2022 CVEs (page 155)
Page 155 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-36191 | Medium | 5.5 | 2022-08-17 | A heap-buffer-overflow had occurred in function gf_isom_dovi_config_get of isomedia/avc_ext.c:2490, as demonstrated by MP4Box. This vulnerability was fixed in… |
CVE-2022-22455 | Critical | 9.8 | 2022-08-17 | IBM Security Verify Governance Identity Manager 10.0 virtual appliance component performs an operation at a privilege level that is higher than the minimum lev… |
CVE-2022-38149 | High | 7.5 | 2022-08-17 | HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returned by the *template.Template.Execute met… |
CVE-2022-36190 | Critical | 9.8 | 2022-08-17 | GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get. This vulnerability was fixed in commit fef6242. |
CVE-2022-36186 | High | 7.5 | 2022-08-17 | A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gf_filter_pid_set_property_full () at filter_core/filter_pid… |
CVE-2022-31262 | High | 7.8 | 2022-08-17 | An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can hijack the %Progra… |
CVE-2022-30262 | High | 7.8 | 2022-08-17 | The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates… |
CVE-2022-2845 | High | 7.8 | 2022-08-17 | Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218. |
CVE-2022-37459 | High | 7.8 | 2022-08-17 | Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hij… |
CVE-2022-2871 | Medium | 5.4 | 2022-08-17 | Cross-site Scripting (XSS) - Stored in GitHub repository notrinos/notrinoserp prior to 0.7. |
CVE-2022-1410 | High | 8.0 | 2022-08-17 | OS Command Injection vulnerability in the db_optimize component of Device42 Asset Management Appliance allows an authenticated attacker to execute remote code… |
CVE-2022-1401 | Medium | 6.9 | 2022-08-17 | Improper Access Control vulnerability in the /Exago/WrImageResource.adx route as used in Device42 Asset Management Appliance allows an unauthenticated attacker… |
CVE-2022-1400 | High | 7.1 | 2022-08-17 | Use of Hard-coded Cryptographic Key vulnerability in the WebReportsApi.dll of Exago Web Reports, as used in the Device42 Asset Management Appliance, allows an… |
CVE-2022-1399 | Critical | 9.1 | 2022-08-17 | An Argument Injection or Modification vulnerability in the "Change Secret" username field as used in the Discovery component of Device42 CMDB allows a local at… |
CVE-2022-25799 | Medium | 6.1 | 2022-08-16 | An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.50.0. An attacker could send a link that has a specially crafted URL and convince th… |
CVE-2022-38238 | High | 7.8 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc. |
CVE-2022-38237 | High | 7.8 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc. |
CVE-2022-38236 | High | 7.8 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObj(Object*) at /xpdf/Lexer.cc. |
CVE-2022-38235 | Medium | 5.5 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc. |
CVE-2022-38234 | Medium | 5.5 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObj(Object*) at /xpdf/Lexer.cc. |
CVE-2022-38233 | Medium | 5.5 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow() at /xpdf/Stream.cc. |
CVE-2022-38231 | High | 7.8 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc. |
CVE-2022-38230 | Medium | 5.5 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a floating point exception (FPE) via DCTStream::decodeImage() at /xpdf/Stream.cc. |
CVE-2022-38229 | High | 7.8 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc. |
CVE-2022-38228 | High | 7.8 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc. |
CVE-2022-38227 | High | 7.8 | 2022-08-16 | XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp. |
CVE-2022-37781 | High | 7.8 | 2022-08-16 | fdkaac v1.0.3 was discovered to contain a heap buffer overflow via __interceptor_memcpy.part.46 at /sanitizer_common/sanitizer_common_interceptors.inc. |
CVE-2022-37439 | Medium | 5.5 | 2022-08-16 | In Splunk Enterprise and Universal Forwarder versions in the following table, indexing a specially crafted ZIP file using the file monitoring input can result… |
CVE-2022-37438 | Low | 2.6 | 2022-08-16 | In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information (for example, usernam… |
CVE-2022-37437 | High | 7.4 | 2022-08-16 | When using Ingest Actions to configure a destination that resides on Amazon Simple Storage Service (S3) in Splunk Web, TLS certificate validation is not correc… |
CVE-2022-36155 | Medium | 5.5 | 2022-08-16 | tifig v0.2.2 was discovered to contain a resource allocation issue via operator new(unsigned long) at asan_new_delete.cpp. |
CVE-2022-36153 | Medium | 5.5 | 2022-08-16 | tifig v0.2.2 was discovered to contain a segmentation violation via std::vector<unsigned int, std::allocator<unsigned int> >::size() const at /bits/stl_vector… |
CVE-2022-36152 | Medium | 5.5 | 2022-08-16 | tifig v0.2.2 was discovered to contain a memory leak via operator new[](unsigned long) at /asan/asan_new_delete.cpp. |
CVE-2022-36151 | Medium | 5.5 | 2022-08-16 | tifig v0.2.2 was discovered to contain a segmentation violation via getType() at /common/bbox.cpp. |
CVE-2022-36150 | Medium | 5.5 | 2022-08-16 | tifig v0.2.2 was discovered to contain a heap-buffer overflow via __asan_memmove at /asan/asan_interceptors_memintrinsics.cpp. |
CVE-2022-36149 | Medium | 5.5 | 2022-08-16 | tifig v0.2.2 was discovered to contain a heap-use-after-free via temInfoEntry(). |
CVE-2022-36148 | Medium | 5.5 | 2022-08-16 | fdkaac commit 53fe239 was discovered to contain a floating point exception (FPE) via wav_open at /src/wav_reader.c. |
CVE-2022-36146 | Medium | 5.5 | 2022-08-16 | SWFMill commit 53d7690 was discovered to contain a memory allocation issue via operator new[](unsigned long) at asan_new_delete.cpp. |
CVE-2022-36145 | Medium | 5.5 | 2022-08-16 | SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::Reader::getWord(). |
CVE-2022-36144 | High | 7.8 | 2022-08-16 | SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via base64_encode. |
