2022 CVEs (page 203)
Page 203 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-26728 | Medium | 5.5 | 2022-05-26 | This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A mal… |
CVE-2022-26727 | Medium | 5.5 | 2022-05-26 | This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. A malicious application may… |
CVE-2022-26726 | Medium | 6.5 | 2022-05-26 | This issue was addressed with improved checks. This issue is fixed in Security Update 2022-004 Catalina, watchOS 8.6, macOS Monterey 12.4, macOS Big Sur 11.6.6… |
CVE-2022-26725 | Medium | 5.3 | 2022-05-26 | A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. Photo location information may persist after it is remo… |
CVE-2022-26724 | Medium | 5.5 | 2022-05-26 | An authentication issue was addressed with improved state management. This issue is fixed in tvOS 15.5. A local user may be able to enable iCloud Photos withou… |
CVE-2022-26723 | Critical | 9.8 | 2022-05-26 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. Mounting a maliciousl… |
CVE-2022-26722 | High | 7.8 | 2022-05-26 | A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious a… |
CVE-2022-26721 | High | 7.8 | 2022-05-26 | A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious a… |
CVE-2022-26720 | High | 7.8 | 2022-05-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS… |
CVE-2022-26718 | High | 7.8 | 2022-05-26 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An application may… |
CVE-2022-26715 | High | 7.8 | 2022-05-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS… |
CVE-2022-26714 | High | 7.8 | 2022-05-26 | A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina… |
CVE-2022-26712 | Medium | 5.5 | 2022-05-26 | This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able… |
CVE-2022-26711 | Critical | 9.8 | 2022-05-26 | An integer overflow issue was addressed with improved input validation. This issue is fixed in tvOS 15.5, iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5… |
CVE-2022-26708 | Critical | 9.8 | 2022-05-26 | This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. An attacker may be able to cause unexpected application termination… |
CVE-2022-26706 | Medium | 5.5 | 2022-05-26 | An access issue was addressed with additional sandbox restrictions on third-party applications. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, wat… |
CVE-2022-26704 | High | 7.8 | 2022-05-26 | A validation issue existed in the handling of symlinks and was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.4. An a… |
CVE-2022-26703 | Low | 2.4 | 2022-05-26 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5. A person with physical access to an iOS d… |
CVE-2022-26702 | High | 7.8 | 2022-05-26 | A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 15.5. An application m… |
CVE-2022-26701 | High | 7.5 | 2022-05-26 | A race condition was addressed with improved locking. This issue is fixed in tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An application may be ab… |
CVE-2022-26698 | High | 7.1 | 2022-05-26 | An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS B… |
CVE-2022-26697 | High | 7.1 | 2022-05-26 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS… |
CVE-2022-26694 | Critical | 9.1 | 2022-05-26 | This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. A plug-in may be able to inherit the application's permissions and a… |
CVE-2022-26693 | Critical | 9.1 | 2022-05-26 | This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. A plug-in may be able to inherit the application's permissions and a… |
CVE-2022-31265 | High | 8.8 | 2022-05-26 | The replay feature in the client in Wargaming World of Warships 0.11.4 allows remote attackers to execute code when a user launches a replay from an untrusted… |
CVE-2022-30508 | Medium | 6.5 | 2022-05-26 | DedeCMS v5.7.93 was discovered to contain arbitrary file deletion vulnerability in upload.php via the delete parameter. |
CVE-2022-26691 | Medium | 6.7 | 2022-05-26 | A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5… |
CVE-2022-26690 | Medium | 4.7 | 2022-05-26 | Description: A race condition was addressed with additional validation. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to modi… |
CVE-2022-26688 | Medium | 4.4 | 2022-05-26 | An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, mac… |
CVE-2022-22676 | Medium | 5.5 | 2022-05-26 | An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may… |
CVE-2022-22675 | High | 7.8 | 2022-05-26 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 1… |
CVE-2022-22674 | Medium | 5.5 | 2022-05-26 | An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macO… |
CVE-2022-22673 | High | 7.5 | 2022-05-26 | This issue was addressed with improved checks. This issue is fixed in iOS 15.5 and iPadOS 15.5. Processing a large input may lead to a denial of service. |
CVE-2022-22672 | High | 7.8 | 2022-05-26 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-003 Catalina, macO… |
CVE-2022-22663 | Medium | 5.5 | 2022-05-26 | This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-004 Catali… |
CVE-2022-22662 | Medium | 6.5 | 2022-05-26 | A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Process… |
CVE-2022-22616 | Medium | 5.5 | 2022-05-26 | This issue was addressed with improved checks. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious… |
CVE-2022-30516 | Critical | 9.8 | 2022-05-26 | In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks. |
CVE-2022-30495 | Critical | 9.8 | 2022-05-26 | In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin… |
CVE-2022-30494 | Medium | 5.4 | 2022-05-26 | In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Injection Vulnerability allowing remote attac… |
CVE-2022-30493 | Critical | 9.8 | 2022-05-26 | In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing remote attackers to dum… |
CVE-2022-27777 | Medium | 6.1 | 2022-05-26 | A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attr… |
CVE-2022-22577 | Medium | 6.1 | 2022-05-26 | An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses. |
