2022 CVEs (page 144)
Page 144 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-26468 | Medium | 6.6 | 2022-09-06 | In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker wh… |
CVE-2022-26467 | Medium | 6.7 | 2022-09-06 | In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2022-26466 | Medium | 6.7 | 2022-09-06 | In audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-26465 | Medium | 6.7 | 2022-09-06 | In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2022-26464 | Medium | 6.7 | 2022-09-06 | In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-26463 | Medium | 4.4 | 2022-09-06 | In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2022-26462 | Medium | 4.4 | 2022-09-06 | In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2022-26461 | Medium | 6.7 | 2022-09-06 | In vow, there is a possible undefined behavior due to an API misuse. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-26460 | Medium | 6.7 | 2022-09-06 | In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-26459 | Medium | 4.4 | 2022-09-06 | In vow, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges nee… |
CVE-2022-26458 | Medium | 6.7 | 2022-09-06 | In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-26457 | Medium | 6.7 | 2022-09-06 | In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2022-26456 | Medium | 4.4 | 2022-09-06 | In vow, there is a possible information disclosure due to a symbolic link following. This could lead to local information disclosure with System execution priv… |
CVE-2022-26455 | Medium | 6.7 | 2022-09-06 | In gz, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges… |
CVE-2022-26454 | Medium | 6.7 | 2022-09-06 | In teei, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-26453 | Medium | 6.7 | 2022-09-06 | In teei, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2022-26451 | Medium | 6.7 | 2022-09-06 | In ged, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2022-26450 | Medium | 6.4 | 2022-09-06 | In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2022-26449 | Medium | 6.7 | 2022-09-06 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-26448 | Medium | 6.7 | 2022-09-06 | In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2022-26447 | Critical | 9.8 | 2022-09-06 | In BT firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution pr… |
CVE-2022-25310 | Medium | 5.5 | 2022-09-06 | A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. This flaw all… |
CVE-2022-25309 | Medium | 5.5 | 2022-09-06 | A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap-rtl.c fil… |
CVE-2022-25308 | High | 7.8 | 2022-09-06 | A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application… |
CVE-2022-23691 | Medium | 6.8 | 2022-09-06 | A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authentication. A suc… |
CVE-2022-23690 | Medium | 5.3 | 2022-09-06 | A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerprint the exact version AOS-CX running o… |
CVE-2022-23689 | Medium | 4.3 | 2022-09-06 | Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an at… |
CVE-2022-23688 | Medium | 4.3 | 2022-09-06 | Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an at… |
CVE-2022-23687 | Medium | 4.3 | 2022-09-06 | Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an at… |
CVE-2022-23686 | Medium | 4.3 | 2022-09-06 | Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilities may allow an at… |
CVE-2022-23684 | High | 8.8 | 2022-09-06 | A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their permissions… |
CVE-2022-23683 | High | 7.2 | 2022-09-06 | Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities… |
CVE-2022-23682 | High | 7.8 | 2022-09-06 | Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an att… |
CVE-2022-23681 | High | 7.8 | 2022-09-06 | Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an att… |
CVE-2022-23680 | High | 8.8 | 2022-09-06 | AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context… |
CVE-2022-23679 | High | 8.8 | 2022-09-06 | AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute commands in the context… |
CVE-2022-23678 | Medium | 5.9 | 2022-09-06 | A vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communications that could allow for an attacker… |
CVE-2022-23451 | High | 8.1 | 2022-09-06 | An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, or d… |
CVE-2022-1697 | Low | 3.9 | 2022-09-06 | Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerabil… |
