2022 CVEs (page 178)
Page 178 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-30214 | Medium | 6.6 | 2022-07-12 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-30213 | Medium | 5.5 | 2022-07-12 | Windows GDI+ Information Disclosure Vulnerability |
CVE-2022-30212 | Medium | 4.7 | 2022-07-12 | Windows Connected Devices Platform Service Information Disclosure Vulnerability |
CVE-2022-30211 | High | 7.5 | 2022-07-12 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
CVE-2022-30209 | High | 7.4 | 2022-07-12 | Windows IIS Server Elevation of Privilege Vulnerability |
CVE-2022-30208 | Medium | 6.5 | 2022-07-12 | Windows Security Account Manager (SAM) Denial of Service Vulnerability |
CVE-2022-30206 | High | 7.8 | 2022-07-12 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-30205 | Medium | 6.6 | 2022-07-12 | Windows Group Policy Elevation of Privilege Vulnerability |
CVE-2022-30203 | High | 7.4 | 2022-07-12 | Windows Boot Manager Security Feature Bypass Vulnerability |
CVE-2022-30202 | High | 7.0 | 2022-07-12 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-30187 | Medium | 4.7 | 2022-07-12 | Azure Storage Library Information Disclosure Vulnerability |
CVE-2022-30181 | Medium | 6.5 | 2022-07-12 | Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2022-29602 | Medium | 5.4 | 2022-07-12 | The gridelements (aka Grid Elements) extension through 7.6.1, 8.x through 8.7.0, 9.x through 9.7.0, and 10.x through 10.2.0 extension for TYPO3 allows XSS. |
CVE-2022-22711 | Medium | 5.7 | 2022-07-12 | Windows BitLocker Information Disclosure Vulnerability |
CVE-2022-22050 | High | 7.8 | 2022-07-12 | Windows Fax Service Elevation of Privilege Vulnerability |
CVE-2022-22049 | High | 7.8 | 2022-07-12 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
CVE-2022-22048 | Medium | 6.1 | 2022-07-12 | BitLocker Security Feature Bypass Vulnerability |
CVE-2022-22047 | High | 7.8 | 2022-07-12 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
CVE-2022-22045 | High | 7.8 | 2022-07-12 | Windows.Devices.Picker.dll Elevation of Privilege Vulnerability |
CVE-2022-22043 | High | 7.8 | 2022-07-12 | Windows Fast FAT File System Driver Elevation of Privilege Vulnerability |
CVE-2022-22042 | Medium | 6.5 | 2022-07-12 | Windows Hyper-V Information Disclosure Vulnerability |
CVE-2022-22041 | Medium | 6.8 | 2022-07-12 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-22040 | High | 7.3 | 2022-07-12 | Internet Information Services Dynamic Compression Module Denial of Service Vulnerability |
CVE-2022-22039 | High | 7.5 | 2022-07-12 | Windows Network File System Remote Code Execution Vulnerability |
CVE-2022-22038 | High | 8.1 | 2022-07-12 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2022-22037 | High | 7.5 | 2022-07-12 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-22036 | High | 7.0 | 2022-07-12 | Performance Counters for Windows Elevation of Privilege Vulnerability |
CVE-2022-22034 | High | 7.8 | 2022-07-12 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2022-22031 | High | 7.8 | 2022-07-12 | Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability |
CVE-2022-22029 | High | 8.1 | 2022-07-12 | Windows Network File System Remote Code Execution Vulnerability |
CVE-2022-22028 | Medium | 5.9 | 2022-07-12 | Windows Network File System Information Disclosure Vulnerability |
CVE-2022-22027 | High | 7.8 | 2022-07-12 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2022-22026 | High | 8.8 | 2022-07-12 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
CVE-2022-22025 | High | 7.5 | 2022-07-12 | Windows Internet Information Services Cachuri Module Denial of Service Vulnerability |
CVE-2022-22024 | High | 7.8 | 2022-07-12 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2022-22023 | Medium | 6.6 | 2022-07-12 | Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability |
CVE-2022-22022 | High | 7.1 | 2022-07-12 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-21845 | Medium | 4.7 | 2022-07-12 | Windows Kernel Information Disclosure Vulnerability |
CVE-2022-35403 | High | 7.5 | 2022-07-12 | Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated loca… |
