2022 CVEs (page 209)
Page 209 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1553 | Medium | 4.9 | 2022-05-16 | Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vul… |
CVE-2022-1512 | Medium | 4.8 | 2022-05-16 | The ScrollReveal.js Effects WordPress plugin through 1.2 does not sanitise and escape its settings, which could allow high privilege users to perform Cross-Sit… |
CVE-2022-1465 | Medium | 6.1 | 2022-05-16 | The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.9 does not sanitise and escape a parameter before outputting it back in an attribute via an… |
CVE-2022-1455 | Medium | 6.1 | 2022-05-16 | The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflect… |
CVE-2022-1436 | Medium | 6.1 | 2022-05-16 | The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargo_tracking_number parameter before outputting it back in the pag… |
CVE-2022-1435 | Medium | 4.8 | 2022-05-16 | The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitize and escapes some of its settings, which could allow high privilege users such as admi… |
CVE-2022-1425 | Medium | 4.3 | 2022-05-16 | The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not validate that the message_id of the wpqa_mes… |
CVE-2022-1418 | Medium | 6.1 | 2022-05-16 | The Social Stickers WordPress plugin through 2.2.9 does not have CSRF checks in place when updating its Social Network settings, and does not escape some of th… |
CVE-2022-1409 | High | 7.2 | 2022-05-16 | The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not properly validate images, allowing high privilege users such as administrators… |
CVE-2022-1408 | Medium | 4.8 | 2022-05-16 | The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not escape various settings before outputting them in attributes, which could allo… |
CVE-2022-1407 | Medium | 6.5 | 2022-05-16 | The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not have CSRF check in place when adding a tracking campaign, and does not escape… |
CVE-2022-1398 | Medium | 6.5 | 2022-05-16 | The External Media without Import WordPress plugin through 1.1.2 does not have any authorisation and does to ensure that medias added via URLs are external med… |
CVE-2022-1393 | Medium | 5.4 | 2022-05-16 | The WP Subtitle WordPress plugin before 3.4.1 adds a subtitle field and provides a shortcode to display it via [wp_subtitle]. The subtitle is stored as a custo… |
CVE-2022-1386 | Critical | 9.8 | 2022-05-16 | The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary… |
CVE-2022-1349 | Medium | 4.3 | 2022-05-16 | The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not validate that the value passed to the image_… |
CVE-2022-1334 | Medium | 4.8 | 2022-05-16 | The WP YouTube Live WordPress plugin before 1.8.3 does not validate, sanitise and escape various of its settings, which could allow high privilege users such a… |
CVE-2022-1267 | Medium | 6.1 | 2022-05-16 | The BMI BMR Calculator WordPress plugin through 1.3 does not sanitise and escape arbitrary POST data before outputting it back in the response, leading to a Re… |
CVE-2022-1265 | Medium | 4.8 | 2022-05-16 | The BulletProof Security WordPress plugin before 6.1 does not sanitize and escape some of its CAPTCHA settings, which could allow high-privileged users to perf… |
CVE-2022-1217 | Medium | 6.1 | 2022-05-16 | The Custom TinyMCE Shortcode Button WordPress plugin through 1.1 does not sanitise and escape the PHP_SELF variable before outputting it back in an attribute i… |
CVE-2022-1216 | Medium | 6.1 | 2022-05-16 | The Advanced Image Sitemap WordPress plugin through 1.2 does not sanitise and escape the PHP_SELF PHP variable before outputting it back in an attribute in an… |
CVE-2022-1182 | High | 8.8 | 2022-05-16 | The Visual Slide Box Builder WordPress plugin through 3.2.9 does not sanitise and escape various parameters before using them in SQL statements via some of its… |
CVE-2022-1103 | High | 8.8 | 2022-05-16 | The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to R… |
CVE-2022-1089 | Medium | 4.8 | 2022-05-16 | The Bulk Edit and Create User Profiles WordPress plugin before 1.5.14 does not sanitise and escape the Users Login, which could allow high privilege users such… |
CVE-2022-1062 | Medium | 4.8 | 2022-05-16 | The th23 Social WordPress plugin through 1.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfo… |
CVE-2022-1051 | Medium | 5.4 | 2022-05-16 | The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not sanitise and escape the city, phone or profi… |
CVE-2022-0873 | Medium | 4.8 | 2022-05-16 | The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise and escape the Album's name before outputting it in pages/posts with a media embed, w… |
CVE-2022-0867 | Critical | 9.8 | 2022-05-16 | The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL stateme… |
CVE-2022-0578 | Medium | 6.5 | 2022-05-16 | Code Injection in GitHub repository publify/publify prior to 9.2.8. |
