2022 CVEs (page 161)
Page 161 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-35797 | Medium | 6.1 | 2022-08-09 | Windows Hello Security Feature Bypass Vulnerability |
CVE-2022-35796 | High | 7.5 | 2022-08-09 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-35795 | High | 7.8 | 2022-08-09 | Windows Error Reporting Service Elevation of Privilege Vulnerability |
CVE-2022-35794 | High | 8.1 | 2022-08-09 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-35793 | High | 7.3 | 2022-08-09 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-35792 | High | 7.8 | 2022-08-09 | Storage Spaces Direct Elevation of Privilege Vulnerability |
CVE-2022-35791 | Medium | 6.5 | 2022-08-09 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-35790 | Medium | 6.5 | 2022-08-09 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-35789 | Medium | 6.5 | 2022-08-09 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-35788 | Medium | 6.5 | 2022-08-09 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-35787 | Medium | 4.9 | 2022-08-09 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-35786 | Medium | 6.5 | 2022-08-09 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-35785 | Medium | 6.5 | 2022-08-09 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-35784 | Medium | 6.5 | 2022-08-09 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-35783 | Medium | 4.4 | 2022-08-09 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-35782 | Medium | 6.5 | 2022-08-09 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-35781 | Medium | 6.5 | 2022-08-09 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-35780 | Medium | 6.5 | 2022-08-09 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-35779 | High | 7.8 | 2022-08-09 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2022-35777 | High | 8.8 | 2022-08-09 | Visual Studio Remote Code Execution Vulnerability |
CVE-2022-35776 | Medium | 6.2 | 2022-08-09 | Azure Site Recovery Denial of Service Vulnerability |
CVE-2022-35775 | Medium | 6.5 | 2022-08-09 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-35774 | Medium | 4.9 | 2022-08-09 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-35773 | High | 7.8 | 2022-08-09 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2022-35772 | High | 7.2 | 2022-08-09 | Azure Site Recovery Remote Code Execution Vulnerability |
CVE-2022-35771 | High | 7.8 | 2022-08-09 | Windows Defender Credential Guard Elevation of Privilege Vulnerability |
CVE-2022-35769 | High | 7.5 | 2022-08-09 | Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability |
CVE-2022-35768 | High | 7.8 | 2022-08-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-35767 | High | 8.1 | 2022-08-09 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-35766 | High | 8.1 | 2022-08-09 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-35765 | High | 7.8 | 2022-08-09 | Storage Spaces Direct Elevation of Privilege Vulnerability |
CVE-2022-35764 | High | 7.8 | 2022-08-09 | Storage Spaces Direct Elevation of Privilege Vulnerability |
CVE-2022-35763 | High | 7.8 | 2022-08-09 | Storage Spaces Direct Elevation of Privilege Vulnerability |
CVE-2022-35762 | High | 7.8 | 2022-08-09 | Storage Spaces Direct Elevation of Privilege Vulnerability |
CVE-2022-35761 | High | 7.8 | 2022-08-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-35760 | High | 7.8 | 2022-08-09 | Microsoft ATA Port Driver Elevation of Privilege Vulnerability |
CVE-2022-34717 | High | 8.8 | 2022-08-09 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2022-34716 | Medium | 5.9 | 2022-08-09 | .NET Spoofing Vulnerability |
CVE-2022-34715 | Critical | 9.8 | 2022-08-09 | Windows Network File System Remote Code Execution Vulnerability |
CVE-2022-34714 | High | 8.1 | 2022-08-09 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-34713 | High | 7.8 | 2022-08-09 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability |
CVE-2022-34712 | Medium | 5.5 | 2022-08-09 | Windows Defender Credential Guard Information Disclosure Vulnerability |
CVE-2022-34710 | Medium | 5.5 | 2022-08-09 | Windows Defender Credential Guard Information Disclosure Vulnerability |
CVE-2022-34709 | Medium | 6.0 | 2022-08-09 | Windows Defender Credential Guard Security Feature Bypass Vulnerability |
CVE-2022-34708 | Medium | 5.5 | 2022-08-09 | Windows Kernel Information Disclosure Vulnerability |
CVE-2022-34707 | High | 7.8 | 2022-08-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-34706 | High | 7.8 | 2022-08-09 | Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
CVE-2022-34705 | High | 7.8 | 2022-08-09 | Windows Defender Credential Guard Elevation of Privilege Vulnerability |
CVE-2022-34704 | Medium | 4.7 | 2022-08-09 | Windows Defender Credential Guard Information Disclosure Vulnerability |
CVE-2022-34703 | High | 7.8 | 2022-08-09 | Windows Partition Management Driver Elevation of Privilege Vulnerability |
CVE-2022-34702 | High | 8.1 | 2022-08-09 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-34701 | High | 7.5 | 2022-08-09 | Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability |
CVE-2022-34699 | High | 7.8 | 2022-08-09 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2022-34696 | High | 7.8 | 2022-08-09 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2022-34692 | Medium | 5.3 | 2022-08-09 | Microsoft Exchange Server Information Disclosure Vulnerability |
