2022 CVEs (page 117)
Page 117 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3139 | Medium | 4.8 | 2022-10-17 | The We’re Open! WordPress plugin before 1.42 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2022-3131 | High | 7.2 | 2022-10-17 | The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection… |
CVE-2022-3126 | Medium | 4.3 | 2022-10-17 | The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could allow attackers to make logged in user… |
CVE-2022-3082 | Medium | 6.5 | 2022-10-17 | The miniOrange Discord Integration WordPress plugin before 2.1.6 does not have authorisation and CSRF in some of its AJAX actions, allowing any logged in users… |
CVE-2022-2834 | Medium | 5.3 | 2022-10-17 | The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and guessable names, which could allow attack… |
CVE-2022-2574 | Medium | 4.8 | 2022-10-17 | The Meks Easy Social Share WordPress plugin before 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admi… |
CVE-2022-2563 | Medium | 4.8 | 2022-10-17 | The Tutor LMS WordPress plugin before 2.0.10 does not escape some course parameters, which could allow high privilege users such as admin to perform Stored Cro… |
CVE-2022-3534 | Medium | 5.5 | 2022-10-17 | A vulnerability has been found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. The impacted element is the function btf_dump_name_dups of the file tools/l… |
CVE-2022-3533 | Low | 3.5 | 2022-10-17 | A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects the function parse_usdt_arg of the file tools/lib/bpf/usdt.c of… |
CVE-2022-3501 | Low | 3.5 | 2022-10-17 | Article template contents with sensitive data could be accessed from agents without permissions. |
CVE-2022-3281 | High | 7.5 | 2022-10-17 | WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filteri… |
CVE-2022-39052 | High | 7.5 | 2022-10-17 | An external attacker is able to send a specially crafted email (with many recipients) and trigger a potential DoS of the system |
CVE-2022-2052 | Critical | 9.8 | 2022-10-17 | Multiple Trumpf Products in multiple versions use default privileged Windows users and passwords. An adversary may use these accounts to remotely gain full acc… |
CVE-2022-42983 | High | 8.8 | 2022-10-17 | anji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing JWT Tokens. |
CVE-2022-42980 | Critical | 9.8 | 2022-10-17 | go-admin (aka GO Admin) 2.0.12 uses the string go-admin as a production JWT key. |
CVE-2022-42975 | High | 7.5 | 2022-10-17 | socket/transport.ex in Phoenix before 1.6.14 mishandles check_origin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence… |
CVE-2022-3526 | Medium | 5.3 | 2022-10-16 | A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file drivers/net/macvl… |
CVE-2022-3524 | Medium | 4.3 | 2022-10-16 | A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the compon… |
CVE-2022-3523 | Medium | 5.3 | 2022-10-16 | A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driv… |
CVE-2022-3521 | Low | 2.6 | 2022-10-16 | A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file net/kcm/kcmsock.c… |
CVE-2022-42969 | Medium | 5.3 | 2022-10-16 | The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository w… |
CVE-2022-41323 | High | 7.5 | 2022-10-16 | In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale… |
CVE-2022-42968 | Critical | 9.8 | 2022-10-16 | Gitea before 1.17.3 does not sanitize and escape refs in the git backend. Arguments to git commands are mishandled. |
CVE-2022-3519 | Low | 2.4 | 2022-10-15 | A vulnerability classified as problematic was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown function… |
CVE-2022-3518 | Low | 2.4 | 2022-10-15 | A vulnerability classified as problematic has been found in SourceCodester Sanitization Management System 1.0. Affected is an unknown function of the component… |
CVE-2022-42961 | Medium | 5.3 | 2022-10-15 | An issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer leads to ECDSA key disclosure. Users performing signing operatio… |
CVE-2022-41436 | Critical | 9.1 | 2022-10-14 | An issue in OXHOO TP50 OXH1.50 allows unauthenticated attackers to access the administrative panel via browsing to the URL http://device_ip/index1.html. |
CVE-2022-42342 | Medium | 5.5 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2022-42341 | High | 7.5 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Restriction of XML External Entity Reference ('XXE') v… |
CVE-2022-42340 | High | 7.5 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in ar… |
CVE-2022-42339 | High | 7.8 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could… |
CVE-2022-41623 | High | 7.5 | 2022-10-14 | Sensitive Data Exposure in Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 on WordPress. |
CVE-2022-41416 | High | 7.2 | 2022-10-14 | Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /user/update_booking.php. |
CVE-2022-39311 | Critical | 9.1 | 2022-10-14 | GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD version… |
CVE-2022-39310 | Medium | 4.9 | 2022-10-14 | GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD version… |
CVE-2022-39309 | Medium | 4.9 | 2022-10-14 | GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD version… |
CVE-2022-38450 | High | 7.8 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could… |
CVE-2022-38449 | Medium | 5.5 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2022-38448 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38447 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38446 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38445 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38444 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38443 | Medium | 5.5 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage… |
CVE-2022-38442 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38441 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an… |