CVE-2022-0574 | Medium | 6.5 | 2022-05-16 | Improper Access Control in GitHub repository publify/publify prior to 9.2.8. |
CVE-2022-0573 | High | 8.8 | 2022-05-16 | JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege Escalation and Remote… |
CVE-2022-30777 | Medium | 6.1 | 2022-05-16 | Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter. |
CVE-2022-30776 | Medium | 6.1 | 2022-05-16 | atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter. |
CVE-2022-30013 | Medium | 5.4 | 2022-05-16 | A stored cross-site scripting (XSS) vulnerability in the upload function of totaljs CMS 3.4.5 allows attackers to execute arbitrary web scripts via a JavaScrip… |
CVE-2022-29623 | High | 7.8 | 2022-05-16 | An arbitrary file upload vulnerability in the file upload module of Express Connect-Multiparty 2.2.0 allows attackers to execute arbitrary code via a crafted P… |
CVE-2022-29622 | Critical | 9.8 | 2022-05-16 | An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted filename. NOTE: some third parties dispute… |
CVE-2022-29354 | Critical | 9.8 | 2022-05-16 | An arbitrary file upload vulnerability in the file upload module of Keystone v4.2.1 allows attackers to execute arbitrary code via a crafted file. |
CVE-2022-29353 | Critical | 9.8 | 2022-05-16 | An arbitrary file upload vulnerability in the file upload module of Graphql-upload v13.0.0 allows attackers to execute arbitrary code via a crafted filename. |
CVE-2022-29351 | Critical | 9.8 | 2022-05-16 | An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a crafted SVG file. Note… |
CVE-2022-29017 | Medium | 5.5 | 2022-05-16 | Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x86_64/multiarch/strlen-avx2.S. |
CVE-2022-30012 | High | 7.5 | 2022-05-16 | In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obt… |
CVE-2022-30011 | Critical | 9.8 | 2022-05-16 | In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability. |
CVE-2022-30782 | High | 7.5 | 2022-05-16 | Openmoney API through 2020-06-29 uses the JavaScript Math.random function, which does not provide cryptographically secure random numbers. |
CVE-2022-29588 | High | 7.5 | 2022-05-16 | Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files. |
CVE-2022-29587 | Medium | 4.0 | 2022-05-16 | Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges. |
CVE-2022-29586 | High | 7.4 | 2022-05-16 | Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from t… |
CVE-2022-30781 | High | 7.5 | 2022-05-16 | Gitea before 1.16.7 does not escape git fetch remote. |
CVE-2022-30775 | Medium | 5.5 | 2022-05-16 | xpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by (for example) sending a crafted PDF document to the pdftoppm b… |
CVE-2022-30770 | Medium | 6.1 | 2022-05-16 | Terminalfour versions 8.3.7, 8.3.x versions prior to version 8.3.8 and r 8.2.x versions prior to version 8.2.18.5 or 8.2.18.2.1 are vulnerable to (XSS) vulnera… |
CVE-2022-30767 | Critical | 9.8 | 2022-05-16 | nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer o… |
CVE-2022-30763 | High | 7.5 | 2022-05-16 | Janet before 1.22.0 mishandles arrays. |
CVE-2022-30765 | Critical | 9.8 | 2022-05-16 | Calibre-Web before 0.6.18 allows user table SQL Injection. |
CVE-2022-30049 | High | 7.5 | 2022-05-15 | A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter. |
CVE-2022-28930 | Critical | 9.8 | 2022-05-15 | ERP-Pro v3.7.5 was discovered to contain a SQL injection vulnerability via the component /base/SysEveMenuAuthPointMapper.xml.. |
CVE-2022-28937 | High | 7.5 | 2022-05-15 | FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via an invalid proposal with an invalid header, will cause normal nodes… |
CVE-2022-28936 | High | 7.5 | 2022-05-15 | FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node can trigger an integer overflow and cause a Denial of Service (DoS) via… |
CVE-2022-28929 | Critical | 9.8 | 2022-05-15 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the delid parameter at viewtreatmentrecord.php. |
CVE-2022-30708 | High | 8.8 | 2022-05-15 | Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created (i.e., not created in Virtualmin or… |
CVE-2022-1379 | Critical | 9.1 | 2022-05-14 | URL Restriction Bypass in GitHub repository plantuml/plantuml prior to V1.2022.5. An attacker can abuse this to bypass URL restrictions that are imposed by the… |
CVE-2022-24831 | High | 8.3 | 2022-05-14 | OpenClinica is an open source software for Electronic Data Capture (EDC) and Clinical Data Management (CDM). Versions prior to 3.16.1 are vulnerable to SQL inj… |
CVE-2022-24830 | Medium | 6.5 | 2022-05-14 | OpenClinica is an open source software for Electronic Data Capture (EDC) and Clinical Data Management (CDM). OpenClinica prior to version 3.16 is vulnerable to… |
CVE-2022-25865 | High | 8.1 | 2022-05-13 | The package workspace-tools before 0.18.4 are vulnerable to Command Injection via git argument injection. When calling the fetchRemoteBranch(remote: string, re… |