CVE-2022-34691 | High | 8.8 | 2022-08-09 | Active Directory Domain Services Elevation of Privilege Vulnerability |
CVE-2022-34690 | High | 7.1 | 2022-08-09 | Windows Fax Service Elevation of Privilege Vulnerability |
CVE-2022-34687 | High | 7.8 | 2022-08-09 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2022-34686 | Medium | 5.5 | 2022-08-09 | Azure RTOS GUIX Studio Information Disclosure Vulnerability |
CVE-2022-34685 | Medium | 5.5 | 2022-08-09 | Azure RTOS GUIX Studio Information Disclosure Vulnerability |
CVE-2022-33670 | High | 7.8 | 2022-08-09 | Windows Partition Management Driver Elevation of Privilege Vulnerability |
CVE-2022-33649 | Critical | 9.6 | 2022-08-09 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2022-33648 | High | 7.8 | 2022-08-09 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2022-33646 | High | 7.0 | 2022-08-09 | Azure Batch Node Agent Elevation of Privilege Vulnerability |
CVE-2022-33640 | High | 7.8 | 2022-08-09 | System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability |
CVE-2022-33636 | High | 8.3 | 2022-08-09 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2022-33631 | High | 7.3 | 2022-08-09 | Microsoft Excel Security Feature Bypass Vulnerability |
CVE-2022-30197 | Medium | 5.5 | 2022-08-09 | Windows Kernel Information Disclosure Vulnerability |
CVE-2022-30194 | High | 7.5 | 2022-08-09 | Windows WebBrowser Control Remote Code Execution Vulnerability |
CVE-2022-30176 | High | 7.8 | 2022-08-09 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2022-30175 | High | 7.8 | 2022-08-09 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2022-30144 | High | 7.5 | 2022-08-09 | Windows Bluetooth Service Remote Code Execution Vulnerability |
CVE-2022-30134 | Medium | 6.5 | 2022-08-09 | Microsoft Exchange Server Information Disclosure Vulnerability |
CVE-2022-30133 | Critical | 9.8 | 2022-08-09 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability |
CVE-2022-24516 | High | 8.0 | 2022-08-09 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2022-24477 | High | 8.0 | 2022-08-09 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2022-21980 | High | 8.0 | 2022-08-09 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2022-21979 | Medium | 4.8 | 2022-08-09 | Microsoft Exchange Server Information Disclosure Vulnerability |
CVE-2022-30574 | Medium | 4.6 | 2022-08-09 | The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO FTL - Ente… |
CVE-2022-30573 | Medium | 6.7 | 2022-08-09 | The ftlserver component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, and TIBCO FTL -… |
CVE-2022-2734 | Medium | 5.4 | 2022-08-09 | Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2733 | Medium | 6.1 | 2022-08-09 | Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2732 | High | 8.3 | 2022-08-09 | Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2731 | Medium | 6.1 | 2022-08-09 | Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2730 | Medium | 6.5 | 2022-08-09 | Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2729 | Medium | 5.4 | 2022-08-09 | Cross-site Scripting (XSS) - DOM in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2728 | Medium | 6.3 | 2022-08-09 | A vulnerability was found in SourceCodester Gym Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2022-2727 | Medium | 6.3 | 2022-08-09 | A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2022-36125 | High | 7.5 | 2022-08-09 | It is possible to crash (panic) an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior… |
CVE-2022-36124 | High | 7.5 | 2022-08-09 | It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications… |
CVE-2022-35724 | High | 7.5 | 2022-08-09 | It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache A… |
CVE-2022-2726 | Medium | 6.3 | 2022-08-09 | A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file Ant_Check.php. The manipulation of the argument DID l… |
CVE-2022-2725 | Low | 3.5 | 2022-08-09 | A vulnerability was found in SourceCodester Company Website CMS. It has been rated as problematic. Affected by this issue is some unknown functionality of the… |
CVE-2022-2724 | Medium | 6.3 | 2022-08-09 | A vulnerability was found in SourceCodester Employee Management System. It has been declared as critical. Affected by this vulnerability is an unknown function… |
CVE-2022-2723 | Medium | 6.3 | 2022-08-09 | A vulnerability was found in SourceCodester Employee Management System. It has been classified as critical. Affected is an unknown function of the file /proces… |
CVE-2022-2722 | Medium | 6.3 | 2022-08-09 | A vulnerability was found in SourceCodester Simple Student Information System and classified as critical. This issue affects some unknown processing of the fil… |
CVE-2022-2715 | Medium | 6.3 | 2022-08-09 | A vulnerability has been found in SourceCodester Employee Management System and classified as critical. This vulnerability affects unknown code of the file elo… |
CVE-2022-25907 | High | 7.5 | 2022-08-09 | The package ts-deepmerge before 2.0.2 are vulnerable to Prototype Pollution due to missing sanitization of the merge function. |
CVE-2022-34293 | High | 7.5 | 2022-08-08 | wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped. |
CVE-2022-36267 | Critical | 9.8 | 2022-08-08 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability. The ping functionality can be called… |