CVE-2022-1628 | Medium | 6.4 | 2022-09-06 | The Simple SEO plugin for WordPress is vulnerable to attribute-based stored Cross-Site Scripting in versions up to, and including 1.7.91, due to insufficient s… |
CVE-2022-40112 | High | 7.5 | 2022-09-06 | TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa. |
CVE-2022-40111 | Critical | 9.8 | 2022-09-06 | In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmware. |
CVE-2022-40110 | High | 7.5 | 2022-09-06 | TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa. |
CVE-2022-40109 | Critical | 9.8 | 2022-09-06 | TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa. |
CVE-2022-37843 | Critical | 9.8 | 2022-09-06 | In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without filtering, resulting i… |
CVE-2022-37842 | Critical | 9.8 | 2022-09-06 | In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability. |
CVE-2022-37841 | High | 7.5 | 2022-09-06 | In TOTOLINK A860R V4.1.2cu.5182_B20201027 there is a hard coded password for root in /etc/shadow.sample. |
CVE-2022-37840 | Critical | 9.8 | 2022-09-06 | In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability. |
CVE-2022-37839 | Critical | 9.8 | 2022-09-06 | TOTOLINK A860R V4.1.2cu.5182_B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi. |
CVE-2022-36584 | Critical | 9.8 | 2022-09-06 | In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf. |
CVE-2022-31020 | High | 8.8 | 2022-09-06 | Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In versions 1.12.4 and prior, the `pool-upgrade` request hand… |
CVE-2022-26114 | Medium | 5.4 | 2022-09-06 | An improper neutralization of input during web page generation vulnerability [CWE-79] in the Webmail of FortiMail before 7.2.0 may allow an unauthenticated att… |
CVE-2022-2714 | Critical | 9.8 | 2022-09-06 | Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0. |
CVE-2022-2901 | High | 7.1 | 2022-09-06 | Improper Authorization in GitHub repository chatwoot/chatwoot prior to 2.8. |
CVE-2022-34883 | High | 7.2 | 2022-09-06 | OS Command Injection vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to execute arbitrary OS commands. This… |
CVE-2022-34882 | Critical | 9.0 | 2022-09-06 | Information Exposure Through an Error Message vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to gain sensi… |
CVE-2022-34747 | Critical | 9.8 | 2022-09-06 | A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could allow an attacker to achieve unauthorized remote code execution… |
CVE-2022-38367 | Medium | 5.3 | 2022-09-05 | The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all user… |
CVE-2022-39838 | High | 8.6 | 2022-09-05 | Systematic FIX Adapter (ALFAFX) 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pat… |
CVE-2022-31814 | Critical | 9.8 | 2022-09-05 | pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3… |
CVE-2022-30331 | High | 8.8 | 2022-09-05 | The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation. Consequentl… |
CVE-2022-3122 | Medium | 6.3 | 2022-09-05 | A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functi… |
CVE-2022-3121 | Medium | 4.3 | 2022-09-05 | A vulnerability was found in SourceCodester Online Employee Leave Management System 1.0. It has been declared as problematic. Affected by this vulnerability is… |
CVE-2022-3127 | Medium | 5.4 | 2022-09-05 | Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 20.2.8. |
CVE-2022-2775 | Medium | 5.5 | 2022-09-05 | The Fast Flow WordPress plugin before 1.2.13 does not sanitise and escape some of its Widget settings, which could allow high privilege users such as admin to… |
CVE-2022-2657 | Medium | 4.3 | 2022-09-05 | The Multivendor Marketplace Solution for WooCommerce WordPress plugin before 3.8.12 is lacking authorisation and CSRF in multiple AJAX actions, which could all… |
CVE-2022-2597 | Medium | 5.4 | 2022-09-05 | The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.19.0 does not have proper authorisation checks in some of its REST endpoints, allowin… |
CVE-2022-2565 | High | 7.2 | 2022-09-05 | The Simple Payment Donations & Subscriptions WordPress plugin before 4.2.1 does not sanitise and escape user input given in its forms, which could allow unauth… |
CVE-2022-2543 | Medium | 6.1 | 2022-09-05 | The Visual Portfolio, Photo Gallery & Post Grid WordPress plugin before 2.18.0 does not have proper authorisation checks in some of its REST endpoints, allowin… |
CVE-2022-2376 | Medium | 5.3 | 2022-09-05 | The Directorist WordPress plugin before 7.3.1 discloses the email address of all users in an AJAX action available to both unauthenticated and any authenticate… |
CVE-2022-2271 | Medium | 4.8 | 2022-09-05 | The WP Database Backup WordPress plugin before 5.9 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored… |
CVE-2022-2083 | High | 7.5 | 2022-09-05 | The Simple Single Sign On WordPress plugin through 4.1.0 leaks its OAuth client_secret, which could be used by attackers to gain unauthorized access to the sit… |
CVE-2022-2830 | High | 8.8 | 2022-09-05 | Deserialization of Untrusted Data vulnerability in the message processing component of Bitdefender GravityZone Console allows an attacker to pass unsafe comman… |
CVE-2022-3123 | Medium | 6.1 | 2022-09-05 | Cross-site Scripting (XSS) - Reflected in GitHub repository splitbrain/dokuwiki prior to 2022-07-31a. |
CVE-2022-38752 | Medium | 6.5 | 2022-09-05 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacke… |
CVE-2022-38751 | Medium | 6.5 | 2022-09-05 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacke… |
CVE-2022-38750 | Medium | 6.5 | 2022-09-05 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacke… |
CVE-2022-38749 | Medium | 6.5 | 2022-09-05 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacke… |
CVE-2022-38370 | High | 7.5 | 2022-09-05 | Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should up… |
CVE-2022-38369 | High | 8.8 | 2022-09-05 | Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue. |
CVE-2022-3008 | High | 8.1 | 2022-09-05 | The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This functi… |
CVE-2022-3120 | High | 7.3 | 2022-09-05 | A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. Affected by this vulnerability is an unknown functionalit… |
CVE-2022-39843 | High | 7.8 | 2022-09-05 | 123elf Lotus 1-2-3 before 1.0.0rc3 for Linux, and Lotus 1-2-3 R3 for UNIX and other platforms through 9.8.2, allow attackers to execute arbitrary code via a cr… |
CVE-2022-39842 | Medium | 6.1 | 2022-09-05 | An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conflict of si… |
CVE-2022-39051 | Medium | 6.8 | 2022-09-05 | Attacker might be able to execute malicious Perl code in the Template toolkit, by having the admin installing an unverified 3th party package |
CVE-2022-39050 | Medium | 4.6 | 2022-09-05 | An attacker who is logged into OTRS as an admin user may manipulate customer URL field to store JavaScript code to be run later by any other agent when clickin… |
CVE-2022-39049 | Low | 3.5 | 2022-09-05 | An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS. |
CVE-2022-39840 | Medium | 4.8 | 2022-09-05 | Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message (DM). |
CVE-2022-39839 | Medium | 4.8 | 2022-09-05 | Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a forum post. |
CVE-2022-39832 | High | 7.8 | 2022-09-05 | An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_string in utilities/pspp-dump-sav.c, which allows attackers t… |
CVE-2022-39831 | High | 7.8 | 2022-09-05 | An issue was discovered in PSPP 1.6.2. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows att… |
CVE-2022-39830 | High | 7.5 | 2022-09-05 | sign_pFwInfo in Samsung mTower through 0.3.0 has a missing check on the return value of EC_KEY_set_public_key_affine_coordinates, leading to a denial of servic… |
CVE-2022-39829 | High | 7.5 | 2022-09-05 | There is a NULL pointer dereference in aes256_encrypt in Samsung mTower through 0.3.0 due to a missing check on the return value of EVP_CIPHER_CTX_new. |
CVE-2022-39828 | High | 7.5 | 2022-09-05 | sign_pFwInfo in Samsung mTower through 0.3.0 has a missing check on the return value of EC_KEY_set_private_key, leading to a denial of service. |
CVE-2022-39824 | High | 8.9 | 2022-09-05 | Server-side JavaScript injection in Appsmith through 1.7.14 allows remote attackers to execute arbitrary JavaScript code from the server via the currentItem pr… |
CVE-2022-39196 | Medium | 6.5 | 2022-09-05 | Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps… |
CVE-2022-3118 | High | 7.3 | 2022-09-04 | A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/pr… |
CVE-2022-3099 | High | 7.8 | 2022-09-03 | Use After Free in GitHub repository vim/vim prior to 9.0.0360. |
CVE-2022-36754 | High | 7.2 | 2022-09-02 | Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/debit_credit_p. |
CVE-2022-36647 | Medium | 5.5 | 2022-09-02 | PKUVCL davs2 v1.6.205 was discovered to contain a global buffer overflow via the function parse_sequence_header() at source/common/header.cc:269. |