2022 CVEs (page 179)
Page 179 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2363 | Low | 3.5 | 2022-07-12 | A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Parking Management System 1.0. Affected by this issue is some unk… |
CVE-2022-2298 | High | 7.3 | 2022-07-12 | A vulnerability has been found in SourceCodester Clinics Patient Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2022-2297 | Medium | 6.3 | 2022-07-12 | A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the fi… |
CVE-2022-2293 | Low | 3.5 | 2022-07-12 | A vulnerability classified as problematic was found in SourceCodester Simple Sales Management System 1.0. Affected by this vulnerability is an unknown function… |
CVE-2022-2292 | Low | 3.5 | 2022-07-12 | A vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0. Affected is an unknown function of the file /ci_hms/mas… |
CVE-2022-2291 | Medium | 4.3 | 2022-07-12 | A vulnerability was found in SourceCodester Hotel Management System 2.0. It has been rated as problematic. This issue affects some unknown processing of the fi… |
CVE-2022-2263 | Medium | 4.7 | 2022-07-12 | A vulnerability was found in Online Hotel Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file edit_… |
CVE-2022-2262 | Medium | 4.7 | 2022-07-12 | A vulnerability has been found in Online Hotel Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the… |
CVE-2022-25303 | Medium | 5.4 | 2022-07-12 | The package whoogle-search before 0.7.2 are vulnerable to Cross-site Scripting (XSS) via the query string parameter q. In the case where it does not contain th… |
CVE-2022-35648 | Low | 2.6 | 2022-07-12 | Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with software before 2022-06-… |
CVE-2022-34743 | High | 7.5 | 2022-07-12 | The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability. |
CVE-2022-34742 | High | 7.5 | 2022-07-12 | The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-34741 | Medium | 6.5 | 2022-07-12 | The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and… |
CVE-2022-34740 | Medium | 6.5 | 2022-07-12 | The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and… |
CVE-2022-34739 | High | 7.5 | 2022-07-12 | The fingerprint module has a vulnerability of overflow in arithmetic addition. Successful exploitation of this vulnerability may result in the acquisition of d… |
CVE-2022-34738 | High | 7.5 | 2022-07-12 | The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the… |
CVE-2022-34737 | Critical | 9.1 | 2022-07-12 | The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confi… |
CVE-2022-34736 | High | 7.5 | 2022-07-12 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |
CVE-2022-34735 | High | 7.5 | 2022-07-12 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |
CVE-2022-33911 | Medium | 5.3 | 2022-07-12 | An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized… |
CVE-2022-33713 | High | 7.5 | 2022-07-12 | Implicit Intent hijacking vulnerability in Samsung Cloud prior to version 5.2.0 allows attacker to get sensitive information. |
CVE-2022-33712 | Medium | 5.3 | 2022-07-12 | Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) allow… |
CVE-2022-33711 | Medium | 5.5 | 2022-07-12 | Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers… |
CVE-2022-33710 | High | 7.8 | 2022-07-12 | Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Gal… |
CVE-2022-33709 | High | 7.8 | 2022-07-12 | Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy… |
CVE-2022-33708 | High | 7.8 | 2022-07-12 | Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy… |
CVE-2022-33707 | Medium | 5.3 | 2022-07-12 | Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device. |
CVE-2022-33706 | Low | 2.4 | 2022-07-12 | Improper access control vulnerability in Samsung Gallery prior to version 13.1.05.8 allows physical attackers to access the pictures using S Pen air gesture. |
CVE-2022-33705 | Low | 3.3 | 2022-07-12 | Information exposure in Calendar prior to version 12.3.05.10000 allows attacker to access calendar schedule without READ_CALENDAR permission. |
CVE-2022-33704 | High | 8.5 | 2022-07-12 | Improper validation vulnerability in ucmRetParcelable of KnoxSDK prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities. |
CVE-2022-33703 | High | 8.5 | 2022-07-12 | Improper validation vulnerability in CACertificateInfo prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities. |
