2022 CVEs (page 114)
Page 114 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-43037 | Medium | 6.5 | 2022-10-19 | An issue was discovered in Bento4 1.6.0-639. There is a memory leak in the function AP4_File::ParseStream in /Core/Ap4File.cpp. |
CVE-2022-43035 | Medium | 6.5 | 2022-10-19 | An issue was discovered in Bento4 v1.6.0-639. There is a heap-buffer-overflow in AP4_Dec3Atom::AP4_Dec3Atom at Ap4Dec3Atom.cpp, leading to a Denial of Service… |
CVE-2022-43034 | Medium | 6.5 | 2022-10-19 | An issue was discovered in Bento4 v1.6.0-639. There is a heap buffer overflow vulnerability in the AP4_BitReader::SkipBits(unsigned int) function in mp42ts. |
CVE-2022-43033 | Medium | 6.5 | 2022-10-19 | An issue was discovered in Bento4 1.6.0-639. There is a bad free in the component AP4_HdlrAtom::~AP4_HdlrAtom() which allows attackers to cause a Denial of Ser… |
CVE-2022-43032 | Medium | 6.5 | 2022-10-19 | An issue was discovered in Bento4 v1.6.0-639. There is a memory leak in AP4_DescriptorFactory::CreateDescriptorFromStream in Core/Ap4DescriptorFactory.cpp, as… |
CVE-2022-39301 | High | 8.2 | 2022-10-19 | sra-admin is a background rights management system that separates the front and back end. sra-admin version 1.1.1 has a storage cross-site scripting (XSS) vuln… |
CVE-2022-23734 | High | 8.8 | 2022-10-19 | A deserialization of untrusted data vulnerability was identified in GitHub Enterprise Server that could potentially lead to remote code execution on the SVNBri… |
CVE-2022-3608 | High | 8.4 | 2022-10-19 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha. |
CVE-2022-3607 | Medium | 6.0 | 2022-10-19 | Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3. |
CVE-2022-39267 | High | 8.8 | 2022-10-19 | Bifrost is a heterogeneous middleware that synchronizes MySQL, MariaDB to Redis, MongoDB, ClickHouse, MySQL and other services for production environments. Ver… |
CVE-2022-41415 | Critical | 9.8 | 2022-10-19 | Acer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the RevserveMem component. This vulnerability allows attackers to cause a… |
CVE-2022-39260 | High | 8.5 | 2022-10-19 | Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement Git's push/pull fun… |
CVE-2022-39253 | Medium | 5.5 | 2022-10-19 | Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are… |
CVE-2022-39233 | Medium | 4.3 | 2022-10-19 | Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions 12.9.99.228 and above, prior to 14.0.99.24… |
CVE-2022-33217 | High | 7.8 | 2022-10-19 | Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon M… |
CVE-2022-33214 | High | 8.4 | 2022-10-19 | Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdr… |
CVE-2022-33210 | High | 8.4 | 2022-10-19 | Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snap… |
CVE-2022-25750 | High | 8.4 | 2022-10-19 | Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile |
CVE-2022-25749 | High | 7.5 | 2022-10-19 | Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2022-25748 | Critical | 9.8 | 2022-10-19 | Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2022-25736 | High | 7.5 | 2022-10-19 | Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S… |
CVE-2022-25723 | High | 8.4 | 2022-10-19 | Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile |
CVE-2022-25720 | Critical | 9.8 | 2022-10-19 | Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C… |
CVE-2022-25719 | High | 8.2 | 2022-10-19 | Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon C… |
CVE-2022-25718 | Critical | 9.1 | 2022-10-19 | Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consum… |
CVE-2022-25687 | High | 7.3 | 2022-10-19 | memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2022-25666 | Medium | 6.7 | 2022-10-19 | Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer… |
CVE-2022-25665 | Medium | 6.8 | 2022-10-19 | Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile |
CVE-2022-25664 | Medium | 6.2 | 2022-10-19 | Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons… |
CVE-2022-25663 | Medium | 5.5 | 2022-10-19 | Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon Compute, Snapdragon Con… |
CVE-2022-25662 | Medium | 5.3 | 2022-10-19 | Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT… |
CVE-2022-25661 | High | 8.4 | 2022-10-19 | Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn… |
CVE-2022-25660 | High | 7.8 | 2022-10-19 | Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mob… |