CVE-2022-33155 | Medium | 5.4 | 2022-07-12 | The ameos_tarteaucitron (aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management / French RGPD compatible) extension before 1.2.23 for TYPO3 allow… |
CVE-2022-33154 | Medium | 5.4 | 2022-07-12 | The schema (aka Embedding schema.org vocabulary) extension before 1.13.1 and 2.x before 2.5.1 for TYPO3 allows XSS. |
CVE-2022-31105 | High | 8.3 | 2022-07-12 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.4.0 and prior to 2.2.11, 2.3.6, and 2.4.5 is vulnerab… |
CVE-2022-31102 | Low | 2.6 | 2022-07-12 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with 2.3.0 and prior to 2.3.6 and 2.4.5 is vulnerable to a cross-sit… |
CVE-2022-29601 | Critical | 9.8 | 2022-07-12 | The seminars (aka Seminar Manager) extension through 4.1.3 for TYPO3 allows SQL Injection. |
CVE-2022-29600 | Critical | 9.8 | 2022-07-12 | The oelib (aka One is Enough Library) extension through 4.1.5 for TYPO3 allows SQL Injection. |
CVE-2022-35228 | High | 8.8 | 2022-07-12 | SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achi… |
CVE-2022-35227 | Medium | 6.1 | 2022-07-12 | A vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controlled input, allows a remote attacker to c… |
CVE-2022-35225 | Medium | 6.1 | 2022-07-12 | SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs over the network, resu… |
CVE-2022-35224 | Medium | 6.1 | 2022-07-12 | SAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripti… |
CVE-2022-35172 | Medium | 6.1 | 2022-07-12 | SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflecte… |
CVE-2022-35171 | Medium | 5.5 | 2022-07-12 | When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and… |
CVE-2022-35170 | Medium | 6.1 | 2022-07-12 | SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs over the network, resu… |
CVE-2022-35169 | Medium | 6.0 | 2022-07-12 | SAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker with an admin privilege to read and decrypt LCMBIAR file's pas… |
CVE-2022-35168 | High | 7.5 | 2022-07-12 | Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rendering the system tem… |
CVE-2022-32249 | High | 7.5 | 2022-07-12 | Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit�s data volume to gain access to highly… |
CVE-2022-32248 | Medium | 5.3 | 2022-07-12 | Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the… |
CVE-2022-32247 | Medium | 6.1 | 2022-07-12 | SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthenticated attacker d… |
CVE-2022-32246 | Medium | 4.6 | 2022-07-12 | SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who has access to BI a… |
CVE-2022-31655 | Medium | 5.4 | 2022-07-12 | VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in alerts. |
CVE-2022-31654 | Medium | 5.4 | 2022-07-12 | VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitization in configurations. |
CVE-2022-31598 | Medium | 5.4 | 2022-07-12 | Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed ope… |
CVE-2022-31597 | Medium | 5.4 | 2022-07-12 | Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform… |
CVE-2022-31593 | High | 8.8 | 2022-07-12 | SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. An attacker could thereb… |
CVE-2022-31592 | Medium | 4.3 | 2022-07-12 | The application SAP Enterprise Extension Defense Forces & Public Security - versions 605, 606, 616,617,618, 802, 803, 804, 805, 806, does not perform necessary… |
CVE-2022-31591 | High | 7.8 | 2022-07-12 | SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. A local attacker can gain elevated privileg… |
CVE-2022-31134 | Medium | 4.9 | 2022-07-12 | Zulip is an open-source team collaboration tool. Zulip Server versions 2.1.0 above have a user interface tool, accessible only to server owners and server admi… |
CVE-2022-31012 | High | 8.2 | 2022-07-12 | Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute… |
CVE-2022-2211 | Medium | 6.5 | 2022-07-12 | A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function. This fla… |
CVE-2022-29619 | Medium | 6.5 | 2022-07-12 | Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administrator to view, edit or modify rights of… |
CVE-2022-29187 | High | 7.8 | 2022-07-12 | Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privil… |
