2022 CVEs (page 201)
Page 201 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29712 | Critical | 9.8 | 2022-06-02 | LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters. |
CVE-2022-29711 | Medium | 6.1 | 2022-06-02 | LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php. |
CVE-2022-29695 | High | 7.5 | 2022-06-02 | Unicorn Engine v2.0.0-rc7 contains memory leaks caused by an incomplete unicorn engine initialization. |
CVE-2022-29694 | High | 7.5 | 2022-06-02 | Unicorn Engine v2.0.0-rc7 and below was discovered to contain a NULL pointer dereference via qemu_ram_free. |
CVE-2022-29693 | High | 7.5 | 2022-06-02 | Unicorn Engine v2.0.0-rc7 and below was discovered to contain a memory leak via the function uc_close at /my/unicorn/uc.c. |
CVE-2022-29692 | High | 7.8 | 2022-06-02 | Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function. |
CVE-2022-29659 | Critical | 9.8 | 2022-06-02 | Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php. |
CVE-2022-29653 | Medium | 6.1 | 2022-06-02 | OFCMS v1.1.4 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/comn/service/update.json. |
CVE-2022-29648 | Medium | 5.4 | 2022-06-02 | A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request. |
CVE-2022-29647 | High | 8.8 | 2022-06-02 | An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do. |
CVE-2022-29628 | Medium | 5.4 | 2022-06-02 | A cross-site scripting (XSS) vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a craf… |
CVE-2022-29627 | Medium | 4.3 | 2022-06-02 | An insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers. |
CVE-2022-29624 | High | 8.8 | 2022-06-02 | An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2022-29598 | Medium | 6.1 | 2022-06-02 | Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to an reflected Cross-Site Scripting (XSS) vulnerability via RRSWeb/maint/ShowDocument/… |
CVE-2022-29540 | Medium | 6.1 | 2022-06-02 | resi-calltrace in RESI Gemini-Net 4.2 is affected by Multiple XSS issues. Unauthenticated remote attackers can inject arbitrary web script or HTML into an HTTP… |
CVE-2022-29488 | High | 7.8 | 2022-06-02 | The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code. |
CVE-2022-29483 | High | 7.8 | 2022-06-02 | Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confident… |
CVE-2022-28945 | Critical | 9.8 | 2022-06-02 | An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file. |
CVE-2022-28799 | High | 8.8 | 2022-06-02 | The TikTok application before 23.7.3 for Android allows account takeover. A crafted URL (unvalidated deeplink) can force the com.zhiliaoapp.musically WebView t… |
CVE-2022-28702 | Medium | 6.1 | 2022-06-02 | Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confident… |
CVE-2022-28690 | High | 7.8 | 2022-06-02 | The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code. |
CVE-2022-28605 | Critical | 9.8 | 2022-06-02 | Hardcoded admin token in SoundBar apps in Linkplay SDK 1.00 allows remote attackers to gain admin privilege access in linkplay antifactory |
CVE-2022-27782 | High | 7.5 | 2022-06-02 | libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previ… |
CVE-2022-27781 | High | 7.5 | 2022-06-02 | libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous fu… |
CVE-2022-27780 | High | 7.5 | 2022-06-02 | The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wron… |
CVE-2022-27779 | Medium | 5.3 | 2022-06-02 | libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cook… |
CVE-2022-27778 | High | 8.1 | 2022-06-02 | A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`. |
CVE-2022-27776 | Medium | 6.5 | 2022-06-02 | A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host… |
CVE-2022-27775 | High | 7.5 | 2022-06-02 | An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a… |
CVE-2022-27774 | Medium | 5.7 | 2022-06-02 | An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract creden… |
CVE-2022-27184 | High | 7.8 | 2022-06-02 | The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code. |
CVE-2022-26978 | Medium | 6.1 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. The os_username para… |
CVE-2022-26977 | Medium | 6.1 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanit… |
CVE-2022-26976 | Medium | 5.4 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanit… |
CVE-2022-26975 | High | 7.5 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication. |
CVE-2022-26974 | Medium | 6.1 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload mechanism. Lack of input sanitization… |
