2022 CVEs (page 135)
Page 135 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-35986 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `RaggedBincount` is given an empty input tensor `splits`, it results in a segfault that can be u… |
CVE-2022-35985 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `LRNGrad` is given an `output_image` input tensor that is not 4-D, it results in a `CHECK` fail… |
CVE-2022-35984 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. `ParameterizedTruncatedNormal` assumes `shape` is of type `int32`. A valid `shape` of type `int64`… |
CVE-2022-35983 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `Save` or `SaveSlices` is run over tensors of an unsupported `dtype`, it results in a `CHECK` fa… |
CVE-2022-35982 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `SparseBincount` is given inputs for `indices`, `values`, and `dense_shape` that do not make a v… |
CVE-2022-35981 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. `FractionalMaxPoolGrad` validates its inputs with `CHECK` failures instead of with returning errors… |
CVE-2022-35979 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizedRelu` or `QuantizedRelu6` are given nonscalar inputs for `min_features` or `max_featur… |
CVE-2022-35194 | Medium | 5.4 | 2022-09-16 | TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventoryView.php. |
CVE-2022-2333 | High | 8.8 | 2022-09-16 | If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4… |
CVE-2022-2332 | Medium | 6.2 | 2022-09-16 | A local unprivileged attacker may escalate to administrator privileges in Honeywell SoftMaster version 4.51, due to insecure permission assignment. |
CVE-2022-29489 | Medium | 4.3 | 2022-09-16 | Cross-Site Request Forgery (CSRF) vulnerability in Sucuri Security plugin <= 1.8.33 at WordPress leading to Event log entry creation. |
CVE-2022-28758 | High | 8.2 | 2022-09-16 | Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could o… |
CVE-2022-35974 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizeDownAndShrinkRange` is given nonscalar inputs for `input_min` or `input_max`, it result… |
CVE-2022-35973 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizedMatMul` is given nonscalar input for: `min_a`, `max_a`, `min_b`, or `max_b` It gives a… |
CVE-2022-35972 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizedBiasAdd` is given `min_input`, `max_input`, `min_bias`, `max_bias` tensors of a nonzer… |
CVE-2022-35971 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVars` is given `min` or `max` tensors of a nonzero rank, it results in a `CH… |
CVE-2022-35970 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizedInstanceNorm` is given `x_min` or `x_max` tensors of a nonzero rank, it results in a s… |
CVE-2022-35969 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `Conv2DBackpropInput` requires `input_sizes` to be 4-dimensional. Otherwise… |
CVE-2022-35968 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `AvgPoolGrad` does not fully validate the input `orig_input_shape`. This resu… |
CVE-2022-35967 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizedAdd` is given `min_input` or `max_input` tensors of a nonzero rank, it results in a se… |
CVE-2022-35966 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `QuantizedAvgPool` is given `min_input` or `max_input` tensors of a nonzero rank, it results in… |
CVE-2022-35965 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. If `LowerBound` or `UpperBound` is given an empty`sorted_inputs` input, it results in a `nullptr` d… |
CVE-2022-35964 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `BlockLSTMGradV2` does not fully validate its inputs. This results in a a seg… |
CVE-2022-38611 | High | 7.8 | 2022-09-16 | Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary. |
CVE-2022-35963 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `FractionalAvgPoolGrad` does not fully validate the input `orig_input_tensor_… |
CVE-2022-35960 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. In `core/kernels/list_kernels.cc's TensorListReserve`, `num_elements` is assumed to be a tensor of… |
CVE-2022-35959 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of `AvgPool3DGradOp` does not fully validate the input `orig_input_shape`. This… |
CVE-2022-35952 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `UnbatchGradOp` function takes an argument `id` that is assumed to be a scalar. A nonscalar `id… |
CVE-2022-35941 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `AvgPoolOp` function takes an argument `ksize` that must be positive but is not checked. A nega… |
CVE-2022-35940 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `RaggedRangOp` function takes an argument `limits` that is eventually used to construct a `Tens… |
CVE-2022-35939 | High | 7.0 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `ScatterNd` function takes an input argument that determines the indices of of the output tenso… |
CVE-2022-35938 | High | 7.0 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and outputs. If the inpu… |
CVE-2022-35937 | High | 7.0 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and outputs. If the inpu… |
CVE-2022-35935 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is vulnerable to a denial of service via CHECK-failure (asserti… |
CVE-2022-35934 | Medium | 5.9 | 2022-09-16 | TensorFlow is an open source platform for machine learning. The implementation of tf.reshape op in TensorFlow is vulnerable to a denial of service via CHECK-fa… |
CVE-2022-3214 | Critical | 9.8 | 2022-09-16 | Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to 1… |
CVE-2022-39063 | High | 7.5 | 2022-09-16 | When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment Response. Once UPF receive… |
CVE-2022-38621 | Critical | 9.8 | 2022-09-16 | Doufox v0.0.4 was discovered to contain a remote code execution (RCE) vulnerability via the edit file page. This vulnerability allows attackers to execute arbi… |