CVE-2022-38440 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an… |
CVE-2022-38437 | Medium | 5.5 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Use After Free vulnerability that could lead to discl… |
CVE-2022-38424 | High | 7.2 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('P… |
CVE-2022-38423 | Medium | 4.9 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('P… |
CVE-2022-38422 | High | 7.5 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('P… |
CVE-2022-38421 | High | 7.2 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('P… |
CVE-2022-38420 | High | 7.5 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Use of Hard-coded Credentials vulnerability that could result in… |
CVE-2022-38419 | High | 7.5 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Restriction of XML External Entity Reference ('XXE') v… |
CVE-2022-38418 | Critical | 9.8 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('P… |
CVE-2022-35712 | Critical | 9.8 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in ar… |
CVE-2022-35711 | Critical | 9.8 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in ar… |
CVE-2022-35710 | Critical | 9.8 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in a… |
CVE-2022-35698 | Critical | 10.0 | 2022-10-14 | Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue… |
CVE-2022-35691 | Medium | 5.5 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenti… |
CVE-2022-35690 | Critical | 9.8 | 2022-10-14 | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in a… |
CVE-2022-35689 | Medium | 5.3 | 2022-10-14 | Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security… |
CVE-2022-41477 | Critical | 9.1 | 2022-10-14 | A security issue was discovered in WeBid <=1.2.2. A Server-Side Request Forgery (SSRF) vulnerability in the admin/theme.php file allows remote attackers to inj… |
CVE-2022-39308 | Medium | 6.5 | 2022-10-14 | GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD version… |
CVE-2022-39128 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39127 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39126 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39125 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39124 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39123 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39122 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39121 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39120 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39117 | Medium | 5.5 | 2022-10-14 | In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-39115 | Medium | 5.5 | 2022-10-14 | In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges need… |
CVE-2022-39114 | Medium | 5.5 | 2022-10-14 | In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges need… |
CVE-2022-39113 | Medium | 5.5 | 2022-10-14 | In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges need… |
CVE-2022-39112 | Medium | 5.5 | 2022-10-14 | In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges need… |
CVE-2022-39111 | High | 7.8 | 2022-10-14 | In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges neede… |
CVE-2022-39110 | High | 7.8 | 2022-10-14 | In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges neede… |
CVE-2022-39109 | High | 7.8 | 2022-10-14 | In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges neede… |
CVE-2022-39108 | High | 7.8 | 2022-10-14 | In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges neede… |
CVE-2022-39107 | High | 7.8 | 2022-10-14 | In Soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in Soundrecorder service with no additional execution… |
CVE-2022-39105 | Medium | 5.5 | 2022-10-14 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-39103 | Medium | 5.5 | 2022-10-14 | In Gallery service, there is a missing permission check. This could lead to local denial of service in Gallery service with no additional execution privileges… |
CVE-2022-39080 | High | 7.8 | 2022-10-14 | In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privilege… |
CVE-2022-38698 | High | 7.8 | 2022-10-14 | In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privilege… |
CVE-2022-38697 | Medium | 5.5 | 2022-10-14 | In messaging service, there is a missing permission check. This could lead to access unexpected provider in contacts service with no additional execution privi… |
CVE-2022-38690 | Medium | 5.5 | 2022-10-14 | In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. |
CVE-2022-38689 | Medium | 5.5 | 2022-10-14 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-38688 | Medium | 5.5 | 2022-10-14 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-38687 | Medium | 5.5 | 2022-10-14 | In messaging service, there is a missing permission check. This could lead to local denial of service in messaging service with no additional execution privile… |
CVE-2022-38679 | Medium | 5.5 | 2022-10-14 | In music service, there is a missing permission check. This could lead to local denial of service in music service with no additional execution privileges need… |
CVE-2022-38677 | Medium | 5.5 | 2022-10-14 | In cell service, there is a missing permission check. This could lead to local denial of service in cell service with no additional execution privileges needed. |
CVE-2022-38676 | Medium | 5.5 | 2022-10-14 | In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38673 | Medium | 5.5 | 2022-10-14 | In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38672 | Medium | 5.5 | 2022-10-14 | In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38671 | Medium | 5.5 | 2022-10-14 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38670 | High | 7.8 | 2022-10-14 | In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privi… |
CVE-2022-38669 | High | 7.8 | 2022-10-14 | In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privi… |