2022 CVEs (page 163)
Page 163 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23103 | Critical | 9.8 | 2022-08-05 | A stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A speciall… |
CVE-2022-22144 | Critical | 9.8 | 2022-08-05 | A hard-coded password vulnerability exists in the libcommonprod.so prod_change_root_passwd functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. During sys… |
CVE-2022-22140 | Critical | 9.8 | 2022-08-05 | An os command injection vulnerability exists in the confsrv ucloud_add_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted netwo… |
CVE-2022-21201 | High | 8.8 | 2022-08-05 | A stack-based buffer overflow vulnerability exists in the confers ucloud_add_node_new functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-cra… |
CVE-2022-21178 | Critical | 9.8 | 2022-08-05 | An os command injection vulnerability exists in the confsrv ucloud_add_new_node functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted ne… |
CVE-2022-37450 | Medium | 5.9 | 2022-08-05 | Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference… |
CVE-2022-35163 | Medium | 4.8 | 2022-08-05 | Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the U_NAME parameter at /category/controller.ph… |
CVE-2022-35162 | Medium | 4.8 | 2022-08-05 | Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the CATEGORY parameter at /category/controller… |
CVE-2022-31618 | Medium | 5.5 | 2022-08-05 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null pointer, which may lead to denial of se… |
CVE-2022-31614 | High | 7.0 | 2022-08-05 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources. An attacker may exploit this vu… |
CVE-2022-31609 | High | 7.8 | 2022-08-05 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to allocate resources for which the guest… |
CVE-2022-2685 | Low | 3.5 | 2022-08-05 | A vulnerability was found in SourceCodester Interview Management System 1.0 and classified as problematic. This issue affects some unknown processing of the fi… |
CVE-2022-2684 | Low | 3.5 | 2022-08-05 | A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as problematic. This vulnerability affects unknown code… |
CVE-2022-2683 | Low | 3.5 | 2022-08-05 | A vulnerability, which was classified as problematic, was found in SourceCodester Simple Food Ordering System 1.0. This affects an unknown part of the file /lo… |
CVE-2022-2682 | Low | 3.5 | 2022-08-05 | A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce System. Affected by this issue is some unkno… |
CVE-2022-2681 | Low | 3.5 | 2022-08-05 | A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an unknown functionali… |
CVE-2022-2680 | Medium | 6.3 | 2022-08-05 | A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. T… |
CVE-2022-2679 | Medium | 6.3 | 2022-08-05 | A vulnerability was found in SourceCodester Interview Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the f… |
CVE-2022-2678 | Medium | 6.3 | 2022-08-05 | A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System. It has been declared as critical. This vulnerability affects unknown code of th… |
CVE-2022-2677 | Medium | 6.3 | 2022-08-05 | A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical. This affects an unknown part of the fi… |
CVE-2022-2676 | Medium | 6.3 | 2022-08-05 | A vulnerability was found in SourceCodester Electronic Medical Records System and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2022-22299 | High | 7.8 | 2022-08-05 | A format string vulnerability [CWE-134] in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 through 6.1.5, FortiADC… |
CVE-2022-37398 | High | 7.1 | 2022-08-05 | A stack-based buffer overflow vulnerability was found inside ADM when using WebDAV due to the lack of data size validation. An attacker can exploit this vulner… |
CVE-2022-2675 | Medium | 6.5 | 2022-08-05 | Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 (using firmware version 0.1.35) can be powered down by an… |
CVE-2022-2668 | High | 7.2 | 2022-08-05 | An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature is disabled |
CVE-2022-29071 | Medium | 4.0 | 2022-08-05 | This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of c… |
CVE-2022-28880 | Medium | 4.3 | 2022-08-05 | A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible… |
CVE-2022-27535 | High | 7.8 | 2022-08-05 | Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports'… |
CVE-2022-1973 | High | 7.1 | 2022-08-05 | A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal. This flaw allows a local attacker to crash the syste… |
CVE-2022-1158 | High | 7.8 | 2022-08-05 | A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the page's pfn. As vaddr and vm_pgoff are… |
CVE-2022-36840 | Medium | 4.5 | 2022-08-05 | DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to execute arbitrary code. |
CVE-2022-36839 | Medium | 5.9 | 2022-08-05 | SQL injection vulnerability via IAPService in Samsung Checkout prior to version 5.0.53.1 allows attackers to access IAP information. |
CVE-2022-36838 | Medium | 4.0 | 2022-08-05 | Implicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows attacker to get sensitive information. |
CVE-2022-36837 | Medium | 6.2 | 2022-08-05 | Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to get sensitive information. |
CVE-2022-36836 | Medium | 6.2 | 2022-08-05 | Unprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to read connection state without permission. |
CVE-2022-36835 | Low | 3.3 | 2022-08-05 | Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files. |
CVE-2022-36834 | Low | 3.3 | 2022-08-05 | Exposure of Sensitive Information vulnerability in Game Launcher prior to version 6.0.07 allows local attacker to access app data with user interaction. |
CVE-2022-36833 | High | 7.3 | 2022-08-05 | Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above allows lo… |
CVE-2022-36832 | Medium | 4.0 | 2022-08-05 | Improper access control vulnerability in WebApp in Cameralyzer prior to versions 3.2.22, 3.3.22, 3.4.22 and 3.5.51 allows attackers to access external storage… |
CVE-2022-36831 | Medium | 6.2 | 2022-08-05 | Path traversal vulnerability in UriFileUtils of Samsung Notes prior to version 4.3.14.39 allows attacker to access some file as Samsung Notes permission. |
CVE-2022-36830 | Medium | 6.2 | 2022-08-05 | PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permissio… |
CVE-2022-36829 | Medium | 6.2 | 2022-08-05 | PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via… |
CVE-2022-36296 | Medium | 6.5 | 2022-08-05 | Broken Authentication vulnerability in JumpDEMAND Inc. ActiveDEMAND plugin <= 0.2.27 at WordPress allows unauthenticated post update/create/delete. |
CVE-2022-36284 | Medium | 6.4 | 2022-08-05 | Authenticated IDOR vulnerability in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress allows an attacker to change the PayPal email. Woo… |
CVE-2022-34769 | Medium | 6.3 | 2022-08-05 | Michlol - rashim web interface Insecure direct object references (IDOR). First of all, the attacker needs to login. After he performs log into the system there… |
CVE-2022-34768 | Medium | 6.5 | 2022-08-05 | insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code. |
CVE-2022-33734 | Medium | 6.2 | 2022-08-05 | Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information wi… |
CVE-2022-33733 | Medium | 6.2 | 2022-08-05 | Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information witho… |
CVE-2022-33732 | Medium | 6.2 | 2022-08-05 | Improper access control vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows local attackers to scan and connect to PC by unprotected bin… |
CVE-2022-33731 | Medium | 5.1 | 2022-08-05 | Improper access control vulnerability in DesktopSystemUI prior to SMR Aug-2022 Release 1 allows attackers to enable and disable arbitrary components. |
CVE-2022-33730 | Medium | 6.8 | 2022-08-05 | Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical attackers. |
CVE-2022-33729 | Medium | 5.9 | 2022-08-05 | Improper restriction of broadcasting Intent in ConfirmConnectActivity of?NFC prior to SMR Aug-2022 Release 1 leaks MAC address of the connected Bluetooth devic… |
CVE-2022-33728 | Medium | 4.0 | 2022-08-05 | Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress via Settings.Gloabal. |
CVE-2022-33727 | Medium | 4.8 | 2022-08-05 | A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth devi… |
CVE-2022-33726 | Low | 3.3 | 2022-08-05 | Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity. |
CVE-2022-33725 | Medium | 4.0 | 2022-08-05 | A vulnerability using PendingIntent in Knox VPN prior to SMR Aug-2022 Release 1 allows attackers to access content providers with system privilege. |
CVE-2022-33724 | Low | 3.3 | 2022-08-05 | Exposure of Sensitive Information in Samsung Dialer application?prior to SMR Aug-2022 Release 1 allows local attackers to access ICCID via log. |
CVE-2022-33723 | Medium | 4.8 | 2022-08-05 | A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device… |
CVE-2022-33722 | Medium | 4.0 | 2022-08-05 | Implicit Intent hijacking vulnerability in Smart View prior to SMR Aug-2022 Release 1 allows attacker to access connected device MAC address. |
CVE-2022-33721 | Medium | 4.4 | 2022-08-05 | A vulnerability using PendingIntent in DeX for PC prior to SMR Aug-2022 Release 1 allows attackers to access files with system privilege. |
CVE-2022-33720 | Low | 2.4 | 2022-08-05 | Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chrome locked by AppLock via new tap shortc… |
CVE-2022-33719 | High | 8.6 | 2022-08-05 | Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow. |
CVE-2022-33718 | Medium | 6.2 | 2022-08-05 | An improper access control vulnerability in Wi-Fi Service prior to SMR AUG-2022 Release 1 allows untrusted applications to manipulate the list of apps that can… |
CVE-2022-33717 | Medium | 4.4 | 2022-08-05 | A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read out of bound memory. |
