2022 CVEs (page 191)
Page 191 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-31291 | High | 7.5 | 2022-06-16 | An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets. |
CVE-2022-27532 | High | 7.8 | 2022-06-16 | A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability i… |
CVE-2022-27531 | High | 7.8 | 2022-06-16 | A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerabil… |
CVE-2022-22953 | Medium | 6.5 | 2022-06-16 | VMware HCX update addresses an information disclosure vulnerability. A malicious actor with network user access to the VMware HCX appliance may be able to gain… |
CVE-2022-31913 | Medium | 4.8 | 2022-06-16 | Online Discussion Forum Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /odfs/classes/Master.php?f=save_category, name. |
CVE-2022-31912 | High | 7.2 | 2022-06-16 | Online Tutor Portal Site v1.0 is vulnerable to SQL Injection via /otps/classes/Master.php?f=delete_team. |
CVE-2022-31911 | High | 7.2 | 2022-06-16 | Online Discussion Forum Site v1.0 is vulnerable to SQL Injection via /odfs/classes/Master.php?f=delete_team. |
CVE-2022-31910 | Medium | 4.8 | 2022-06-16 | Online Tutor Portal Site v1.0 is vulnerable to Cross Site Scripting (XSS). via /otps/classes/Master.php. |
CVE-2022-31908 | High | 7.2 | 2022-06-16 | Student Registration and Fee Payment System v1.0 is vulnerable to SQL Injection via /scms/student.php. |
CVE-2022-31906 | Medium | 4.8 | 2022-06-16 | Online Fire Reporting System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ofrs/classes/Master.php. |
CVE-2022-31849 | High | 8.8 | 2022-06-16 | MERCURY MIPC451-4 1.0.22 Build 220105 Rel.55642n was discovered to contain a remote code execution (RCE) vulnerability which is exploitable via a crafted POST… |
CVE-2022-31300 | Medium | 5.4 | 2022-06-16 | A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST req… |
CVE-2022-31277 | High | 8.8 | 2022-06-16 | Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictions and gain contr… |
CVE-2022-30023 | High | 8.8 | 2022-06-16 | Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function. |
CVE-2022-31372 | High | 7.5 | 2022-06-16 | Wiris Mathtype v7.28.0 was discovered to contain a path traversal vulnerability in the resourceFile parameter. This vulnerability is exploited via a crafted re… |
CVE-2022-2098 | Critical | 9.8 | 2022-06-16 | Weak Password Requirements in GitHub repository kromitgmbh/titra prior to 0.78.1. |
CVE-2022-31626 | High | 7.5 | 2022-06-16 | In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to s… |
CVE-2022-31625 | High | 8.1 | 2022-06-16 | In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the para… |
CVE-2022-30549 | High | 7.8 | 2022-06-16 | Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain inform… |
CVE-2022-30546 | High | 7.8 | 2022-06-16 | Out-of-bounds read vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker… |
CVE-2022-30538 | High | 7.8 | 2022-06-16 | Out-of-bounds write vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacke… |
CVE-2022-30533 | Medium | 5.4 | 2022-06-16 | Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script… |
CVE-2022-31072 | Low | 2.5 | 2022-06-15 | Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the… |
CVE-2022-31071 | Low | 2.5 | 2022-06-15 | Octopoller is a micro gem for polling and retrying. Version 0.2.0 of the octopoller gem was published containing world-writeable files. Specifically, the gem w… |
CVE-2022-30193 | High | 7.8 | 2022-06-15 | AV1 Video Extension Remote Code Execution Vulnerability |
CVE-2022-30189 | Medium | 6.5 | 2022-06-15 | Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability |
CVE-2022-30188 | High | 7.8 | 2022-06-15 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-30184 | Medium | 5.5 | 2022-06-15 | .NET and Visual Studio Information Disclosure Vulnerability |
CVE-2022-30180 | High | 7.8 | 2022-06-15 | Azure RTOS GUIX Studio Information Disclosure Vulnerability |
CVE-2022-30179 | High | 7.8 | 2022-06-15 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2022-30178 | High | 7.8 | 2022-06-15 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2022-30177 | High | 7.8 | 2022-06-15 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2022-30174 | High | 7.8 | 2022-06-15 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2022-30173 | High | 7.8 | 2022-06-15 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2022-30172 | Medium | 5.5 | 2022-06-15 | Microsoft Office Information Disclosure Vulnerability |
CVE-2022-30171 | Medium | 5.5 | 2022-06-15 | Microsoft Office Information Disclosure Vulnerability |
CVE-2022-30168 | High | 7.8 | 2022-06-15 | Microsoft Photos App Remote Code Execution Vulnerability |
CVE-2022-30167 | High | 7.8 | 2022-06-15 | AV1 Video Extension Remote Code Execution Vulnerability |
CVE-2022-30166 | High | 7.8 | 2022-06-15 | Local Security Authority Subsystem Service Elevation of Privilege Vulnerability |
CVE-2022-30165 | High | 8.8 | 2022-06-15 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2022-30164 | High | 7.8 | 2022-06-15 | Kerberos AppContainer Security Feature Bypass Vulnerability |
CVE-2022-30163 | High | 8.5 | 2022-06-15 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2022-30162 | Medium | 5.5 | 2022-06-15 | Windows Kernel Information Disclosure Vulnerability |
CVE-2022-30161 | High | 8.8 | 2022-06-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30160 | High | 7.8 | 2022-06-15 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-30159 | Medium | 5.5 | 2022-06-15 | Microsoft Office Information Disclosure Vulnerability |
