2022 CVEs (page 145)
Page 145 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-36642 | Critical | 9.8 | 2022-09-02 | A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to access users credentia… |
CVE-2022-36640 | Critical | 9.8 | 2022-09-02 | influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands. NOTE: th… |
CVE-2022-36639 | Medium | 5.4 | 2022-09-02 | A stored cross-site scripting (XSS) vulnerability in /client.php of Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via… |
CVE-2022-36638 | Medium | 5.3 | 2022-09-02 | An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders. |
CVE-2022-31176 | High | 8.3 | 2022-09-02 | Grafana Image Renderer is a Grafana backend plugin that handles rendering of panels & dashboards to PNGs using a headless browser (Chromium/Chrome). An interna… |
CVE-2022-35933 | Medium | 6.1 | 2022-09-02 | This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where the attacker could steal an administrat… |
CVE-2022-31196 | High | 7.6 | 2022-09-02 | Databasir is a database metadata management platform. Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerability. The SSRF is triggered by a sendin… |
CVE-2022-31152 | Medium | 6.4 | 2022-09-02 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. The Matrix specification specifies a list of [event authorizat… |
CVE-2022-3065 | High | 7.5 | 2022-09-02 | Improper Access Control in GitHub repository jgraph/drawio prior to 20.2.8. |
CVE-2022-36071 | High | 8.3 | 2022-09-02 | SFTPGo is configurable SFTP server with optional HTTP/S, FTP/S and WebDAV support. SFTPGo WebAdmin and WebClient support login using TOTP (Time-based One Time… |
CVE-2022-34382 | High | 7.8 | 2022-09-02 | Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vulnerability in the custom catalog configu… |
CVE-2022-34378 | Medium | 5.5 | 2022-09-02 | Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3, contain a relative path traversal vulnerability. A low priv… |
CVE-2022-34371 | High | 8.1 | 2022-09-02 | Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of credentials vulnerabili… |
CVE-2022-34369 | High | 8.1 | 2022-09-02 | Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3 , contain an insertion of sensitive information in log files… |
CVE-2022-36078 | High | 8.8 | 2022-09-02 | Binary provides encoding/decoding in Borsh and other formats. The vulnerability is a memory allocation vulnerability that can be exploited to allocate slices i… |
CVE-2022-36076 | High | 8.8 | 2022-09-02 | NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. Due to an unnecessarily strict conditional in the cod… |
CVE-2022-37458 | High | 7.2 | 2022-09-02 | Discourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimited rate. |
CVE-2022-25680 | High | 8.4 | 2022-09-02 | Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto |
CVE-2022-25668 | High | 7.3 | 2022-09-02 | Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consume… |
CVE-2022-25659 | High | 7.3 | 2022-09-02 | Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap… |
CVE-2022-25658 | High | 7.3 | 2022-09-02 | Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute… |
CVE-2022-25657 | High | 7.3 | 2022-09-02 | Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2022-22106 | High | 8.4 | 2022-09-02 | Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto |
CVE-2022-22104 | High | 8.4 | 2022-09-02 | Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto |
CVE-2022-22102 | High | 8.4 | 2022-09-02 | Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto |
CVE-2022-22101 | Medium | 6.2 | 2022-09-02 | Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto |
CVE-2022-22100 | High | 8.4 | 2022-09-02 | Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto |
CVE-2022-22099 | High | 8.4 | 2022-09-02 | Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto |
CVE-2022-22098 | High | 8.4 | 2022-09-02 | Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon Auto |
CVE-2022-22097 | High | 8.4 | 2022-09-02 | Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapdragon Consumer IOT |
CVE-2022-22096 | Critical | 9.8 | 2022-09-02 | Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Sna… |
CVE-2022-22080 | High | 8.4 | 2022-09-02 | Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2022-22070 | High | 7.8 | 2022-09-02 | Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… |
CVE-2022-22069 | High | 7.7 | 2022-09-02 | Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2022-22067 | High | 7.5 | 2022-09-02 | Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2022-22062 | High | 8.2 | 2022-09-02 | An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2022-22061 | High | 7.8 | 2022-09-02 | Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Snapdragon Connectivit… |