CVE-2022-22576 | High | 8.1 | 2022-05-26 | An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properl… |
CVE-2022-21831 | Critical | 9.8 | 2022-05-26 | A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments. |
CVE-2022-21827 | High | 7.1 | 2022-05-26 | An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 what could allow an… |
CVE-2022-1899 | Critical | 9.1 | 2022-05-26 | Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. |
CVE-2022-1882 | High | 7.8 | 2022-05-26 | A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free… |
CVE-2022-1261 | Medium | 5.8 | 2022-05-26 | Matrikon, a subsidary of Honeywell Matrikon OPC Server (all versions) is vulnerable to a condition where a low privileged user allowed to connect to the OPC se… |
CVE-2022-30789 | High | 7.8 | 2022-05-26 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22. |
CVE-2022-30788 | High | 7.8 | 2022-05-26 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22. |
CVE-2022-30787 | Medium | 6.7 | 2022-05-26 | An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when using libfuse-lite. |
CVE-2022-30786 | High | 7.8 | 2022-05-26 | A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22. |
CVE-2022-30785 | Medium | 6.7 | 2022-05-26 | A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22… |
CVE-2022-30784 | High | 7.8 | 2022-05-26 | A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22. |
CVE-2022-30783 | Medium | 6.7 | 2022-05-26 | An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the kernel in NTFS-3G through 2021.8.22 whe… |
CVE-2022-30500 | Critical | 9.8 | 2022-05-26 | Jfinal cms 5.1.0 is vulnerable to SQL Injection. |
CVE-2022-30477 | Critical | 9.8 | 2022-05-26 | Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState… |
CVE-2022-30476 | Critical | 9.8 | 2022-05-26 | Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg… |
CVE-2022-30475 | High | 7.5 | 2022-05-26 | Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet r… |
CVE-2022-30474 | Critical | 9.8 | 2022-05-26 | Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo reques… |
CVE-2022-30473 | High | 7.5 | 2022-05-26 | Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set |
CVE-2022-30472 | Critical | 9.8 | 2022-05-26 | Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat |
CVE-2022-29091 | Medium | 5.3 | 2022-05-26 | Dell Unity, Dell UnityVSA, and Dell UnityXT versions prior to 5.2.0.0.5.173 contain a Reflected Cross-Site Scripting Vulnerability in Unisphere GUI. An Unauthe… |
CVE-2022-29082 | Low | 3.7 | 2022-05-26 | Dell EMC NetWorker versions 19.1.x, 19.1.0.x, 19.1.1.x, 19.2.x, 19.2.0.x, 19.2.1.x 19.3.x, 19.3.0.x, 19.4.x, 19.4.0.x, 19.5.x,19.5.0.x, 19.6 and 19.6.0.1 and 1… |
CVE-2022-26865 | Medium | 6.8 | 2022-05-26 | Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the s… |
CVE-2022-26857 | Critical | 9.0 | 2022-05-26 | Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges… |
CVE-2022-24422 | Critical | 9.6 | 2022-05-26 | Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may pote… |
CVE-2022-24418 | High | 7.5 | 2022-05-26 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI… |
CVE-2022-24417 | High | 7.5 | 2022-05-26 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI… |
CVE-2022-24414 | High | 7.6 | 2022-05-26 | Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server… |
CVE-2022-1886 | High | 7.8 | 2022-05-26 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
CVE-2022-29689 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/del. |
CVE-2022-29688 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/hy. |
CVE-2022-29687 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/level_del. |
CVE-2022-29686 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/lists/zhuan. |
CVE-2022-29685 | High | 8.8 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/User/level_sort. |
CVE-2022-29684 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/js_del. |
CVE-2022-29683 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/page_del. |
CVE-2022-29682 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/vod/admin/topic/del. |
CVE-2022-29681 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Links/del. |
CVE-2022-29680 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/zu_del. |
CVE-2022-29676 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan. |
CVE-2022-29670 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/del. |
CVE-2022-29669 | High | 8.8 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/lists/zhuan. |
CVE-2022-29667 | High | 8.8 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy. This vulnerability is exploited via res… |
CVE-2022-29666 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan. |
CVE-2022-29665 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save. |
CVE-2022-29664 | High | 8.8 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/pl_save. |
CVE-2022-29663 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/hy. |
CVE-2022-29662 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save. |
CVE-2022-29661 | High | 7.2 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save. |
CVE-2022-29660 | Critical | 9.8 | 2022-05-26 | CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del. |
CVE-2022-20821 | Medium | 6.5 | 2022-05-26 | A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is running w… |
CVE-2022-20809 | Medium | 4.3 | 2022-05-26 | Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) coul… |
CVE-2022-1664 | Critical | 9.8 | 2022-05-26 | Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerab… |
CVE-2022-29721 | High | 7.5 | 2022-05-26 | 74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resumelist. |
CVE-2022-29720 | High | 7.5 | 2022-05-26 | 74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Download.php. |
CVE-2022-31651 | Medium | 5.5 | 2022-05-25 | In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a. |
CVE-2022-31650 | Medium | 5.5 | 2022-05-25 | In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a. |