CVE-2022-22078 | Medium | 4.6 | 2022-10-19 | Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calculated in Snapdragon Auto, Sn… |
CVE-2022-22077 | High | 8.4 | 2022-10-19 | Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile |
CVE-2022-3606 | Low | 3.5 | 2022-10-19 | A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by_sec_insn of the file tools/lib/bpf/lib… |
CVE-2022-42467 | Medium | 5.3 | 2022-10-19 | When running in prototype mode, the h2 webconsole module (accessible from the Prototype menu) is automatically made available with the ability to directly quer… |
CVE-2022-42466 | Medium | 6.1 | 2022-10-19 | Prior to 2.0.0-M9, it was possible for an end-user to set the value of an editable string property of a domain object to a value that would be rendered unchang… |
CVE-2022-40798 | High | 7.5 | 2022-10-19 | OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its… |
CVE-2022-38901 | Medium | 5.4 | 2022-10-19 | A Cross-site scripting (XSS) vulnerability in the Document and Media module - file upload functionality in Liferay Digital Experience Platform 7.3.10 SP3 allow… |
CVE-2022-35860 | Medium | 6.8 | 2022-10-19 | Missing AES encryption in Corsair K63 Wireless 3.1.3 allows physically proximate attackers to inject and sniff keystrokes via 2.4 GHz radio transmissions. |
CVE-2022-33077 | High | 7.5 | 2022-10-19 | An access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any customer's address via the addressedit endpoint. |
CVE-2022-41500 | High | 8.8 | 2022-10-18 | EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery (CSRF) vulnerabilities via the Members Center, Editorial Membership, and Points Re… |
CVE-2022-42218 | High | 7.2 | 2022-10-18 | Open Source SACCO Management System v1.0 vulnerable to SQL Injection via /sacco_shield/manage_loan.php. |
CVE-2022-42117 | Medium | 6.1 | 2022-10-18 | A Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.3.2 through 7.4.3.16, and Liferay DXP 7.3 before update 6, and 7.4… |
CVE-2022-42116 | Medium | 6.1 | 2022-10-18 | A Cross-site scripting (XSS) vulnerability in the Frontend Editor module's integration with CKEditor in Liferay Portal 7.3.2 through 7.4.3.14, and Liferay DXP… |
CVE-2022-42115 | Medium | 5.4 | 2022-10-18 | Cross-site scripting (XSS) vulnerability in the Object module's edit object details page in Liferay Portal 7.4.3.4 through 7.4.3.36 allows remote attackers to… |
CVE-2022-42114 | Medium | 5.4 | 2022-10-18 | A Cross-site scripting (XSS) vulnerability in the Role module's edit role assignees page in Liferay Portal 7.4.0 through 7.4.3.36, and Liferay DXP 7.4 before u… |
CVE-2022-42113 | Medium | 6.1 | 2022-10-18 | A Cross-site scripting (XSS) vulnerability in Document Library module in Liferay Portal 7.4.3.30 through 7.4.3.36, and Liferay DXP 7.4 update 30 through update… |
CVE-2022-42112 | Medium | 5.4 | 2022-10-18 | A Cross-site scripting (XSS) vulnerability in the Portal Search module's Sort widget in Liferay Portal 7.2.0 through 7.4.3.24, and Liferay DXP 7.2 before fix p… |
CVE-2022-39428 | Critical | 9.8 | 2022-10-18 | Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected ar… |
CVE-2022-39427 | High | 8.8 | 2022-10-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Easily… |
CVE-2022-39426 | High | 8.1 | 2022-10-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Difficu… |
CVE-2022-39425 | High | 8.1 | 2022-10-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Difficu… |
CVE-2022-39424 | High | 8.1 | 2022-10-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Difficu… |
CVE-2022-39423 | Medium | 6.0 | 2022-10-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.38. Easily… |
CVE-2022-39422 | High | 7.5 | 2022-10-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.38. Difficu… |
CVE-2022-39421 | High | 7.3 | 2022-10-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Easily… |
CVE-2022-39420 | Medium | 5.4 | 2022-10-18 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Functional Security). Supported versions that are affect… |
CVE-2022-39419 | Medium | 4.3 | 2022-10-18 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows… |
CVE-2022-39417 | Medium | 5.5 | 2022-10-18 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnera… |
CVE-2022-39412 | High | 7.5 | 2022-10-18 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Admin Console). The supported version that is affected is 12.2.1.4.0… |
CVE-2022-39411 | Medium | 4.9 | 2022-10-18 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automation). Supported versions that are affe… |