CVE-2022-28771 | High | 7.5 | 2022-07-12 | Due to missing authentication check, SAP Business one License service API - version 10.0 allows an unauthenticated attacker to send malicious http requests ove… |
CVE-2022-22998 | High | 8.0 | 2022-07-12 | Implemented protections on AWS credentials that were not properly protected. |
CVE-2022-22997 | Medium | 6.8 | 2022-07-12 | Addressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacke… |
CVE-2022-1737 | Critical | 9.8 | 2022-07-12 | Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, whi… |
CVE-2022-1025 | High | 8.8 | 2022-07-12 | All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate thei… |
CVE-2022-24800 | High | 8.1 | 2022-07-12 | October/System is the system module for October CMS, a self-hosted CMS platform based on the Laravel PHP Framework. Prior to versions 1.0.476, 1.1.12, and 2.2… |
CVE-2022-2385 | High | 8.1 | 2022-07-12 | A security issue was discovered in aws-iam-authenticator where an allow-listed IAM identity may be able to modify their username and escalate privileges. |
CVE-2022-29901 | Medium | 5.6 | 2022-07-12 | Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary… |
CVE-2022-29900 | Medium | 6.5 | 2022-07-12 | Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions. |
CVE-2022-25875 | Medium | 5.4 | 2022-07-12 | The package svelte before 3.49.0 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization and to improper escape of attributes when usin… |
CVE-2022-2364 | Low | 3.5 | 2022-07-12 | A vulnerability, which was classified as problematic, was found in SourceCodester Simple Parking Management System 1.0. This affects an unknown part of the fil… |
CVE-2022-2363 | Low | 3.5 | 2022-07-12 | A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Parking Management System 1.0. Affected by this issue is some unk… |
CVE-2022-2298 | High | 7.3 | 2022-07-12 | A vulnerability has been found in SourceCodester Clinics Patient Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2022-2297 | Medium | 6.3 | 2022-07-12 | A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the fi… |
CVE-2022-2293 | Low | 3.5 | 2022-07-12 | A vulnerability classified as problematic was found in SourceCodester Simple Sales Management System 1.0. Affected by this vulnerability is an unknown function… |
CVE-2022-2292 | Low | 3.5 | 2022-07-12 | A vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0. Affected is an unknown function of the file /ci_hms/mas… |
CVE-2022-2291 | Medium | 4.3 | 2022-07-12 | A vulnerability was found in SourceCodester Hotel Management System 2.0. It has been rated as problematic. This issue affects some unknown processing of the fi… |
CVE-2022-2263 | Medium | 4.7 | 2022-07-12 | A vulnerability was found in Online Hotel Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file edit_… |
CVE-2022-2262 | Medium | 4.7 | 2022-07-12 | A vulnerability has been found in Online Hotel Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the… |
CVE-2022-25303 | Medium | 5.4 | 2022-07-12 | The package whoogle-search before 0.7.2 are vulnerable to Cross-site Scripting (XSS) via the query string parameter q. In the case where it does not contain th… |
CVE-2022-35648 | Low | 2.6 | 2022-07-12 | Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-… |
CVE-2022-34743 | High | 7.5 | 2022-07-12 | The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-34742 | High | 7.5 | 2022-07-12 | The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-34741 | Medium | 6.5 | 2022-07-12 | The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and… |
CVE-2022-34740 | Medium | 6.5 | 2022-07-12 | The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and… |
CVE-2022-34739 | High | 7.5 | 2022-07-12 | The fingerprint module has a vulnerability of overflow in arithmetic addition. Successful exploitation of this vulnerability may result in the acquisition of d… |
CVE-2022-34738 | High | 7.5 | 2022-07-12 | The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the… |
CVE-2022-34737 | Critical | 9.1 | 2022-07-12 | The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confi… |
CVE-2022-34736 | High | 7.5 | 2022-07-12 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |
CVE-2022-34735 | High | 7.5 | 2022-07-12 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |