2022 CVEs (page 162)
Page 162 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-36266 | Medium | 6.1 | 2022-08-08 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a stored XSS vulnerability. As the binary file /home/www/cgi-bin/login.cgi does not check if t… |
CVE-2022-36265 | High | 7.2 | 2022-08-08 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Hidden system command web page. After performing a reverse engineering of the firmware, it w… |
CVE-2022-36264 | Critical | 9.1 | 2022-08-08 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists an Unauthenticated remote Arbitrary File Upload vulnerability which allows overwriting arbitra… |
CVE-2022-35493 | Medium | 6.1 | 2022-08-08 | A Cross-site scripting (XSS) vulnerability in json search parse and the json response in wrteam.in, eShop - Multipurpose Ecommerce Store Website version 3.0.4… |
CVE-2022-2713 | Critical | 9.8 | 2022-08-08 | Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0. |
CVE-2022-35490 | Critical | 9.8 | 2022-08-08 | Zammad 5.2.0 is vulnerable to privilege escalation. Zammad has a prevention against brute-force attacks trying to guess login credentials. After a configurable… |
CVE-2022-35489 | Medium | 6.5 | 2022-08-08 | In Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizations of the system rather than only those to which they are… |
CVE-2022-35488 | High | 7.5 | 2022-08-08 | In Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of Zammad, and thereby send many requests for a known account… |
CVE-2022-35487 | High | 7.5 | 2022-08-08 | Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization on certain attachment endpoints. This could be abused by an… |
CVE-2022-2460 | Critical | 9.8 | 2022-08-08 | The WPDating WordPress plugin before 7.4.0 does not properly escape user input before concatenating it to certain SQL queries, leading to multiple SQL injectio… |
CVE-2022-2426 | Medium | 4.8 | 2022-08-08 | The Thinkific Uploader WordPress plugin through 1.0.0 does not sanitise and escape its settings, which could allow high privilege users such as admin to perfor… |
CVE-2022-2425 | Medium | 4.8 | 2022-08-08 | The WP DS Blog Map WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to pe… |
CVE-2022-2424 | Medium | 4.8 | 2022-08-08 | The Google Maps Anywhere WordPress plugin through 1.2.6.3 does not sanitise and escape any of its settings, which could allow high privilege users such as admi… |
CVE-2022-2423 | Medium | 4.8 | 2022-08-08 | The DW Promobar WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfo… |
CVE-2022-2412 | Medium | 4.8 | 2022-08-08 | The Better Tag Cloud WordPress plugin through 0.99.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to… |
CVE-2022-2411 | Medium | 4.8 | 2022-08-08 | The Auto More Tag WordPress plugin through 4.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to per… |
CVE-2022-2410 | Medium | 4.8 | 2022-08-08 | The mTouch Quiz WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfo… |
CVE-2022-2409 | Medium | 4.8 | 2022-08-08 | The Rough Chart WordPress plugin through 1.0.0 does not properly escape chart data label, which could allow high privilege users to perform Cross-Site Scriptin… |
CVE-2022-2398 | Medium | 4.8 | 2022-08-08 | The WordPress Comments Fields WordPress plugin before 4.1 does not escape Field Error Message, which could allow high-privileged users to perform Cross-Site Sc… |
CVE-2022-2395 | Medium | 4.8 | 2022-08-08 | The weForms WordPress plugin before 1.6.14 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripti… |
CVE-2022-2391 | Medium | 5.4 | 2022-08-08 | The Inspiro PRO WordPress plugin does not sanitize the portfolio slider description, allowing users with privileges as low as Contributor to inject JavaScript… |
CVE-2022-2386 | Medium | 6.1 | 2022-08-08 | The Crowdsignal Dashboard WordPress plugin before 3.0.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected… |
CVE-2022-2372 | Medium | 4.8 | 2022-08-08 | The YaySMTP WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform St… |
CVE-2022-2371 | Medium | 5.4 | 2022-08-08 | The YaySMTP WordPress plugin before 2.2.1 does not have proper authorisation when saving its settings, allowing users with a role as low as subscriber to chang… |
CVE-2022-2367 | High | 7.5 | 2022-08-08 | The WSM Downloader WordPress plugin through 1.4.0 allows only specific popular websites to download images/files from, this can be bypassed due to the lack of… |
CVE-2022-2357 | High | 7.5 | 2022-08-08 | The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive o… |
CVE-2022-2356 | High | 8.8 | 2022-08-08 | The Frontend File Manager & Sharing WordPress plugin before 1.1.3 does not filter file extensions when letting users upload files on the server, which may lead… |