CVE-2022-26973 | Medium | 5.3 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. By tweaking the lic… |
CVE-2022-26972 | Medium | 6.1 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameters are not… |
CVE-2022-26971 | Medium | 5.3 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. This upload can be… |
CVE-2022-26491 | Medium | 5.9 | 2022-06-02 | An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The clie… |
CVE-2022-25237 | Critical | 9.8 | 2022-06-02 | Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the RestAPIAuthorizationFil… |
CVE-2022-24967 | Medium | 6.5 | 2022-06-02 | Black Rainbow NIMBUS before 3.7.0 allows stored Cross-site Scripting (XSS). |
CVE-2022-24702 | Critical | 9.8 | 2022-06-02 | An issue was discovered in WinAPRS 2.9.0. A buffer overflow in the VHF KISS TNC component allows a remote attacker to achieve remote code execution via malicio… |
CVE-2022-24701 | High | 7.8 | 2022-06-02 | An issue was discovered in WinAPRS 2.9.0. A buffer overflow in national.txt processing allows a local attacker to cause a denial of service or possibly achieve… |
CVE-2022-24700 | High | 7.5 | 2022-06-02 | An issue was discovered in WinAPRS 2.9.0. A buffer overflow in DIGI address processing for VHF KISS packets allows a remote attacker to cause a denial of servi… |
CVE-2022-24581 | High | 7.5 | 2022-06-02 | ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when uploading a file, a… |
CVE-2022-24241 | High | 7.5 | 2022-06-02 | ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the txtFilePath parameter in attachments.awp. |
CVE-2022-24240 | Critical | 9.8 | 2022-06-02 | ACEweb Online Portal 3.5.065 was discovered to contain a SQL injection vulnerability via the criteria parameter in showschedule.awp. |
CVE-2022-24239 | Critical | 9.8 | 2022-06-02 | ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp. |
CVE-2022-24238 | Medium | 6.1 | 2022-06-02 | ACEweb Online Portal 3.5.065 was discovered to contain a cross-site scripting (XSS) vulnerability via the txtNmName1 parameter in person.awp. |
CVE-2022-23237 | Medium | 6.1 | 2022-06-02 | E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redire… |
CVE-2022-23236 | Medium | 4.4 | 2022-06-02 | E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged… |
CVE-2022-22767 | High | 8.8 | 2022-06-02 | Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyx… |
CVE-2022-1968 | High | 7.8 | 2022-06-02 | Use After Free in GitHub repository vim/vim prior to 8.2. |
CVE-2022-1949 | High | 7.5 | 2022-06-02 | An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can… |
CVE-2022-1943 | High | 7.8 | 2022-06-02 | A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation which triggers udf_w… |
CVE-2022-1929 | Medium | 5.9 | 2022-06-02 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to… |
CVE-2022-1797 | Medium | 6.8 | 2022-06-02 | A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controller… |
CVE-2022-1789 | Medium | 6.8 | 2022-06-02 | With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not… |
CVE-2022-1786 | High | 7.8 | 2022-06-02 | A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one task comp… |
CVE-2022-1661 | High | 7.5 | 2022-06-02 | The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files. |
CVE-2022-1660 | Critical | 9.8 | 2022-06-02 | The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication, which may allow an attacker to remote… |
CVE-2022-1652 | High | 7.8 | 2022-06-02 | Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By… |
CVE-2022-1462 | Medium | 6.3 | 2022-06-02 | An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK… |
CVE-2022-1419 | High | 7.8 | 2022-06-02 | The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_cr… |
CVE-2022-1215 | High | 7.8 | 2022-06-02 | A format string vulnerability was found in libinput |
CVE-2022-29236 | Medium | 4.3 | 2022-06-02 | BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc-6, an attacker can circumvent access r… |
CVE-2022-29235 | Medium | 5.3 | 2022-06-02 | BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc-6, an attacker who is able to obtain t… |
CVE-2022-29234 | Medium | 4.3 | 2022-06-02 | BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4.1, an attacker could send messages to a l… |
CVE-2022-29233 | Medium | 4.3 | 2022-06-02 | BigBlueButton is an open source web conferencing system. In BigBlueButton starting with 2.2 but before 2.3.18 and 2.4-rc-1, an attacker can circumvent access c… |
CVE-2022-29232 | Medium | 6.5 | 2022-06-01 | BigBlueButton is an open source web conferencing system. Starting with version 2.2 and prior to versions 2.3.9 and 2.4-beta-1, an attacker can circumvent acces… |
CVE-2022-29169 | High | 7.5 | 2022-06-01 | BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulnerable to regular expr… |
CVE-2022-31022 | Medium | 6.2 | 2022-06-01 | Bleve is a text indexing library for go. Bleve includes HTTP utilities under bleve/http package, that are used by its sample application. These HTTP methods pa… |
CVE-2022-30190 | High | 7.8 | 2022-06-01 | A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully e… |
CVE-2022-30128 | High | 8.3 | 2022-06-01 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-30127 | High | 8.3 | 2022-06-01 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-26905 | Medium | 4.3 | 2022-06-01 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2022-31000 | Low | 2.3 | 2022-06-01 | solidus_backend is the admin interface for the Solidus e-commerce framework. Versions prior to 3.1.6, 3.0.6, and 2.11.16 contain a cross-site request forgery (… |
CVE-2022-24848 | High | 8.8 | 2022-06-01 | DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability affects the `/api/… |
CVE-2022-29098 | High | 8.1 | 2022-06-01 | Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability. An administrator may create an account with no passw… |
CVE-2022-29875 | Critical | 9.8 | 2022-06-01 | A vulnerability has been identified in Biograph Horizon PET/CT Systems (All VJ30 versions < VJ30C-UD01), MAGNETOM Family (NUMARIS X: VA12M, VA12S, VA10B, VA20A… |
CVE-2022-1285 | Medium | 6.5 | 2022-06-01 | Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.8. |
CVE-2022-31015 | Medium | 6.5 | 2022-05-31 | Waitress is a Web Server Gateway Interface server for Python 2 and 3. Waitress versions 2.1.0 and 2.1.1 may terminate early due to a thread closing a socket wh… |
CVE-2022-31013 | Critical | 9.1 | 2022-05-31 | Chat Server is the chat server for Vartalap, an open-source messaging application. Versions 2.3.2 until 2.6.0 suffer from a bug in validating the access token… |
CVE-2022-1947 | Medium | 6.5 | 2022-05-31 | Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3. |
CVE-2022-1893 | Medium | 4.6 | 2022-05-31 | Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository polonel/trudesk prior to 1.2.3. |
CVE-2022-1808 | High | 8.8 | 2022-05-31 | Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3. |
CVE-2022-31011 | High | 7.8 | 2022-05-31 | TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads. Under certain conditions, an attacker can… |
CVE-2022-31007 | Medium | 4.9 | 2022-05-31 | eLabFTW is an electronic lab notebook manager for research teams. Prior to version 4.3.0, a vulnerability allows an authenticated user with an administrator ro… |
CVE-2022-31005 | High | 7.5 | 2022-05-31 | Vapor is an HTTP web framework for Swift. Users of Vapor prior to version 4.60.3 with FileMiddleware enabled are vulnerable to an integer overflow vulnerabilit… |
CVE-2022-31003 | Critical | 9.1 | 2022-05-31 | Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, `rest = rec… |
CVE-2022-31001 | High | 7.5 | 2022-05-31 | Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to Free… |
CVE-2022-31002 | High | 7.5 | 2022-05-31 | Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to Free… |
CVE-2022-29258 | High | 7.4 | 2022-05-31 | XWiki Platform Filter UI provides a generic user interface to convert from a XWiki Filter input stream to an output stream with settings for each stream. Start… |
CVE-2022-29245 | Medium | 6.5 | 2022-05-31 | SSH.NET is a Secure Shell (SSH) library for .NET. In versions 2020.0.0 and 2020.0.1, during an `X25519` key exchange, the client’s private key is generated wit… |
CVE-2022-29243 | Medium | 4.3 | 2022-05-31 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.7 and 23.0.4, missing input-size valida… |
CVE-2022-29220 | Medium | 6.5 | 2022-05-31 | github-action-merge-dependabot is an action that automatically approves and merges dependabot pull requests (PRs). Prior to version 3.2.0, github-action-merge-… |
CVE-2022-22361 | Medium | 6.5 | 2022-05-31 | IBM Business Automation Workflow traditional 21.0.1 through 21.0.3, 20.0.0.1 through 20.0.0.2, 19.0.0.1 through 19.0.0.3, 18.0.0.0 through 18.0.0.1, IBM Busine… |
CVE-2022-23082 | High | 7.5 | 2022-05-31 | In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to… |
CVE-2022-30973 | Medium | 5.5 | 2022-05-31 | We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the StandardsText class, used by… |