U-Office Force Forum function has insufficient filtering for special characters. A remote attacker with general user privilege can inject JavaScript and perfor… |
CVE-2022-39026 | Medium | 5.4 | 2022-10-31 | U-Office Force UserDefault page has insufficient filtering for special characters in the HTTP header fields. A remote attacker with general user privilege can… |
CVE-2022-39025 | Medium | 6.1 | 2022-10-31 | U-Office Force PrintMessage function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to in… |
CVE-2022-39024 | Medium | 6.1 | 2022-10-31 | U-Office Force Bulletin function has insufficient filtering for special characters. An unauthenticated remote attacker can exploit this vulnerability to inject… |
CVE-2022-39023 | Medium | 6.5 | 2022-10-31 | U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download a… |
CVE-2022-39022 | Medium | 6.5 | 2022-10-31 | U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download a… |
CVE-2022-39021 | Medium | 6.1 | 2022-10-31 | U-Office Force login function has an Open Redirect vulnerability. An unauthenticated remote attacker can exploit this vulnerability to redirect user to arbitra… |
CVE-2022-40617 | High | 7.5 | 2022-10-31 | strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) cer… |
CVE-2022-44034 | Medium | 6.4 | 2022-10-30 | An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/scr24x_cs.c has a race condition and resultant use-after-free if a physically pr… |
CVE-2022-44033 | Medium | 6.4 | 2022-10-30 | An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race condition and resultant use-after-free if a physically pr… |
CVE-2022-44032 | Medium | 6.4 | 2022-10-30 | An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000_cs.c has a race condition and resultant use-after-free if a physically pr… |
CVE-2022-44023 | Medium | 5.3 | 2022-10-30 | PwnDoc through 0.5.3 might allow remote attackers to identify disabled user account names by leveraging response messages for authentication attempts. |
CVE-2022-44022 | Medium | 5.3 | 2022-10-30 | PwnDoc through 0.5.3 might allow remote attackers to identify valid user account names by leveraging response timings for authentication attempts. |
CVE-2022-44020 | Medium | 5.5 | 2022-10-30 | An issue was discovered in OpenStack Sushy-Tools through 0.21.0 and VirtualBMC through 2.2.2. Changing the boot device configuration with these packages remove… |
CVE-2022-44019 | High | 8.8 | 2022-10-30 | In Total.js 4 before 0e5ace7, /api/common/ping can achieve remote command execution via shell metacharacters in the host parameter. |
CVE-2022-42915 | High | 8.1 | 2022-10-29 | curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection to the remote serve… |
CVE-2022-41974 | High | 7.8 | 2022-10-29 | multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local user… |