CVE-2022-33702 | Medium | 6.2 | 2022-07-12 | Improper authorization vulnerability in Knoxguard prior to SMR Jul-2022 Release 1 allows local attacker to disable keyguard and bypass Knoxguard lock by factor… |
CVE-2022-33701 | Low | 3.3 | 2022-07-12 | Improper access control vulnerability in KnoxCustomManagerService prior to SMR Jul-2022 Release 1 allows attacker to call PowerManaer.goToSleep method which is… |
CVE-2022-33700 | Low | 2.0 | 2022-07-12 | Exposure of Sensitive Information in putDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log. |
CVE-2022-33699 | Low | 2.0 | 2022-07-12 | Exposure of Sensitive Information in getDsaSimImsi in TelephonyUI prior to SMR Jul-2022 Release 1 allows local attacker to access imsi via log. |
CVE-2022-33698 | Low | 3.3 | 2022-07-12 | Exposure of Sensitive Information in Telecom application prior to SMR Jul-2022 Release 1 allows local attackers to access ICCID via log. |
CVE-2022-33697 | Low | 3.3 | 2022-07-12 | Sensitive information exposure vulnerability in ImsServiceSwitchBase in ImsCore prior to SMR Jul-2022 Release 1 allows local attackers with log access permissi… |
CVE-2022-33696 | Medium | 4.0 | 2022-07-12 | Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log. |
CVE-2022-33695 | Medium | 5.1 | 2022-07-12 | Use of improper permission in InputManagerService prior to SMR Jul-2022 Release 1 allows unauthorized access to the service. |
CVE-2022-33694 | Medium | 4.0 | 2022-07-12 | Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent br… |
CVE-2022-33693 | Low | 2.0 | 2022-07-12 | Exposure of Sensitive Information in CID Manager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log. |
CVE-2022-33692 | Medium | 4.0 | 2022-07-12 | Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log. |
CVE-2022-33691 | Medium | 6.2 | 2022-07-12 | A possible race condition vulnerability in score driver prior to SMR Jul-2022 Release 1 can allow local attackers to interleave malicious operations. |
CVE-2022-33690 | Medium | 4.0 | 2022-07-12 | Improper input validation in Contacts Storage prior to SMR Jul-2022 Release 1 allows attacker to access arbitrary file. |
CVE-2022-33689 | Medium | 6.2 | 2022-07-12 | Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferred network type by unprotected binder ca… |
CVE-2022-33688 | Low | 3.3 | 2022-07-12 | Sensitive information exposure vulnerability in EventType in SecTelephonyProvider prior to SMR Jul-2022 Release 1 allows local attackers with log access permis… |
CVE-2022-33687 | Low | 3.3 | 2022-07-12 | Exposure of Sensitive Information in telephony-common.jar prior to SMR Jul-2022 Release 1 allows local attackers to access IMSI via log. |
CVE-2022-33686 | Low | 2.3 | 2022-07-12 | Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log. |
CVE-2022-33685 | Medium | 4.0 | 2022-07-12 | Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive inform… |
CVE-2022-33173 | High | 7.5 | 2022-07-12 | An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote Links may temporarily downgrade to non-TLS connection to determi… |
CVE-2022-31904 | Medium | 6.1 | 2022-07-12 | EGT-Kommunikationstechnik UG Mediacenter before v2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Online_Update.php. |
CVE-2022-30758 | Medium | 4.0 | 2022-07-12 | Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to access some protected information with privilege of… |
CVE-2022-30757 | Medium | 4.0 | 2022-07-12 | Improper authorization in isemtelephony prior to SMR Jul-2022 Release 1 allows attacker to obtain CID without ACCESS_FINE_LOCATION permission. |
CVE-2022-30756 | High | 8.5 | 2022-07-12 | Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of Finder. |
CVE-2022-30755 | High | 7.3 | 2022-07-12 | Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit… |
CVE-2022-30754 | High | 8.5 | 2022-07-12 | Implicit Intent hijacking vulnerability in AppLinker prior to SMR Jul-2022 Release 1 allow allows attackers to launch certain activities with privilege of AppL… |
CVE-2022-30753 | Low | 3.3 | 2022-07-12 | Improper use of a unique device ID in unprotected SecSoterService prior to SMR Jul-2022 Release 1 allows local attackers to get the device ID without permissio… |
CVE-2022-30752 | Low | 3.3 | 2022-07-12 | Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap cli… |
CVE-2022-30751 | Low | 3.3 | 2022-07-12 | Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap cli… |
