2022 CVEs (page 118)
Page 118 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2985 | High | 7.8 | 2022-10-14 | In music service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges ne… |
CVE-2022-2984 | Medium | 5.5 | 2022-10-14 | In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-2963 | High | 7.5 | 2022-10-14 | A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in function cmdopts_parse that can cause a crash or segmentat… |
CVE-2022-2850 | Medium | 6.5 | 2022-10-14 | A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a special… |
CVE-2022-42234 | High | 8.8 | 2022-10-14 | There is a file inclusion vulnerability in the template management module in UCMS 1.6 |
CVE-2022-42232 | High | 7.2 | 2022-10-14 | Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=delete_storage. |
CVE-2022-41308 | High | 7.8 | 2022-10-14 | A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2022-41307 | High | 7.8 | 2022-10-14 | A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2022-41306 | High | 7.8 | 2022-10-14 | A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This… |
CVE-2022-41305 | High | 7.8 | 2022-10-14 | A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by write access violatio… |
CVE-2022-41304 | High | 7.8 | 2022-10-14 | An Out-Of-Bounds Write Vulnerability in Autodesk FBX SDK 2020 version and prior may lead to code execution through maliciously crafted FBX files or information… |
CVE-2022-41303 | High | 7.8 | 2022-10-14 | A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FBX SDK 2020 version causing the applicati… |
CVE-2022-41302 | High | 7.8 | 2022-10-14 | An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK version 2020. and prior may lead to code execution or information disclosure through maliciously crafte… |
CVE-2022-3479 | High | 7.5 | 2022-10-14 | A vulnerability found in nss. By this security vulnerability, nss client auth crash without a user certificate in the database and this can lead us to a segmen… |
CVE-2022-20464 | Medium | 5.5 | 2022-10-14 | In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. This could lead to… |
CVE-2022-20397 | High | 7.8 | 2022-10-14 | In SitRilClient_OnResponse of SitRilSe.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privi… |
CVE-2022-42067 | Medium | 4.3 | 2022-10-14 | Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference (IDOR) vulnerability |
CVE-2022-41603 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41602 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41601 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41600 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41598 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41597 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41595 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41594 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41593 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41592 | Low | 3.4 | 2022-10-14 | The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).Successful exploitation of… |
CVE-2022-41589 | High | 7.5 | 2022-10-14 | The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affects system services a… |
CVE-2022-41588 | High | 7.5 | 2022-10-14 | The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integrity. |
CVE-2022-41587 | Medium | 5.3 | 2022-10-14 | Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may affect stability. |
CVE-2022-41586 | High | 7.5 | 2022-10-14 | The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affect data confidenti… |
CVE-2022-41585 | High | 7.8 | 2022-10-14 | The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting. |
CVE-2022-41584 | High | 7.8 | 2022-10-14 | The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting. |
CVE-2022-41583 | High | 7.5 | 2022-10-14 | The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect s… |
CVE-2022-41582 | High | 7.5 | 2022-10-14 | The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-41581 | Critical | 9.1 | 2022-10-14 | The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of da… |
CVE-2022-41580 | Critical | 9.8 | 2022-10-14 | The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malicious construction of da… |
CVE-2022-41578 | Critical | 9.8 | 2022-10-14 | The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented… |
CVE-2022-41577 | High | 7.1 | 2022-10-14 | The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this vulnerability may c… |
CVE-2022-41576 | High | 7.8 | 2022-10-14 | The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted o… |
CVE-2022-39065 | Medium | 6.5 | 2022-10-14 | A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Sm… |
CVE-2022-39064 | High | 8.1 | 2022-10-14 | An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e. resend) the same frame multiple time… |
CVE-2022-39011 | High | 7.5 | 2022-10-14 | The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause… |
CVE-2022-38998 | High | 7.5 | 2022-10-14 | The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-b… |
CVE-2022-38986 | Critical | 9.1 | 2022-10-14 | The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause… |
CVE-2022-38985 | High | 7.5 | 2022-10-14 | The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38984 | High | 7.5 | 2022-10-14 | The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-b… |
CVE-2022-38983 | Critical | 9.8 | 2022-10-14 | The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution. |
CVE-2022-38982 | Critical | 9.8 | 2022-10-14 | The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked. |
CVE-2022-38981 | High | 7.5 | 2022-10-14 | The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage. |
CVE-2022-38980 | Critical | 9.8 | 2022-10-14 | The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may… |
CVE-2022-38977 | High | 7.5 | 2022-10-14 | The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resulting in modification… |