CVE-2022-33716 | Low | 2.3 | 2022-08-05 | An absence of variable initialization in ICCC TA prior to SMR Aug-2022 Release 1 allows local attacker to read uninitialized memory. |
CVE-2022-33715 | Medium | 5.3 | 2022-08-05 | Improper access control and path traversal vulnerability in LauncherProvider prior to SMR Aug-2022 Release 1 allow local attacker to access files of One UI. |
CVE-2022-33714 | Medium | 6.2 | 2022-08-05 | Improper access control vulnerability in SemWifiApBroadcastReceiver prior to SMR Aug-2022 Release 1 allows attacker to reset a setting value related to mobile… |
CVE-2022-33201 | Medium | 6.3 | 2022-08-05 | Cross-Site Request Forgery (CSRF) vulnerability in MailerLite – Signup forms (official) plugin <= 1.5.7 at WordPress allows an attacker to change the API key. |
CVE-2022-31665 | High | 7.2 | 2022-08-05 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and n… |
CVE-2022-31664 | High | 7.8 | 2022-08-05 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. A malicious actor with local access can esc… |
CVE-2022-31663 | Medium | 6.1 | 2022-08-05 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. Due to improper user input… |
CVE-2022-31662 | High | 7.5 | 2022-08-05 | VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network access… |
CVE-2022-31661 | High | 7.8 | 2022-08-05 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. A malicious actor with local access can… |
CVE-2022-31660 | High | 7.8 | 2022-08-05 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. A malicious actor with local access can es… |
CVE-2022-31659 | High | 7.2 | 2022-08-05 | VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A malicious actor with administrator and network access can tri… |
CVE-2022-31658 | High | 7.2 | 2022-08-05 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. A malicious actor with administrator and n… |
CVE-2022-31657 | Critical | 9.8 | 2022-08-05 | VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A malicious actor with network access may be able to redirect an authen… |
CVE-2022-31656 | Critical | 9.8 | 2022-08-05 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious… |
CVE-2022-2539 | Medium | 5.3 | 2022-08-05 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1, allowed… |
CVE-2022-2534 | Low | 2.2 | 2022-08-05 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before 15.1.4, all version… |
CVE-2022-2531 | Medium | 5.3 | 2022-08-05 | An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions… |
CVE-2022-2512 | Medium | 6.5 | 2022-08-05 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versio… |
CVE-2022-2501 | Medium | 5.9 | 2022-08-05 | An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an attack… |
CVE-2022-2500 | Medium | 4.4 | 2022-08-05 | A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1. A stored… |
CVE-2022-2499 | Low | 3.5 | 2022-08-05 | An issue has been discovered in GitLab EE affecting all versions starting from 13.10 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions… |
CVE-2022-2498 | Medium | 6.4 | 2022-08-05 | An issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 triggered new… |
CVE-2022-2497 | High | 8.5 | 2022-08-05 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versio… |
CVE-2022-2459 | Low | 2.7 | 2022-08-05 | An issue has been discovered in GitLab EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2… |
CVE-2022-2456 | Medium | 4.9 | 2022-08-05 | An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15… |
CVE-2022-2417 | Medium | 6.2 | 2022-08-05 | Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an authenticat… |
CVE-2022-2326 | Medium | 6.4 | 2022-08-05 | An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15… |
CVE-2022-2307 | Low | 3.5 | 2022-08-05 | A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all version… |
CVE-2022-2303 | Medium | 4.3 | 2022-08-05 | An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15… |
CVE-2022-2095 | Medium | 4.3 | 2022-08-05 | An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions starting from 15.1 before 15.1.4, all ve… |
CVE-2022-2053 | High | 7.5 | 2022-08-05 | When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit implementation closes… |
CVE-2022-25649 | Medium | 5.0 | 2022-08-05 | Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress. |
CVE-2022-1704 | High | 7.6 | 2022-08-05 | Due to an XML external entity reference, the software parses XML in the backup/restore functionality without XML security flags, which may lead to a XXE attack… |
CVE-2022-1012 | High | 8.2 | 2022-08-05 | A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attac… |
CVE-2022-35936 | High | 8.2 | 2022-08-05 | Ethermint is an Ethereum library. In Ethermint running versions before `v0.17.2`, the contract `selfdestruct` invocation permanently removes the corresponding… |
CVE-2022-2674 | High | 7.3 | 2022-08-05 | A vulnerability was found in SourceCodester Best Fee Management System. It has been rated as critical. Affected by this issue is the function login of the file… |