2022 CVEs (page 108)
Page 108 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-42319 | Medium | 6.5 | 2022-11-01 | Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might need to allocate quite large amounts of… |
CVE-2022-42318 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42317 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42316 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42315 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42314 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42313 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42312 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42311 | Medium | 6.5 | 2022-11-01 | Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities cor… |
CVE-2022-42310 | Medium | 5.5 | 2022-11-01 | Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphane… |
CVE-2022-42309 | High | 8.8 | 2022-11-01 | Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during node creation in an… |
CVE-2022-42252 | High | 7.5 | 2022-11-01 | If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was configured to ignore invalid HTTP headers via setting rej… |
CVE-2022-3369 | High | 8.6 | 2022-11-01 | An Improper Access Control vulnerability in the bdservicehost.exe component, as used in Bitdefender Engines for Windows, allows an attacker to delete privilege… |
CVE-2022-25892 | High | 7.5 | 2022-11-01 | The package muhammara before 2.6.1, from 3.0.0 and before 3.1.1; all versions of package hummus are vulnerable to Denial of Service (DoS) when supplied with a… |
CVE-2022-25885 | High | 7.5 | 2022-11-01 | The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service (DoS) when PDFStreamForResponse() is used with invalid d… |
CVE-2022-41553 | Medium | 6.5 | 2022-11-01 | Insertion of Sensitive Information into Temporary File vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi… |
CVE-2022-41552 | Critical | 9.8 | 2022-11-01 | Server-Side Request Forgery (SSRF) vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Data Center Analytics, Analytics probe components), Hita… |
CVE-2022-3373 | High | 8.8 | 2022-11-01 | Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (… |
CVE-2022-3370 | High | 8.8 | 2022-11-01 | Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2022-3191 | Medium | 6.6 | 2022-11-01 | Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Analyzer on Linux (Virtual Strage Software Agent component) allows local u… |
CVE-2022-2572 | Critical | 9.8 | 2022-11-01 | In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keys of a disabled/dele… |
CVE-2022-44542 | Critical | 9.8 | 2022-11-01 | lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object destructor execution via a key/value pair i… |
CVE-2022-43355 | High | 7.2 | 2022-11-01 | Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_servic… |
CVE-2022-43354 | High | 7.2 | 2022-11-01 | Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/manage_request. |
CVE-2022-43353 | High | 7.2 | 2022-11-01 | Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order. |
CVE-2022-43752 | High | 7.8 | 2022-10-31 | Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalation vulnerability. A low privileged user c… |
CVE-2022-40296 | Critical | 9.8 | 2022-10-31 | The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints, potentially includ… |
CVE-2022-40295 | Medium | 4.9 | 2022-10-31 | The application was vulnerable to an authenticated information disclosure, allowing administrators to view unsalted user passwords, which could lead to the com… |
CVE-2022-40294 | High | 8.8 | 2022-10-31 | The application was identified to have an CSV injection in data export functionality, allowing for malicious code to be embedded within export data and then t… |
CVE-2022-40293 | Critical | 9.8 | 2022-10-31 | The application was vulnerable to a session fixation that could be used hijack accounts. |
CVE-2022-40292 | Medium | 5.3 | 2022-10-31 | The application allowed for Unauthenticated User Enumeration by interacting with an unsecured endpoint to retrieve information on each account within the syst… |
CVE-2022-40291 | High | 8.8 | 2022-10-31 | The application was vulnerable to Cross-Site Request Forgery (CSRF) attacks, allowing an attacker to coerce users into sending malicious requests to the site… |
CVE-2022-40290 | Medium | 6.1 | 2022-10-31 | The application was vulnerable to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the barcode generation functionality, allowing atta… |
CVE-2022-40289 | Critical | 9.0 | 2022-10-31 | The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the upload and download functionality, which could be leveraged to esc… |
CVE-2022-40288 | Critical | 9.0 | 2022-10-31 | The application was vulnerable to an authenticated Stored Cross-Site Scripting (XSS) in the user profile data fields, which could be leveraged to escalate pri… |
CVE-2022-40287 | Critical | 9.0 | 2022-10-31 | The application was found to be vulnerable to an authenticated Stored Cross-Site Scripting (XSS) vulnerability in messaging functionality, leading to privileg… |