CVE-2022-30158 | High | 8.8 | 2022-06-15 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-30157 | High | 8.8 | 2022-06-15 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-30155 | Medium | 5.5 | 2022-06-15 | Windows Kernel Denial of Service Vulnerability |
CVE-2022-30154 | Medium | 5.3 | 2022-06-15 | Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability |
CVE-2022-30153 | High | 8.8 | 2022-06-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30152 | High | 7.5 | 2022-06-15 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2022-30151 | High | 7.0 | 2022-06-15 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2022-30150 | High | 7.5 | 2022-06-15 | Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability |
CVE-2022-30149 | High | 7.5 | 2022-06-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30148 | Medium | 5.5 | 2022-06-15 | Windows Desired State Configuration (DSC) Information Disclosure Vulnerability |
CVE-2022-30147 | High | 7.8 | 2022-06-15 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2022-30146 | High | 7.5 | 2022-06-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30145 | High | 7.5 | 2022-06-15 | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability |
CVE-2022-30143 | High | 7.5 | 2022-06-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30142 | High | 7.5 | 2022-06-15 | Windows File History Remote Code Execution Vulnerability |
CVE-2022-30141 | High | 8.1 | 2022-06-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30140 | High | 7.5 | 2022-06-15 | Windows iSCSI Discovery Service Remote Code Execution Vulnerability |
CVE-2022-30139 | High | 7.5 | 2022-06-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30137 | Medium | 6.7 | 2022-06-15 | Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of… |
CVE-2022-30136 | Critical | 9.8 | 2022-06-15 | Windows Network File System Remote Code Execution Vulnerability |
CVE-2022-30135 | High | 7.8 | 2022-06-15 | Windows Media Center Elevation of Privilege Vulnerability |
CVE-2022-30132 | High | 7.8 | 2022-06-15 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2022-30131 | High | 7.8 | 2022-06-15 | Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability |
CVE-2022-29149 | High | 7.8 | 2022-06-15 | Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability |
CVE-2022-29143 | High | 7.5 | 2022-06-15 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2022-29119 | High | 7.8 | 2022-06-15 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-29111 | High | 7.8 | 2022-06-15 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-22021 | High | 8.3 | 2022-06-15 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2022-22018 | High | 7.8 | 2022-06-15 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-20203 | High | 7.8 | 2022-06-15 | In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files. This could lead to local escalat… |
CVE-2022-32372 | High | 7.2 | 2022-06-15 | itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_subject.php?id=. |
CVE-2022-32371 | High | 7.2 | 2022-06-15 | itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_teacher.php?id=. |
CVE-2022-32370 | High | 7.2 | 2022-06-15 | itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_classroom.php?id=. |
CVE-2022-30669 | Medium | 5.5 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-30668 | Medium | 5.5 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-30667 | Medium | 5.5 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-30666 | Medium | 5.5 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-30649 | High | 7.8 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30648 | High | 7.8 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code exe… |
CVE-2022-30647 | High | 7.8 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code exe… |
CVE-2022-28749 | Medium | 6.5 | 2022-06-15 | Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threa… |
CVE-2022-24946 | High | 7.5 | 2022-06-15 | Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Seri… |
CVE-2022-24436 | Medium | 6.5 | 2022-06-15 | Observable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure… |
CVE-2022-22788 | High | 7.1 | 2022-06-15 | The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client instal… |
CVE-2022-21938 | High | 8.1 | 2022-06-15 | Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow… |
CVE-2022-21180 | Medium | 5.5 | 2022-06-15 | Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access. |
CVE-2022-21166 | Medium | 5.5 | 2022-06-15 | Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information… |
CVE-2022-32374 | High | 7.2 | 2022-06-15 | itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_subject_routing.php?id=. |
CVE-2022-32373 | High | 7.2 | 2022-06-15 | itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_exam.php?id=. |
CVE-2022-32368 | High | 7.2 | 2022-06-15 | itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_grade.php?id=. |
CVE-2022-32280 | Medium | 5.4 | 2022-06-15 | Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Xakuro's XO Slider plugin <= 3.3.2 at WordPress. |
CVE-2022-29452 | Low | 3.4 | 2022-06-15 | Authenticated (editor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Export All URLs plugin <= 4.1 at WordPress. |
CVE-2022-28850 | Medium | 5.5 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2022-28849 | High | 7.8 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context o… |