CVE-2022-39010 | High | 7.5 | 2022-09-16 | The HwChrService module has a vulnerability in permission control. Successful exploitation of this vulnerability may cause disclosure of user network informati… |
CVE-2022-39009 | Critical | 9.8 | 2022-09-16 | The WLAN module has a vulnerability in permission verification. Successful exploitation of this vulnerability may cause third-party apps to affect WLAN functio… |
CVE-2022-39008 | Critical | 9.1 | 2022-09-16 | The NFC module has bundle serialization/deserialization vulnerabilities. Successful exploitation of this vulnerability may cause third-party apps to read and w… |
CVE-2022-39007 | Critical | 9.8 | 2022-09-16 | The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation. |
CVE-2022-39006 | Medium | 5.9 | 2022-09-16 | The MPTCP module has the race condition vulnerability. Successful exploitation of this vulnerability may cause the device to restart. |
CVE-2022-39005 | High | 7.5 | 2022-09-16 | The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. |
CVE-2022-39004 | High | 7.5 | 2022-09-16 | The MPTCP module has the memory leak vulnerability. Successful exploitation of this vulnerability can cause memory leaks. |
CVE-2022-39003 | Critical | 9.1 | 2022-09-16 | Buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability will affect the confidentiality and integrity of trusted co… |
CVE-2022-39002 | Critical | 9.8 | 2022-09-16 | Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to be freed twice. |
CVE-2022-39001 | High | 7.5 | 2022-09-16 | The number identification module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause data disclosure. |
CVE-2022-39000 | Critical | 9.8 | 2022-09-16 | The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to automatically start… |
CVE-2022-38999 | Critical | 9.8 | 2022-09-16 | The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiali… |
CVE-2022-38997 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38996 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38995 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38994 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38993 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38992 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38991 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38990 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38989 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38988 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38987 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-38979 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38978 | High | 7.5 | 2022-09-16 | The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-38434 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execu… |
CVE-2022-38433 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrar… |
CVE-2022-38432 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrar… |
CVE-2022-38431 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which c… |
CVE-2022-38430 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which c… |
CVE-2022-38429 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which c… |
CVE-2022-38428 | Medium | 5.5 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitiv… |
CVE-2022-38427 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could result in ar… |
CVE-2022-38426 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could result in ar… |
CVE-2022-38417 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which coul… |
CVE-2022-38416 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which coul… |
CVE-2022-38415 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary c… |
CVE-2022-38414 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary c… |
CVE-2022-38413 | High | 7.8 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary c… |
CVE-2022-38407 | Medium | 5.5 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive… |
CVE-2022-38406 | Medium | 5.5 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive… |
CVE-2022-38405 | High | 7.8 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… |
CVE-2022-38404 | High | 7.8 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… |
CVE-2022-38403 | High | 7.8 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… |
CVE-2022-38402 | High | 7.8 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… |
CVE-2022-38401 | High | 7.8 | 2022-09-16 | Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… |
CVE-2022-35713 | High | 7.8 | 2022-09-16 | Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code… |
CVE-2022-35664 | Medium | 5.4 | 2022-09-16 | Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convinc… |
CVE-2022-34218 | Medium | 5.4 | 2022-09-16 | Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convinc… |
CVE-2022-30686 | Medium | 5.4 | 2022-09-16 | Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convinc… |
CVE-2022-30685 | Medium | 5.4 | 2022-09-16 | Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convinc… |
CVE-2022-30684 | Medium | 5.4 | 2022-09-16 | Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convinc… |
CVE-2022-30683 | Medium | 5.3 | 2022-09-16 | Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a Violation of Secure Design Principles vulnerability that could lead to bypass the sec… |
CVE-2022-30682 | Medium | 5.4 | 2022-09-16 | Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convinc… |
CVE-2022-30681 | Medium | 5.4 | 2022-09-16 | Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convinc… |
CVE-2022-30680 | Medium | 5.4 | 2022-09-16 | Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convinc… |
CVE-2022-30678 | Medium | 5.4 | 2022-09-16 | Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convinc… |
CVE-2022-30677 | Medium | 5.4 | 2022-09-16 | Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convinc… |
CVE-2022-30676 | Medium | 5.5 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2022-30675 | Medium | 5.5 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2022-30674 | Medium | 5.5 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2022-30673 | Medium | 5.5 | 2022-09-16 | Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |