2022 CVEs (page 201)
Page 201 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-30423 | Critical | 9.8 | 2022-06-02 | Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information. |
CVE-2022-30352 | Critical | 9.8 | 2022-06-02 | phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "auth_user" parameter in index.php script. |
CVE-2022-30349 | Medium | 6.1 | 2022-06-02 | siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS). |
CVE-2022-30324 | Critical | 9.8 | 2022-06-02 | HashiCorp Nomad and Nomad Enterprise version 0.2.0 up to 1.3.0 were impacted by go-getter vulnerabilities enabling privilege escalation through the artifact st… |
CVE-2022-30277 | Medium | 5.7 | 2022-06-02 | BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, m… |
CVE-2022-30115 | Medium | 4.3 | 2022-06-02 | Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. Thi… |
CVE-2022-30034 | High | 8.6 | 2022-06-02 | Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then acc… |
CVE-2022-29788 | Medium | 6.5 | 2022-06-02 | libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability allows attackers to cause a Denial of Ser… |
CVE-2022-29780 | Medium | 5.5 | 2022-06-02 | Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs_array.c. |
CVE-2022-29779 | Medium | 5.5 | 2022-06-02 | Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c. |
CVE-2022-29777 | Critical | 9.8 | 2022-06-02 | Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component DesktopEditor/fontengine/f… |
CVE-2022-29776 | Critical | 9.8 | 2022-06-02 | Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component DesktopEditor/common/File… |
CVE-2022-29735 | High | 8.8 | 2022-06-02 | Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 allows attackers to execute arbitrary commands via a crafted HTTP request. |
CVE-2022-29734 | Medium | 5.4 | 2022-06-02 | A cross-site scripting (XSS) vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted pay… |
CVE-2022-29733 | Medium | 5.9 | 2022-06-02 | Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive information in cleartext. This vulnerability allo… |
CVE-2022-29732 | Medium | 6.1 | 2022-06-02 | Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting (XSS) vulnerability via the Username parameter… |
CVE-2022-29731 | Medium | 4.3 | 2022-06-02 | An access control issue in ICT Protege GX/WX 2.08 allows attackers to leak SHA1 password hashes of other users. |
CVE-2022-29730 | Critical | 9.8 | 2022-06-02 | USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded credentials for its highest privileged account. The credentials cann… |
CVE-2022-29729 | High | 7.5 | 2022-06-02 | Verizon 4G LTE Network Extender GA4.38 - V0.4.038.2131 utilizes a weak default admin password generation algorithm which generates passwords that are accessibl… |
CVE-2022-29725 | High | 8.8 | 2022-06-02 | An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2022-29712 | Critical | 9.8 | 2022-06-02 | LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param parameters. |
CVE-2022-29711 | Medium | 6.1 | 2022-06-02 | LibreNMS v22.3.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /Table/GraylogController.php. |
CVE-2022-29695 | High | 7.5 | 2022-06-02 | Unicorn Engine v2.0.0-rc7 contains memory leaks caused by an incomplete unicorn engine initialization. |
CVE-2022-29694 | High | 7.5 | 2022-06-02 | Unicorn Engine v2.0.0-rc7 and below was discovered to contain a NULL pointer dereference via qemu_ram_free. |
CVE-2022-29693 | High | 7.5 | 2022-06-02 | Unicorn Engine v2.0.0-rc7 and below was discovered to contain a memory leak via the function uc_close at /my/unicorn/uc.c. |
CVE-2022-29692 | High | 7.8 | 2022-06-02 | Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function. |
CVE-2022-29659 | Critical | 9.8 | 2022-06-02 | Responsive Online Blog v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at single.php. |
CVE-2022-29653 | Medium | 6.1 | 2022-06-02 | OFCMS v1.1.4 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/comn/service/update.json. |
CVE-2022-29648 | Medium | 5.4 | 2022-06-02 | A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request. |
CVE-2022-29647 | High | 8.8 | 2022-06-02 | An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do. |
CVE-2022-29628 | Medium | 5.4 | 2022-06-02 | A cross-site scripting (XSS) vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a craf… |
CVE-2022-29627 | Medium | 4.3 | 2022-06-02 | An insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers. |
CVE-2022-29624 | High | 8.8 | 2022-06-02 | An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2022-29598 | Medium | 6.1 | 2022-06-02 | Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to an reflected Cross-Site Scripting (XSS) vulnerability via RRSWeb/maint/ShowDocument/… |
CVE-2022-29540 | Medium | 6.1 | 2022-06-02 | resi-calltrace in RESI Gemini-Net 4.2 is affected by Multiple XSS issues. Unauthenticated remote attackers can inject arbitrary web script or HTML into an HTTP… |
CVE-2022-29488 | High | 7.8 | 2022-06-02 | The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code. |
CVE-2022-29483 | High | 7.8 | 2022-06-02 | Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confident… |
CVE-2022-28945 | Critical | 9.8 | 2022-06-02 | An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file. |
CVE-2022-28799 | High | 8.8 | 2022-06-02 | The TikTok application before 23.7.3 for Android allows account takeover. A crafted URL (unvalidated deeplink) can force the com.zhiliaoapp.musically WebView t… |
CVE-2022-28702 | Medium | 6.1 | 2022-06-02 | Incorrect Default Permissions vulnerability in ABB e-Design allows attacker to install malicious software executing with SYSTEM permissions violating confident… |
CVE-2022-28690 | High | 7.8 | 2022-06-02 | The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code. |
CVE-2022-28605 | Critical | 9.8 | 2022-06-02 | Hardcoded admin token in SoundBar apps in Linkplay SDK 1.00 allows remote attackers to gain admin privilege access in linkplay antifactory |
CVE-2022-27782 | High | 7.5 | 2022-06-02 | libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previ… |
CVE-2022-27781 | High | 7.5 | 2022-06-02 | libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous fu… |
CVE-2022-27780 | High | 7.5 | 2022-06-02 | The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wron… |
CVE-2022-27779 | Medium | 5.3 | 2022-06-02 | libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cook… |
CVE-2022-27778 | High | 8.1 | 2022-06-02 | A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`. |
CVE-2022-27776 | Medium | 6.5 | 2022-06-02 | A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host… |
CVE-2022-27775 | High | 7.5 | 2022-06-02 | An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a… |
CVE-2022-27774 | Medium | 5.7 | 2022-06-02 | An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract creden… |
CVE-2022-27184 | High | 7.8 | 2022-06-02 | The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code. |
CVE-2022-26978 | Medium | 6.1 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. The os_username para… |
CVE-2022-26977 | Medium | 6.1 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanit… |
CVE-2022-26976 | Medium | 5.4 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanit… |
CVE-2022-26975 | High | 7.5 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication. |
CVE-2022-26974 | Medium | 6.1 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload mechanism. Lack of input sanitization… |
CVE-2022-26973 | Medium | 5.3 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. By tweaking the lic… |
CVE-2022-26972 | Medium | 6.1 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameters are not… |
CVE-2022-26971 | Medium | 5.3 | 2022-06-02 | Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. This upload can be… |
CVE-2022-26491 | Medium | 5.9 | 2022-06-02 | An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The clie… |
CVE-2022-25237 | Critical | 9.8 | 2022-06-02 | Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the RestAPIAuthorizationFil… |
CVE-2022-24967 | Medium | 6.5 | 2022-06-02 | Black Rainbow NIMBUS before 3.7.0 allows stored Cross-site Scripting (XSS). |
CVE-2022-24702 | Critical | 9.8 | 2022-06-02 | An issue was discovered in WinAPRS 2.9.0. A buffer overflow in the VHF KISS TNC component allows a remote attacker to achieve remote code execution via malicio… |
CVE-2022-24701 | High | 7.8 | 2022-06-02 | An issue was discovered in WinAPRS 2.9.0. A buffer overflow in national.txt processing allows a local attacker to cause a denial of service or possibly achieve… |
CVE-2022-24700 | High | 7.5 | 2022-06-02 | An issue was discovered in WinAPRS 2.9.0. A buffer overflow in DIGI address processing for VHF KISS packets allows a remote attacker to cause a denial of servi… |
CVE-2022-24581 | High | 7.5 | 2022-06-02 | ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when uploading a file, a… |
CVE-2022-24241 | High | 7.5 | 2022-06-02 | ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the txtFilePath parameter in attachments.awp. |
CVE-2022-24240 | Critical | 9.8 | 2022-06-02 | ACEweb Online Portal 3.5.065 was discovered to contain a SQL injection vulnerability via the criteria parameter in showschedule.awp. |
CVE-2022-24239 | Critical | 9.8 | 2022-06-02 | ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp. |
CVE-2022-24238 | Medium | 6.1 | 2022-06-02 | ACEweb Online Portal 3.5.065 was discovered to contain a cross-site scripting (XSS) vulnerability via the txtNmName1 parameter in person.awp. |
CVE-2022-23237 | Medium | 6.1 | 2022-06-02 | E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redire… |
CVE-2022-23236 | Medium | 4.4 | 2022-06-02 | E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged… |
CVE-2022-22767 | High | 8.8 | 2022-06-02 | Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyx… |
CVE-2022-1968 | High | 7.8 | 2022-06-02 | Use After Free in GitHub repository vim/vim prior to 8.2. |
CVE-2022-1949 | High | 7.5 | 2022-06-02 | An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can… |
CVE-2022-1943 | High | 7.8 | 2022-06-02 | A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation which triggers udf_w… |
CVE-2022-1929 | Medium | 5.9 | 2022-06-02 | An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to… |
CVE-2022-1797 | Medium | 6.8 | 2022-06-02 | A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controller… |
CVE-2022-1789 | Medium | 6.8 | 2022-06-02 | With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed with CR0.PG=0, the invlpg callback is not… |
CVE-2022-1786 | High | 7.8 | 2022-06-02 | A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_SETUP_IOPOLL with more than one task comp… |
CVE-2022-1661 | High | 7.5 | 2022-06-02 | The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files. |
CVE-2022-1660 | Critical | 9.8 | 2022-06-02 | The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication, which may allow an attacker to remote… |
CVE-2022-1652 | High | 7.8 | 2022-06-02 | Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By… |
CVE-2022-1462 | Medium | 6.3 | 2022-06-02 | An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK… |
CVE-2022-1419 | High | 7.8 | 2022-06-02 | The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_cr… |
CVE-2022-1215 | High | 7.8 | 2022-06-02 | A format string vulnerability was found in libinput |
CVE-2022-29236 | Medium | 4.3 | 2022-06-02 | BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc-6, an attacker can circumvent access r… |
CVE-2022-29235 | Medium | 5.3 | 2022-06-02 | BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc-6, an attacker who is able to obtain t… |
CVE-2022-29234 | Medium | 4.3 | 2022-06-02 | BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4.1, an attacker could send messages to a l… |
CVE-2022-29233 | Medium | 4.3 | 2022-06-02 | BigBlueButton is an open source web conferencing system. In BigBlueButton starting with 2.2 but before 2.3.18 and 2.4-rc-1, an attacker can circumvent access c… |
CVE-2022-29232 | Medium | 6.5 | 2022-06-01 | BigBlueButton is an open source web conferencing system. Starting with version 2.2 and prior to versions 2.3.9 and 2.4-beta-1, an attacker can circumvent acces… |
CVE-2022-29169 | High | 7.5 | 2022-06-01 | BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulnerable to regular expr… |
CVE-2022-31022 | Medium | 6.2 | 2022-06-01 | Bleve is a text indexing library for go. Bleve includes HTTP utilities under bleve/http package, that are used by its sample application. These HTTP methods pa… |
CVE-2022-30190 | High | 7.8 | 2022-06-01 | A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully e… |
CVE-2022-30128 | High | 8.3 | 2022-06-01 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-30127 | High | 8.3 | 2022-06-01 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-26905 | Medium | 4.3 | 2022-06-01 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2022-31000 | Low | 2.3 | 2022-06-01 | solidus_backend is the admin interface for the Solidus e-commerce framework. Versions prior to 3.1.6, 3.0.6, and 2.11.16 contain a cross-site request forgery (… |
CVE-2022-24848 | High | 8.8 | 2022-06-01 | DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability affects the `/api/… |
CVE-2022-29098 | High | 8.1 | 2022-06-01 | Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability. An administrator may create an account with no passw… |