CVE-2022-36143 | High | 7.8 | 2022-08-16 | SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via __interceptor_strlen.part at /sanitizer_common/sanitizer_common_interceptors.inc. |
CVE-2022-36142 | High | 7.8 | 2022-08-16 | SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Reader::getU30(). |
CVE-2022-36141 | Medium | 5.5 | 2022-08-16 | SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::MethodBody::write(SWF::Writer*, SWF::Context*). |
CVE-2022-36140 | Medium | 5.5 | 2022-08-16 | SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::DeclareFunction2::write(SWF::Writer*, SWF::Context*). |
CVE-2022-36139 | High | 7.8 | 2022-08-16 | SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Writer::writeByte(unsigned char). |
CVE-2022-35486 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae. |
CVE-2022-35485 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x703969. |
CVE-2022-35484 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f. |
CVE-2022-35483 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8. |
CVE-2022-35482 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724. |
CVE-2022-35481 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S. |
CVE-2022-35479 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbbb6. |
CVE-2022-35478 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6babea. |
CVE-2022-35477 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe954. |
CVE-2022-35476 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbc0b. |
CVE-2022-35475 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41a8. |
CVE-2022-35474 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b544e. |
CVE-2022-35473 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7. |
CVE-2022-35472 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a global overflow via /release-x64/otfccdump+0x718693. |
CVE-2022-35471 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41b0. |
CVE-2022-35470 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x65fc97. |
CVE-2022-35469 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a segmentation violation via /x86_64-linux-gnu/libc.so.6+0xbb384. |
CVE-2022-35468 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e420d. |
CVE-2022-35467 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e41b8. |
CVE-2022-35466 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0473. |
CVE-2022-35465 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0414. |
CVE-2022-35464 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6171b2. |
CVE-2022-35463 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0478. |
CVE-2022-35462 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0bc3. |
CVE-2022-35461 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c0a32. |
CVE-2022-35460 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x61731f. |
CVE-2022-35459 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6e412a. |
CVE-2022-35458 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b05ce. |
CVE-2022-35456 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x617087. |
CVE-2022-35455 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0d63. |
CVE-2022-35454 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b05aa. |
CVE-2022-35453 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6c08a6. |
CVE-2022-35452 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0b2c. |
CVE-2022-35451 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b03b5. |
CVE-2022-35450 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b84b1. |
CVE-2022-35449 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b0466. |
CVE-2022-35448 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b55af. |
CVE-2022-35447 | Medium | 6.5 | 2022-08-16 | OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b04de. |
CVE-2022-35434 | Medium | 5.5 | 2022-08-16 | jpeg-quantsmooth before commit 8879454 contained a floating point exception (FPE) via /jpeg-quantsmooth/jpegqs+0x4f5d6c. |
CVE-2022-35433 | Medium | 6.5 | 2022-08-16 | ffjpeg commit caade60a69633d74100bd3c2528bddee0b6a1291 was discovered to contain a memory leak via /src/jfif.c. |
CVE-2022-35114 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via extractFrame at /readers/swf.c. |
CVE-2022-35113 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via swf_DefineLosslessBitsTagToImage at /modules/swfbits.c. |
CVE-2022-35111 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a stack overflow via __sanitizer::StackDepotNode::hash(__sanitizer::StackTrace const&) at /sanitizer_common/… |
CVE-2022-35110 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c. |
CVE-2022-35109 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via draw_stroke at /gfxpoly/stroke.c. |
CVE-2022-35108 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc. |
CVE-2022-35107 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a stack overflow via vfprintf at /stdio-common/vfprintf.c. |
CVE-2022-35106 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::computeTableChecksum(unsigned char*, int) at /xpdf/FoFiTrueType.c… |
CVE-2022-35105 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via /bin/png2swf+0x552cea. |
CVE-2022-35104 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::reset() at /xpdf/Stream.cc. |
CVE-2022-35101 | Medium | 5.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memset-vec-unaligned-erms.S. |
CVE-2022-35100 | Medium | 6.5 | 2022-08-16 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via gfxline_getbbox at /lib/gfxtools.c. |
CVE-2022-35013 | Medium | 6.5 | 2022-08-16 | PNGDec commit 8abf6be was discovered to contain a FPE via SaveBMP at /linux/main.cpp. |
CVE-2022-35012 | Medium | 6.5 | 2022-08-16 | PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via SaveBMP at /linux/main.cpp. |
CVE-2022-35011 | High | 8.8 | 2022-08-16 | PNGDec commit 8abf6be was discovered to contain a global buffer overflow via inflate_fast at /src/inffast.c. |