CVE-2022-39410 | Medium | 6.5 | 2022-10-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exp… |
CVE-2022-39409 | Low | 2.7 | 2022-10-18 | Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automation). Supported versions that are affe… |
CVE-2022-39408 | Medium | 6.5 | 2022-10-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exp… |
CVE-2022-39407 | Medium | 5.5 | 2022-10-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.58, 8.59… |
CVE-2022-39406 | High | 8.1 | 2022-10-18 | Vulnerability in the PeopleSoft Enterprise Common Components product of Oracle PeopleSoft (component: Approval Framework). The supported version that is affect… |
CVE-2022-39405 | Medium | 5.3 | 2022-10-18 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). The supported version that is affected is 12… |
CVE-2022-39404 | Medium | 4.2 | 2022-10-18 | Vulnerability in the MySQL Installer product of Oracle MySQL (component: Installer: General). Supported versions that are affected are 1.6.3 and prior. Difficu… |
CVE-2022-39403 | Low | 3.9 | 2022-10-18 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exp… |
CVE-2022-39402 | Medium | 4.3 | 2022-10-18 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exp… |
CVE-2022-39401 | Medium | 5.5 | 2022-10-18 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerabili… |
CVE-2022-39400 | Medium | 4.9 | 2022-10-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exp… |
CVE-2022-39399 | Low | 3.7 | 2022-10-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected… |
CVE-2022-21641 | Medium | 4.9 | 2022-10-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exp… |
CVE-2022-21640 | Medium | 4.9 | 2022-10-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exp… |
CVE-2022-21639 | Medium | 6.1 | 2022-10-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search Integration). Supported versions that are affect… |
CVE-2022-21638 | Medium | 4.9 | 2022-10-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exp… |
CVE-2022-21637 | Medium | 4.9 | 2022-10-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vu… |
CVE-2022-21636 | Medium | 6.5 | 2022-10-18 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management). Supported versions that are affected are… |
CVE-2022-21635 | Medium | 6.5 | 2022-10-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vu… |
CVE-2022-21634 | High | 7.5 | 2022-10-18 | Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: LLVM Interpreter). Supported versions that are affected are Oracle… |
CVE-2022-21633 | Medium | 4.9 | 2022-10-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.30 and prior. Easily e… |
CVE-2022-21632 | Medium | 4.9 | 2022-10-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.30 and prior… |
CVE-2022-21631 | Medium | 6.1 | 2022-10-18 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC). Supported versions that are affected are 9.2.6… |
CVE-2022-21630 | Medium | 6.1 | 2022-10-18 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.6.4… |
CVE-2022-21629 | Medium | 5.4 | 2022-10-18 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.6.4… |
CVE-2022-21628 | Medium | 5.3 | 2022-10-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that… |
CVE-2022-21627 | Medium | 4.4 | 2022-10-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Easily… |
CVE-2022-21626 | Medium | 5.3 | 2022-10-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected ar… |
CVE-2022-21625 | Medium | 4.4 | 2022-10-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Difficult… |
CVE-2022-21624 | Low | 3.7 | 2022-10-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Or… |
CVE-2022-21623 | High | 7.5 | 2022-10-18 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Config Console). Supported versions that are… |
CVE-2022-21622 | High | 7.5 | 2022-10-18 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.3.0 and 12.2.1… |
CVE-2022-21621 | Medium | 6.0 | 2022-10-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Easily… |
CVE-2022-21620 | High | 7.5 | 2022-10-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Difficu… |
CVE-2022-21619 | Low | 3.7 | 2022-10-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected ar… |
CVE-2022-21618 | Medium | 5.3 | 2022-10-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Or… |
CVE-2022-21617 | Medium | 4.9 | 2022-10-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 5.7.39 and prior a… |