CVE-2022-40190 | High | 8.8 | 2022-10-31 | SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting (XSS). The web application does not adequately sanitize request… |
CVE-2022-3785 | Medium | 6.3 | 2022-10-31 | A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4_DataBuffer::SetDataSize of th… |
CVE-2022-3784 | Medium | 6.3 | 2022-10-31 | A vulnerability classified as critical was found in Axiomatic Bento4 5e7bb34. Affected by this vulnerability is the function AP4_Mp4AudioDsiParser::ReadBits of… |
CVE-2022-3783 | Low | 3.5 | 2022-10-31 | A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unknown processing of the file components/u… |
CVE-2022-3059 | High | 8.6 | 2022-10-31 | The application was vulnerable to multiple instances of SQL injection (authenticated and unauthenticated) through a vulnerable parameter. Due to the stacked q… |
CVE-2022-39020 | High | 7.6 | 2022-10-31 | Multiple instances of XSS (stored and reflected) was found in the application. For example, features such as student assessment submission, file upload, news… |
CVE-2022-39019 | Medium | 6.3 | 2022-10-31 | Broken access controls on PDFtron WebviewerUI in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to upload malicious files to the applicatio… |
CVE-2022-39018 | High | 8.2 | 2022-10-31 | Broken access controls on PDFtron data in M-Files Hubshare before 3.3.11.3 allows unauthenticated attackers to access restricted PDF files via a known URL. |
CVE-2022-39017 | High | 8.2 | 2022-10-31 | Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-… |
CVE-2022-39016 | High | 8.2 | 2022-10-31 | Javascript injection in PDFtron in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via a crafted PDF upload. |
CVE-2022-42925 | Critical | 9.9 | 2022-10-31 | There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to privilege escalate in… |
CVE-2022-42924 | High | 7.6 | 2022-10-31 | Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated… |
CVE-2022-42923 | High | 8.3 | 2022-10-31 | Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated… |
CVE-2022-41779 | High | 8.8 | 2022-10-31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the device connects to an… |
CVE-2022-41776 | High | 7.5 | 2022-10-31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to trigger the WriteConfiguration method, which could allo… |
CVE-2022-41772 | Critical | 9.8 | 2022-10-31 | Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal. This path traver… |
CVE-2022-41688 | Critical | 9.8 | 2022-10-31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lack proper authentication for functions that create and modify user groups. An attack… |
CVE-2022-41681 | Critical | 9.9 | 2022-10-31 | There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to privilege escalate in… |
CVE-2022-41680 | High | 7.6 | 2022-10-31 | Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated… |
CVE-2022-41679 | Medium | 4.7 | 2022-10-31 | Forma LMS version 3.1.0 and earlier are affected by an Cross-Site scripting vulnerability, that could allow a remote attacker to inject javascript code on the… |
CVE-2022-41657 | Critical | 9.8 | 2022-10-31 | Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operati… |
CVE-2022-41644 | High | 8.8 | 2022-10-31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that changes group privileges. An attacker could… |
CVE-2022-41629 | High | 7.5 | 2022-10-31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, which could allow an att… |
CVE-2022-40202 | Critical | 9.8 | 2022-10-31 | The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. An attacker could provide… |
CVE-2022-3499 | Medium | 6.5 | 2022-10-31 | An authenticated attacker could utilize the identical agent and cluster node linking keys to potentially allow for a scenario where unauthorized disclosure of… |
CVE-2022-38142 | Critical | 9.8 | 2022-10-31 | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port withou… |
CVE-2022-31692 | Critical | 9.8 | 2022-10-31 | Spring Security, versions 5.7 prior to 5.7.5 and 5.6 prior to 5.6.9 could be susceptible to authorization rules bypass via forward or include dispatcher types… |
CVE-2022-31690 | High | 8.1 | 2022-10-31 | Spring Security, versions 5.7 prior to 5.7.5, and 5.6 prior to 5.6.9, and older unsupported versions could be susceptible to a privilege escalation under certa… |
CVE-2022-28763 | High | 8.8 | 2022-10-31 | The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL parsing vulnerability. If a malicious… |
CVE-2022-27583 | Critical | 9.1 | 2022-10-31 | A remote unprivileged attacker can interact with the configuration interface of a Flexi-Compact FLX3-CPUC1 or FLX3-CPUC2 running an affected firmware version t… |
CVE-2022-44081 | Medium | 5.5 | 2022-10-31 | Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail. |
CVE-2022-44079 | Medium | 5.5 | 2022-10-31 | pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component __sanitizer::StackDepotBase<__sanitizer::Sta… |
