2022 CVEs (page 191)
Page 191 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-30538 | High | 7.8 | 2022-06-16 | Out-of-bounds write vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacke… |
CVE-2022-30533 | Medium | 5.4 | 2022-06-16 | Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script… |
CVE-2022-31072 | Low | 2.5 | 2022-06-15 | Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the… |
CVE-2022-31071 | Low | 2.5 | 2022-06-15 | Octopoller is a micro gem for polling and retrying. Version 0.2.0 of the octopoller gem was published containing world-writeable files. Specifically, the gem w… |
CVE-2022-30193 | High | 7.8 | 2022-06-15 | AV1 Video Extension Remote Code Execution Vulnerability |
CVE-2022-30189 | Medium | 6.5 | 2022-06-15 | Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability |
CVE-2022-30188 | High | 7.8 | 2022-06-15 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-30184 | Medium | 5.5 | 2022-06-15 | .NET and Visual Studio Information Disclosure Vulnerability |
CVE-2022-30180 | High | 7.8 | 2022-06-15 | Azure RTOS GUIX Studio Information Disclosure Vulnerability |
CVE-2022-30179 | High | 7.8 | 2022-06-15 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2022-30178 | High | 7.8 | 2022-06-15 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2022-30177 | High | 7.8 | 2022-06-15 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2022-30174 | High | 7.8 | 2022-06-15 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2022-30173 | High | 7.8 | 2022-06-15 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2022-30172 | Medium | 5.5 | 2022-06-15 | Microsoft Office Information Disclosure Vulnerability |
CVE-2022-30171 | Medium | 5.5 | 2022-06-15 | Microsoft Office Information Disclosure Vulnerability |
CVE-2022-30168 | High | 7.8 | 2022-06-15 | Microsoft Photos App Remote Code Execution Vulnerability |
CVE-2022-30167 | High | 7.8 | 2022-06-15 | AV1 Video Extension Remote Code Execution Vulnerability |
CVE-2022-30166 | High | 7.8 | 2022-06-15 | Local Security Authority Subsystem Service Elevation of Privilege Vulnerability |
CVE-2022-30165 | High | 8.8 | 2022-06-15 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2022-30164 | High | 7.8 | 2022-06-15 | Kerberos AppContainer Security Feature Bypass Vulnerability |
CVE-2022-30163 | High | 8.5 | 2022-06-15 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2022-30162 | Medium | 5.5 | 2022-06-15 | Windows Kernel Information Disclosure Vulnerability |
CVE-2022-30161 | High | 8.8 | 2022-06-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30160 | High | 7.8 | 2022-06-15 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-30159 | Medium | 5.5 | 2022-06-15 | Microsoft Office Information Disclosure Vulnerability |
CVE-2022-30158 | High | 8.8 | 2022-06-15 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-30157 | High | 8.8 | 2022-06-15 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-30155 | Medium | 5.5 | 2022-06-15 | Windows Kernel Denial of Service Vulnerability |
CVE-2022-30154 | Medium | 5.3 | 2022-06-15 | Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability |
CVE-2022-30153 | High | 8.8 | 2022-06-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30152 | High | 7.5 | 2022-06-15 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2022-30151 | High | 7.0 | 2022-06-15 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2022-30150 | High | 7.5 | 2022-06-15 | Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability |
CVE-2022-30149 | High | 7.5 | 2022-06-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30148 | Medium | 5.5 | 2022-06-15 | Windows Desired State Configuration (DSC) Information Disclosure Vulnerability |
CVE-2022-30147 | High | 7.8 | 2022-06-15 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2022-30146 | High | 7.5 | 2022-06-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30145 | High | 7.5 | 2022-06-15 | Windows Encrypting File System (EFS) Remote Code Execution Vulnerability |
CVE-2022-30143 | High | 7.5 | 2022-06-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30142 | High | 7.5 | 2022-06-15 | Windows File History Remote Code Execution Vulnerability |
CVE-2022-30141 | High | 8.1 | 2022-06-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30140 | High | 7.5 | 2022-06-15 | Windows iSCSI Discovery Service Remote Code Execution Vulnerability |
CVE-2022-30139 | High | 7.5 | 2022-06-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30137 | Medium | 6.7 | 2022-06-15 | Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of… |
CVE-2022-30136 | Critical | 9.8 | 2022-06-15 | Windows Network File System Remote Code Execution Vulnerability |
CVE-2022-30135 | High | 7.8 | 2022-06-15 | Windows Media Center Elevation of Privilege Vulnerability |
CVE-2022-30132 | High | 7.8 | 2022-06-15 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2022-30131 | High | 7.8 | 2022-06-15 | Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability |
CVE-2022-29149 | High | 7.8 | 2022-06-15 | Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability |
CVE-2022-29143 | High | 7.5 | 2022-06-15 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2022-29119 | High | 7.8 | 2022-06-15 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-29111 | High | 7.8 | 2022-06-15 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-22021 | High | 8.3 | 2022-06-15 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2022-22018 | High | 7.8 | 2022-06-15 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-20203 | High | 7.8 | 2022-06-15 | In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files. This could lead to local escalat… |
CVE-2022-32372 | High | 7.2 | 2022-06-15 | itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_subject.php?id=. |
CVE-2022-32371 | High | 7.2 | 2022-06-15 | itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_teacher.php?id=. |
CVE-2022-32370 | High | 7.2 | 2022-06-15 | itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_classroom.php?id=. |
CVE-2022-30669 | Medium | 5.5 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-30668 | Medium | 5.5 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-30667 | Medium | 5.5 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-30666 | Medium | 5.5 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-30649 | High | 7.8 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30648 | High | 7.8 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code exe… |
CVE-2022-30647 | High | 7.8 | 2022-06-15 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code exe… |
CVE-2022-28749 | Medium | 6.5 | 2022-06-15 | Zooms On-Premise Meeting Connector MMR before version 4.8.113.20220526 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threa… |
CVE-2022-24946 | High | 7.5 | 2022-06-15 | Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Seri… |
CVE-2022-24436 | Medium | 6.5 | 2022-06-15 | Observable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure… |
CVE-2022-22788 | High | 7.1 | 2022-06-15 | The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client instal… |
CVE-2022-21938 | High | 8.1 | 2022-06-15 | Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow… |
CVE-2022-21180 | Medium | 5.5 | 2022-06-15 | Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access. |
CVE-2022-21166 | Medium | 5.5 | 2022-06-15 | Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information… |
CVE-2022-32374 | High | 7.2 | 2022-06-15 | itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_subject_routing.php?id=. |
CVE-2022-32373 | High | 7.2 | 2022-06-15 | itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_exam.php?id=. |
CVE-2022-32368 | High | 7.2 | 2022-06-15 | itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_grade.php?id=. |
CVE-2022-32280 | Medium | 5.4 | 2022-06-15 | Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Xakuro's XO Slider plugin <= 3.3.2 at WordPress. |
CVE-2022-29452 | Low | 3.4 | 2022-06-15 | Authenticated (editor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Export All URLs plugin <= 4.1 at WordPress. |
CVE-2022-28850 | Medium | 5.5 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An att… |
CVE-2022-28849 | High | 7.8 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context o… |
CVE-2022-28848 | High | 7.8 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… |
CVE-2022-28847 | High | 7.8 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… |
CVE-2022-28846 | High | 7.8 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… |
CVE-2022-28845 | High | 7.8 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… |
CVE-2022-28844 | High | 7.8 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… |
CVE-2022-28843 | High | 7.8 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… |
CVE-2022-28842 | High | 7.8 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context o… |
CVE-2022-28841 | High | 7.8 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… |
CVE-2022-28840 | High | 7.8 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… |
CVE-2022-28839 | High | 7.8 | 2022-06-15 | Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the con… |
CVE-2022-28612 | Medium | 5.4 | 2022-06-15 | Improper Access Control vulnerability leading to multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in… |
CVE-2022-28226 | High | 7.8 | 2022-06-15 | Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low privileged, attacker to execute arbitary code with the SYST… |
CVE-2022-28225 | High | 7.8 | 2022-06-15 | Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYST… |
CVE-2022-23823 | Medium | 6.5 | 2022-06-15 | A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable i… |
CVE-2022-21937 | High | 8.7 | 2022-06-15 | Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow… |
CVE-2022-21935 | High | 7.5 | 2022-06-15 | A vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 allows unverified password change. |
CVE-2022-21127 | Medium | 5.5 | 2022-06-15 | Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information… |
CVE-2022-21125 | Medium | 5.5 | 2022-06-15 | Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure… |
CVE-2022-21123 | Medium | 5.5 | 2022-06-15 | Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via l… |
CVE-2022-32550 | Medium | 4.8 | 2022-06-15 | An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password servic… |