CVE-2022-25862 | Medium | 4.0 | 2022-05-13 | This affects the package sds from 0.0.0. The library could be tricked into adding or modifying properties of the Object.prototype by abusing the set function l… |
CVE-2022-22282 | Critical | 9.8 | 2022-05-13 | SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to a resource using HTTP connections from an unauthori… |
CVE-2022-22281 | High | 7.8 | 2022-05-13 | A buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64 bit) in 10.2.322 and earlier versions, allows an attacker to pot… |
CVE-2022-21190 | High | 7.5 | 2022-05-13 | This affects the package convict before 6.2.3. This is a bypass of [CVE-2022-22143](https://security.snyk.io/vuln/SNYK-JS-CONVICT-2340604). The [fix](https://g… |
CVE-2022-1702 | Medium | 6.1 | 2022-05-13 | SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that specifies a link to an external site and uses t… |
CVE-2022-1701 | High | 7.5 | 2022-05-13 | SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data. |
CVE-2022-22393 | Medium | 6.5 | 2022-05-13 | IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5 , with the adminCenter-1.0 feature configured, could allow an authenticated user to issue a… |
CVE-2022-22325 | Medium | 5.5 | 2022-05-13 | IBM MQ (IBM MQ for HPE NonStop 8.1.0) can inadvertently disclose sensitive information under certain circumstances to a local user from a stack trace. IBM X-Fo… |
CVE-2022-1715 | Critical | 9.8 | 2022-05-13 | Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07. |
CVE-2022-29433 | Medium | 4.1 | 2022-05-13 | Authenticated (contributor or higher role) Cross-Site Scripting (XSS) vulnerability in Donations plugin <= 1.8 on WordPress. |
CVE-2022-22252 | High | 7.5 | 2022-05-13 | The DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect system stability. |
CVE-2022-30417 | High | 7.2 | 2022-05-13 | Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via ctpms/admin/?page=user/manage_user&id=. |
CVE-2022-30415 | High | 7.2 | 2022-05-13 | Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/applications/update_status.php?id=. |
CVE-2022-30414 | High | 7.2 | 2022-05-13 | Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=applications/view_application&id=. |
CVE-2022-30413 | Critical | 9.8 | 2022-05-13 | Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=delete_application. |
CVE-2022-30412 | High | 7.2 | 2022-05-13 | Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/individuals/update_status.php?id=. |
CVE-2022-30411 | High | 7.2 | 2022-05-13 | Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=individuals/view_individual&id=. |
CVE-2022-30408 | Medium | 6.5 | 2022-05-13 | Covid-19 Travel Pass Management System v1.0 is vulnerable to file deletion via /ctpms/classes/Master.php?f=delete_img. |
CVE-2022-30407 | Critical | 9.8 | 2022-05-13 | Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manage_user.php?id=. |
CVE-2022-30404 | High | 7.2 | 2022-05-13 | College Management System v1.0 is vulnerable to SQL Injection via /College_Management_System/admin/display-teacher.php?teacher_id=. |
CVE-2022-30403 | High | 7.2 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=products&c=. |
CVE-2022-30402 | High | 7.2 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_sub_category&id=. |
CVE-2022-30401 | High | 7.2 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=view_product&id=. |
CVE-2022-30400 | High | 7.2 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/orders/view_order.php?view=user&id=. |
CVE-2022-30399 | High | 7.2 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_category&id=. |
CVE-2022-30398 | High | 7.2 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=orders/view_order&id=. |
CVE-2022-30396 | High | 7.2 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=inventory/manage_inventory&id=. |
CVE-2022-30395 | Critical | 9.8 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart. |
CVE-2022-30393 | High | 7.2 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=product/manage_product&id=. |
CVE-2022-30392 | Critical | 9.8 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_sub_category. |
CVE-2022-30391 | Critical | 9.8 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_category. |
CVE-2022-30387 | Critical | 9.8 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=pay_order. |
CVE-2022-30386 | Critical | 9.8 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured. |
CVE-2022-30385 | Critical | 9.8 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_order. |
CVE-2022-30384 | Critical | 9.8 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_inventory. |
CVE-2022-30381 | Medium | 6.5 | 2022-05-13 | Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggers_merch/classes/Master.php?f=delete_img. |
CVE-2022-29796 | High | 7.5 | 2022-05-13 | The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI servi… |
CVE-2022-29795 | High | 7.5 | 2022-05-13 | The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability. |
CVE-2022-29794 | Critical | 9.8 | 2022-05-13 | The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, an… |