CVE-2022-22059 | High | 8.4 | 2022-09-02 | Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IO… |
CVE-2022-38170 | Medium | 4.7 | 2022-09-02 | In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag which could result in… |
CVE-2022-38054 | Critical | 9.8 | 2022-09-02 | In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation. |
CVE-2022-29158 | High | 7.5 | 2022-09-02 | Apache OFBiz up to version 18.12.05 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles URLs provided by external, unauthentica… |
CVE-2022-29063 | Critical | 9.8 | 2022-09-02 | The Solr plugin of Apache OFBiz is configured by default to automatically make a RMI request on localhost, port 1099. In version 18.12.05 and earlier, by hosti… |
CVE-2022-25813 | High | 7.5 | 2022-09-02 | In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can insert a malicious content in a message “S… |
CVE-2022-25371 | Critical | 9.8 | 2022-09-02 | Apache OFBiz uses the Birt project plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports. By leveraging a bug in Birt (htt… |
CVE-2022-25370 | Medium | 5.4 | 2022-09-02 | Apache OFBiz uses the Birt plugin (https://eclipse.github.io/birt-website/) to create data visualizations and reports. In Apache OFBiz release 18.12.05, and ea… |
CVE-2022-39194 | Medium | 4.9 | 2022-09-02 | An issue was discovered in the MediaWiki through 1.38.2. The community configuration pages for the GrowthExperiments extension could cause a site to become una… |
CVE-2022-39190 | Medium | 5.5 | 2022-09-02 | An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occur upon binding to an already bound chai… |
CVE-2022-39189 | High | 7.8 | 2022-09-02 | An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush op… |
CVE-2022-39188 | Medium | 4.7 | 2022-09-02 | An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device… |
CVE-2022-37679 | Medium | 4.8 | 2022-09-02 | Miniblog.Core v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blog/edit. This vulnerability allows attackers to exe… |
CVE-2022-36637 | Medium | 5.4 | 2022-09-02 | Garage Management System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the brand_name parameter at /brand.php. |
CVE-2022-36636 | High | 8.8 | 2022-09-02 | Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php. |
CVE-2022-36609 | Critical | 9.8 | 2022-09-02 | Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/update_patient.php. |
CVE-2022-36600 | Medium | 4.8 | 2022-09-02 | BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blogengine/api/posts. This vulnerability allows atta… |
CVE-2022-39177 | High | 8.8 | 2022-09-02 | BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/au… |
CVE-2022-39176 | High | 8.8 | 2022-09-02 | BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len. |
CVE-2022-36594 | Critical | 9.8 | 2022-09-02 | Mapper v4.0.0 to v4.2.0 was discovered to contain a SQL injection vulnerability via the ids parameter at the selectByIds function. |
CVE-2022-36593 | Medium | 6.5 | 2022-09-02 | kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java. |
CVE-2022-39170 | High | 8.8 | 2022-09-02 | libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c. |
CVE-2022-36759 | Critical | 9.8 | 2022-09-02 | Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?res_id=. |
CVE-2022-3078 | Medium | 5.5 | 2022-09-01 | An issue was discovered in the Linux kernel through 5.16-rc6. There is a lack of check after calling vzalloc() and lack of free after allocation in drivers/med… |
CVE-2022-36622 | High | 7.5 | 2022-09-01 | Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_GetObjectInfo1. |
CVE-2022-36621 | High | 7.5 | 2022-09-01 | Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_AllocateTransientObject. |
CVE-2022-36604 | High | 7.5 | 2022-09-01 | An access control issue in Canaan Avalon ASIC Miner 2020.3.30 and below allows unauthenticated attackers to arbitrarily change user passwords via a crafted POS… |
CVE-2022-36603 | High | 8.8 | 2022-09-01 | InnoSilicon T3T+ t2t+_soc_20190911_151433.swu was discovered to contain a remote code execution (RCE) vulnerability in the checkUrl function. |
CVE-2022-36602 | High | 8.8 | 2022-09-01 | InnoSilicon A10 a10_20200924_120556 was discovered to contain a remote code execution (RCE) vulnerability in the setPlatformAPI function. |
CVE-2022-36601 | Critical | 9.8 | 2022-09-01 | The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root… |