CVE-2022-30750 | Low | 3.3 | 2022-07-12 | Improper access control vulnerability in updateLastConnectedClientInfo function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wi… |
CVE-2022-2366 | Medium | 5.6 | 2022-07-12 | Incorrect default configuration for trusted IP header in Mattermost version 6.7.0 and earlier allows attacker to bypass some of the rate limitations in place o… |
CVE-2022-34821 | High | 7.6 | 2022-07-12 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2), SCALANCE M804PB (6G… |
CVE-2022-34820 | High | 8.4 | 2022-07-12 | A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All… |
CVE-2022-34819 | Critical | 10.0 | 2022-07-12 | A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All… |
CVE-2022-34748 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in Simcenter Femap (All versions < V2022.2). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34663 | High | 8.0 | 2022-07-12 | A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RU… |
CVE-2022-34467 | Medium | 6.5 | 2022-07-12 | A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions < V9.2.2), Mendix Excel Importer Module (Mendix 9 compa… |
CVE-2022-34466 | Medium | 6.5 | 2022-07-12 | A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions >= V9.11 < V9.15), Mendix Applications using Mendix 9 (V9.12) (All vers… |
CVE-2022-34465 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.250), Parasolid V34.1 (All versions <… |
CVE-2022-34464 | Medium | 6.3 | 2022-07-12 | A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.7.3). The affected application uses an improperly protected file to import S… |
CVE-2022-34291 | Medium | 5.5 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerability while parsi… |
CVE-2022-34290 | Medium | 5.5 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerability while parsi… |
CVE-2022-34289 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34288 | Medium | 5.5 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34287 | Medium | 5.5 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerability while parsi… |
CVE-2022-34286 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34285 | Medium | 5.5 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34284 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34283 | Medium | 5.5 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34282 | Medium | 5.5 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34281 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34280 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34279 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34278 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34277 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-34276 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34275 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34274 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34273 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an al… |
CVE-2022-34272 | High | 7.8 | 2022-07-12 | A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end o… |
CVE-2022-33736 | High | 7.5 | 2022-07-12 | A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affe… |
CVE-2022-33138 | High | 7.5 | 2022-07-12 | A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIM… |
CVE-2022-33137 | High | 8.0 | 2022-07-12 | A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3), SIMATIC MV540 S (All versions < V3.3), SIMATIC MV550 H (All versions < V3.3), SIM… |
CVE-2022-31257 | High | 7.5 | 2022-07-12 | A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (All versions < V8.18.1… |
CVE-2022-30938 | High | 7.5 | 2022-07-12 | A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versions), EN100 Ethern… |
CVE-2022-29884 | High | 7.5 | 2022-07-12 | A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < CPC80 V16.30), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All ve… |
CVE-2022-29560 | High | 7.2 | 2022-07-12 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < 2.15.1), RUGGEDCOM ROX MX5000RE (All versions < 2.15.1), RUGGEDCOM ROX RX1400 (All… |
CVE-2022-26649 | Critical | 9.6 | 2022-07-12 | A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (Al… |
CVE-2022-26648 | High | 8.2 | 2022-07-12 | A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (Al… |
CVE-2022-26647 | High | 8.8 | 2022-07-12 | A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (Al… |