CVE-2022-43152 | Medium | 5.5 | 2022-10-31 | tsMuxer v2.6.16 was discovered to contain a heap overflow via the function BitStreamWriter::flushBits() at /tsMuxer/bitStream.h. |
CVE-2022-43151 | Medium | 5.5 | 2022-10-31 | timg v1.4.4 was discovered to contain a memory leak via the function timg::QueryBackgroundColor() at /timg/src/term-query.cc. |
CVE-2022-43148 | Medium | 5.5 | 2022-10-31 | rtf2html v0.2.0 was discovered to contain a heap overflow in the component /rtf2html/./rtf_tools.h. |
CVE-2022-39294 | High | 7.5 | 2022-10-31 | conduit-hyper integrates a conduit application with the hyper server. Prior to version 0.4.2, `conduit-hyper` did not check any limit on a request's length bef… |
CVE-2022-2741 | High | 8.2 | 2022-10-31 | The denial-of-service can be triggered by transmitting a carefully crafted CAN frame on the same CAN network as the vulnerable node. The frame must have a CAN… |
CVE-2022-40471 | Critical | 9.8 | 2022-10-31 | Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in… |
CVE-2022-3774 | Medium | 5.4 | 2022-10-31 | A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fil… |
CVE-2022-3441 | Medium | 4.8 | 2022-10-31 | The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perf… |
CVE-2022-3440 | Medium | 6.1 | 2022-10-31 | The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape an URL before outputting it back in an attribute when a specific widget is present… |
CVE-2022-3420 | Medium | 4.8 | 2022-10-31 | The Official Integration for Billingo WordPress plugin before 3.4.0 does not sanitise and escape some of its settings, which could allow high privilege users w… |
CVE-2022-3419 | Medium | 6.5 | 2022-10-31 | The Automatic User Roles Switcher WordPress plugin before 1.1.2 does not have authorisation and proper CSRF checks, allowing any authenticated users like subsc… |
CVE-2022-3408 | Medium | 4.8 | 2022-10-31 | The WP Word Count WordPress plugin through 3.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to per… |
CVE-2022-3380 | High | 7.2 | 2022-10-31 | The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when a… |
CVE-2022-3374 | High | 7.2 | 2022-10-31 | The Ocean Extra WordPress plugin before 2.0.5 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privil… |
CVE-2022-3366 | High | 7.2 | 2022-10-31 | The PublishPress Capabilities WordPress plugin before 2.5.2, PublishPress Capabilities Pro WordPress plugin before 2.5.2 unserializes the content of imported f… |
CVE-2022-3360 | High | 8.1 | 2022-10-31 | The LearnPress WordPress plugin before 4.1.7.2 unserialises user input in a REST API endpoint available to unauthenticated users, which could lead to PHP Objec… |
CVE-2022-3357 | High | 8.8 | 2022-10-31 | The Smart Slider 3 WordPress plugin before 3.5.1.11 unserialises the content of an imported file, which could lead to PHP object injection issues when a user i… |
CVE-2022-3334 | High | 7.2 | 2022-10-31 | The Easy WP SMTP WordPress plugin before 1.5.0 unserialises the content of an imported file, which could lead to PHP object injection issue when an admin impor… |
CVE-2022-3254 | Critical | 9.8 | 2022-10-31 | The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an… |
CVE-2022-3237 | Medium | 4.8 | 2022-10-31 | The WP Contact Slider WordPress plugin before 2.4.8 does not sanitize and escape its settings, allowing high privilege users such as admin to perform cross-Sit… |
CVE-2022-3096 | Medium | 5.4 | 2022-10-31 | The WP Total Hacks WordPress plugin through 4.7.2 does not prevent low privilege users from modifying the plugin's settings. This could allow users such as sub… |
CVE-2022-2627 | Medium | 6.1 | 2022-10-31 | The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected… |
CVE-2022-2190 | Medium | 6.1 | 2022-10-31 | The Gallery Plugin for WordPress plugin before 1.8.4.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which c… |
CVE-2022-2167 | Medium | 6.1 | 2022-10-31 | The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected… |
CVE-2022-3771 | Medium | 6.3 | 2022-10-31 | A vulnerability, which was classified as critical, has been found in easyii CMS. This issue affects the function file of the file helpers/Upload.php of the com… |
CVE-2022-3770 | Medium | 6.3 | 2022-10-31 | A vulnerability classified as critical was found in Yunjing CMS. This vulnerability affects unknown code of the file /index/user/upload_img.html. The manipulat… |
CVE-2022-40488 | Medium | 6.5 | 2022-10-31 | ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF). |
CVE-2022-40487 | Medium | 6.1 | 2022-10-31 | ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Search Users and Search Pages function. These vulner… |
CVE-2022-37623 | Critical | 9.8 | 2022-10-31 | Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js. |
CVE-2022-37620 | High | 7.5 | 2022-10-31 | A Regular Expression Denial of Service (ReDoS) flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression. |
CVE-2022-3766 | Medium | 6.1 | 2022-10-31 | Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8. |
CVE-2022-3765 | Medium | 5.4 | 2022-10-31 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.8. |