CVE-2022-32743 | High | 7.5 | 2022-09-01 | Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it. |
CVE-2022-2806 | Medium | 5.5 | 2022-09-01 | It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-4.2-20.el8_6, ovirt-log-collector-4.4.7-2.el8ev |
CVE-2022-2764 | Medium | 4.9 | 2022-09-01 | A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations. |
CVE-2022-2739 | Medium | 5.3 | 2022-09-01 | The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for… |
CVE-2022-2738 | High | 7.5 | 2022-09-01 | The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for… |
CVE-2022-2663 | Medium | 5.3 | 2022-09-01 | An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be ab… |
CVE-2022-2639 | High | 7.8 | 2022-09-01 | An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a ne… |
CVE-2022-2447 | Medium | 6.6 | 2022-09-01 | A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from… |
CVE-2022-2403 | Medium | 6.5 | 2022-09-01 | A credentials leak was found in the OpenShift Container Platform. The private key for the external cluster certificate was stored incorrectly in the oauth-serv… |
CVE-2022-2320 | High | 7.8 | 2022-09-01 | A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of prop… |
CVE-2022-2319 | High | 7.8 | 2022-09-01 | A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the ProcXkbSetGeometry function due to improper validation of the request l… |
CVE-2022-2308 | Medium | 6.5 | 2022-09-01 | A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in line with… |
CVE-2022-2256 | Low | 3.8 | 2022-09-01 | A Stored Cross-site scripting (XSS) vulnerability was found in keycloak as shipped in Red Hat Single Sign-On 7. This flaw allows a privileged attacker to execu… |
CVE-2022-2238 | Medium | 6.5 | 2022-09-01 | A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in the search filter gets parsed by th… |
CVE-2022-23452 | Medium | 4.9 | 2022-09-01 | An authorization flaw was found in openstack-barbican, where anyone with an admin role could add secrets to a different project container. This flaw allows an… |
CVE-2022-1902 | High | 8.8 | 2022-09-01 | A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized in the GraphQL API. This flaw allows aut… |
CVE-2022-1729 | High | 7.0 | 2022-09-01 | A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to buil… |
CVE-2022-1677 | Medium | 6.3 | 2022-09-01 | In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a malformed entry into one of the cluster… |
CVE-2022-1632 | Medium | 6.5 | 2022-09-01 | An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skip… |
CVE-2022-1615 | Medium | 5.5 | 2022-09-01 | In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values. |
CVE-2022-36773 | High | 8.1 | 2022-09-01 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker coul… |
CVE-2022-34380 | Critical | 9.3 | 2022-09-01 | Dell CloudLink 7.1.3 and all earlier versions contain an Authentication Bypass Using an Alternate Path or Channel Vulnerability. A high privileged local attack… |
CVE-2022-34379 | Critical | 9.4 | 2022-09-01 | Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory u… |
CVE-2022-34372 | Critical | 9.8 | 2022-09-01 | Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially ac… |
CVE-2022-30614 | High | 7.5 | 2022-09-01 | IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by sending a specially-crafted request. A remote… |
CVE-2022-3061 | Medium | 5.5 | 2022-09-01 | Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the v… |
CVE-2022-36583 | Medium | 6.1 | 2022-09-01 | DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /dede/co_do.php via the dopost, rpok, and aid parameters. |
CVE-2022-2996 | High | 7.4 | 2022-09-01 | A flaw was found in the python-scciclient when making an HTTPS connection to a server where the server's certificate would not be verified. This issue opens up… |
CVE-2022-36796 | Medium | 6.1 | 2022-09-01 | Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in CallRail, Inc. CallRail Phone Call Tracking plugin <= 0.4.9 at… |
CVE-2022-36373 | Medium | 5.4 | 2022-09-01 | Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Simon Ward MP3 jPlayer plugin <= 2.7.3 at WordPress. |
CVE-2022-36355 | Medium | 5.4 | 2022-09-01 | Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in PluginlySpeaking Easy Org Chart plugin <= 3.1 at WordPress. |
CVE-2022-28199 | Medium | 6.5 | 2022-09-01 | NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly… |
CVE-2022-37435 | High | 8.8 | 2022-09-01 | Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affec… |