CVE-2022-2355 | Medium | 6.5 | 2022-08-08 | The Easy Username Updater WordPress plugin before 1.0.5 does not implement CSRF checks, which could allow attackers to make a logged in admin change any user's… |
CVE-2022-2269 | Critical | 9.8 | 2022-08-08 | The Website File Changes Monitor WordPress plugin before 1.8.3 does not sanitise and escape user input before using it in a SQL statement via an action availab… |
CVE-2022-2046 | Medium | 4.9 | 2022-08-08 | The Directorist WordPress plugin before 7.2.3 allows administrators to download other plugins from the same vendor directly to the site, but does not check the… |
CVE-2022-1323 | Medium | 6.5 | 2022-08-08 | The Discy WordPress theme before 5.0 lacks authorization checks then processing ajax requests to the discy_update_options action, allowing any logged in users… |
CVE-2022-2708 | Medium | 5.5 | 2022-08-08 | A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The m… |
CVE-2022-2707 | Medium | 6.3 | 2022-08-08 | A vulnerability classified as critical was found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected by this vulnerability is an unknown fu… |
CVE-2022-2706 | Medium | 6.3 | 2022-08-08 | A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the fil… |
CVE-2022-2705 | Medium | 6.3 | 2022-08-08 | A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue affects some unknown processing of the… |
CVE-2022-2704 | Medium | 4.3 | 2022-08-08 | A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as problematic. This vulnerability affects unknown code of the file… |
CVE-2022-2703 | Medium | 6.3 | 2022-08-08 | A vulnerability was found in SourceCodester Gym Management System. It has been classified as critical. This affects an unknown part of the component Exercises… |
CVE-2022-2702 | High | 7.3 | 2022-08-08 | A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionality of the file si… |
CVE-2022-2701 | Low | 3.5 | 2022-08-08 | A vulnerability classified as problematic was found in SourceCodester Simple E-Learning System. This vulnerability affects unknown code of the file /claire_bla… |
CVE-2022-2700 | Medium | 4.7 | 2022-08-08 | A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the component GET Parameter Hand… |
CVE-2022-2699 | Medium | 6.3 | 2022-08-08 | A vulnerability was found in SourceCodester Simple E-Learning System. It has been rated as critical. Affected by this issue is some unknown functionality of th… |
CVE-2022-2698 | Medium | 6.3 | 2022-08-08 | A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as critical. Affected by this vulnerability is an unknown functional… |
CVE-2022-2697 | Medium | 6.3 | 2022-08-08 | A vulnerability was found in SourceCodester Simple E-Learning System. It has been classified as critical. Affected is an unknown function of the file comment_f… |
CVE-2022-37452 | Critical | 9.8 | 2022-08-07 | Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set. |
CVE-2022-26979 | High | 7.5 | 2022-08-06 | Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a NULL pointer dereference when this.Span is used for oState of Collab.addStateModel, because… |
CVE-2022-27944 | High | 7.5 | 2022-08-06 | Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow an exportXFAData NULL pointer dereference. |
CVE-2022-37451 | High | 7.5 | 2022-08-06 | Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc. |
CVE-2022-2694 | Medium | 6.3 | 2022-08-06 | A vulnerability was found in SourceCodester Company Website CMS and classified as critical. This issue affects some unknown processing. The manipulation leads… |
CVE-2022-2693 | Medium | 6.3 | 2022-08-06 | A vulnerability has been found in SourceCodester Electronic Medical Records System and classified as critical. This vulnerability affects unknown code of the f… |
CVE-2022-2692 | Low | 3.5 | 2022-08-06 | A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Hall Booking System. This affects an unknown part of the file /whbs/a… |
CVE-2022-2691 | Low | 3.5 | 2022-08-06 | A vulnerability, which was classified as problematic, has been found in SourceCodester Wedding Hall Booking System. Affected by this issue is some unknown func… |
CVE-2022-2690 | Low | 3.5 | 2022-08-06 | A vulnerability classified as problematic was found in SourceCodester Wedding Hall Booking System. Affected by this vulnerability is an unknown functionality o… |
CVE-2022-2689 | Low | 3.5 | 2022-08-06 | A vulnerability classified as problematic has been found in SourceCodester Wedding Hall Booking System. Affected is an unknown function of the file /whbs/?page… |