CVE-2022-37603 | High | 7.5 | 2022-10-14 | A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the url varia… |
CVE-2022-42488 | High | 8.4 | 2022-10-14 | OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup subsystem. An malicious application instal… |
CVE-2022-42464 | Medium | 6.7 | 2022-10-14 | OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have a Kernel memory pool override vulnerability in /dev/mmz_userdev device driver. The impact… |
CVE-2022-42463 | High | 8.3 | 2022-10-14 | OpenHarmony-v3.1.2 and prior versions have an authenication bypass vulnerability in a callback handler function of Softbus_server in communication subsystem. A… |
CVE-2022-42071 | Medium | 6.1 | 2022-10-14 | Online Birth Certificate Management System version 1.0 suffers from a Cross Site Scripting (XSS) Vulnerability. |
CVE-2022-42070 | High | 8.8 | 2022-10-14 | Online Birth Certificate Management System version 1.0 is vulnerable to Cross Site Request Forgery (CSRF). |
CVE-2022-42069 | Medium | 5.4 | 2022-10-14 | Online Birth Certificate Management System version 1.0 suffers from a persistent Cross Site Scripting (XSS) vulnerability. |
CVE-2022-42066 | Medium | 6.1 | 2022-10-14 | Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php. |
CVE-2022-42064 | Critical | 9.8 | 2022-10-14 | Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell. |
CVE-2022-41715 | High | 7.5 | 2022-10-14 | Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation… |
CVE-2022-41686 | Medium | 5.1 | 2022-10-14 | OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have an Out-of-bound memory read and write vulnerability in /dev/mmz_userdev device driver. The… |
CVE-2022-32149 | High | 7.5 | 2022-10-14 | An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse. |
CVE-2022-2880 | High | 7.5 | 2022-10-14 | Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could… |
CVE-2022-2879 | High | 7.5 | 2022-10-14 | Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, p… |
CVE-2022-28762 | High | 7.3 | 2022-10-14 | Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with 5.10.6 and prior to 5.12.0 contains a debugging port misconfiguration. When camera… |
CVE-2022-28761 | Medium | 6.5 | 2022-10-14 | Zoom On-Premise Meeting Connector MMR before version 4.8.20220916.131 contains an improper access control vulnerability. As a result, a malicious actor in a me… |
CVE-2022-28760 | Medium | 6.5 | 2022-10-14 | Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could o… |
CVE-2022-28759 | High | 8.2 | 2022-10-14 | Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could o… |
CVE-2022-3506 | Medium | 5.4 | 2022-10-14 | Cross-site Scripting (XSS) - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3. |
CVE-2022-3505 | Low | 3.5 | 2022-10-14 | A vulnerability was found in SourceCodester Sanitization Management System. It has been classified as problematic. Affected is an unknown function of the file… |
CVE-2022-3504 | Medium | 6.3 | 2022-10-14 | A vulnerability was found in SourceCodester Sanitization Management System and classified as critical. This issue affects some unknown processing of the file /… |
CVE-2022-3439 | Critical | 9.8 | 2022-10-14 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0. |
CVE-2022-35059 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0414. |
CVE-2022-35058 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05ce. |
CVE-2022-35056 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0478. |
CVE-2022-35055 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0473. |
CVE-2022-35054 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6171b2. |
CVE-2022-35053 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x61731f. |
CVE-2022-35052 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b84b1. |
CVE-2022-35051 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b55af. |
CVE-2022-35050 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b04de. |
CVE-2022-35049 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b03b5. |
CVE-2022-35048 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0b2c. |
CVE-2022-35047 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05aa. |
CVE-2022-35046 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0466. |
CVE-2022-35045 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0d63. |
CVE-2022-35044 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x617087. |
CVE-2022-35043 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6. |
CVE-2022-35042 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adb11. |
CVE-2022-35041 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b558f. |
CVE-2022-35040 | Medium | 6.5 | 2022-10-14 | OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b5567. |
CVE-2022-3503 | Low | 3.5 | 2022-10-14 | A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code… |
CVE-2022-3502 | Low | 3.5 | 2022-10-14 | A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave H… |
CVE-2022-37602 | Critical | 9.8 | 2022-10-14 | Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js. |
CVE-2022-3497 | Low | 3.5 | 2022-10-14 | A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been classified as problematic. Affected is an unknown function of the… |
CVE-2022-3496 | Medium | 6.3 | 2022-10-14 | A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue affects some unknown processing of the… |
CVE-2022-3495 | High | 7.3 | 2022-10-14 | A vulnerability has been found in SourceCodester Simple Online Public Access Catalog 1.0 and classified as critical. This vulnerability affects unknown code of… |
CVE-2022-32177 | Critical | 9.0 | 2022-10-14 | In "Gin-Vue-Admin", versions v2.5.1 through v2.5.3beta are vulnerable to Unrestricted File Upload that leads to execution of javascript code, through the 'Norm… |