CVE-2022-2688 | Medium | 6.3 | 2022-08-06 | A vulnerability was found in SourceCodester Expense Management System. It has been rated as critical. This issue affects the function fetch_report_credit of th… |
CVE-2022-2687 | Medium | 6.3 | 2022-08-06 | A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. Affected is an unknown function. The manipulation of the… |
CVE-2022-2686 | Low | 3.5 | 2022-08-06 | A vulnerability, which was classified as problematic, was found in oretnom23 Fast Food Ordering System. This affects an unknown part of the component Menu List… |
CVE-2022-32543 | High | 7.8 | 2022-08-05 | An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE file can lead to a heap buffer overflow w… |
CVE-2022-29886 | High | 7.8 | 2022-08-05 | An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE file can lead to a heap buffer overflow… |
CVE-2022-29465 | Critical | 9.8 | 2022-08-05 | An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0. A specially-crafted malfor… |
CVE-2022-28665 | Critical | 9.8 | 2022-08-05 | A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corrupt… |
CVE-2022-28664 | Critical | 9.8 | 2022-08-05 | A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corrupt… |
CVE-2022-27660 | High | 7.5 | 2022-08-05 | A denial of service vulnerability exists in the confctl_set_guest_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network pa… |
CVE-2022-27633 | High | 7.5 | 2022-08-05 | An information disclosure vulnerability exists in the confctl_get_guest_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted netwo… |
CVE-2022-27631 | Critical | 9.8 | 2022-08-05 | A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP request can le… |
CVE-2022-27630 | High | 7.5 | 2022-08-05 | An information disclosure vulnerability exists in the confctl_get_master_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted net… |
CVE-2022-27185 | High | 7.5 | 2022-08-05 | A denial of service vulnerability exists in the confctl_set_master_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network pa… |
CVE-2022-27178 | Critical | 9.8 | 2022-08-05 | A denial of service vulnerability exists in the confctl_set_wan_cfg functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packe… |
CVE-2022-26376 | Critical | 9.8 | 2022-08-05 | A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New Gen prior to 386.7… |
CVE-2022-26346 | Critical | 9.8 | 2022-08-05 | A denial of service vulnerability exists in the ucloud_del_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted network packet ca… |
CVE-2022-26342 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted ne… |
CVE-2022-26009 | Critical | 9.8 | 2022-08-05 | A stack-based buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A speciall… |
CVE-2022-25996 | Critical | 9.8 | 2022-08-05 | A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted ne… |
CVE-2022-24029 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24028 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24027 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24026 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24025 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24024 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24023 | High | 8.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24022 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24021 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24020 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24019 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24018 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24017 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24016 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24015 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24014 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24013 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24012 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24011 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24010 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24009 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24008 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24007 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24006 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-24005 | Critical | 9.8 | 2022-08-05 | A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuration value can le… |
CVE-2022-23919 | Critical | 9.8 | 2022-08-05 | A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted netw… |
CVE-2022-23918 | Critical | 9.8 | 2022-08-05 | A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted netw… |
CVE-2022-23399 | Critical | 9.8 | 2022-08-05 | A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafte… |