2022 CVEs (page 210)
Page 210 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29793 | High | 7.5 | 2022-05-13 | There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application availability. |
CVE-2022-29792 | High | 7.5 | 2022-05-13 | The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality. |
CVE-2022-29791 | High | 7.5 | 2022-05-13 | The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI servi… |
CVE-2022-29790 | High | 7.5 | 2022-05-13 | The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service ex… |
CVE-2022-29789 | High | 7.5 | 2022-05-13 | The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI s… |
CVE-2022-28830 | Medium | 5.5 | 2022-05-13 | Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2022-28829 | High | 7.8 | 2022-05-13 | Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary cod… |
CVE-2022-28828 | High | 7.8 | 2022-05-13 | Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary cod… |
CVE-2022-28827 | High | 7.8 | 2022-05-13 | Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary cod… |
CVE-2022-28826 | High | 7.8 | 2022-05-13 | Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary cod… |
CVE-2022-28825 | High | 7.8 | 2022-05-13 | Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary cod… |
CVE-2022-28824 | High | 7.8 | 2022-05-13 | Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by a Use-after-free vulnerability that could result in arbitrary code exec… |
CVE-2022-28823 | High | 7.8 | 2022-05-13 | Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by a Use-after-free vulnerability that could result in arbitrary code exec… |
CVE-2022-28822 | High | 7.8 | 2022-05-13 | Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary cod… |
CVE-2022-28821 | High | 7.8 | 2022-05-13 | Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary cod… |
CVE-2022-27247 | Medium | 5.3 | 2022-05-13 | onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer (e.g., data of birth, full add… |
CVE-2022-25591 | Critical | 9.1 | 2022-05-13 | BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root di… |
CVE-2022-22261 | High | 7.5 | 2022-05-13 | The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI servi… |
CVE-2022-22260 | Critical | 9.1 | 2022-05-13 | The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability. |
CVE-2022-1714 | High | 7.1 | 2022-05-13 | Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically… |
CVE-2022-30379 | High | 7.2 | 2022-05-13 | Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manage_user&id=. |
CVE-2022-30378 | High | 7.2 | 2022-05-13 | Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=posts/view_post&id=. |
CVE-2022-30376 | High | 7.2 | 2022-05-13 | Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/members/view_member.php?id=. |
CVE-2022-30375 | Medium | 6.5 | 2022-05-13 | Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=delete_img. |
CVE-2022-30367 | Medium | 6.5 | 2022-05-13 | Air Cargo Management System v1.0 is vulnerable to file deletion via /acms/classes/Master.php?f=delete_img. |
CVE-2022-29854 | Medium | 6.8 | 2022-05-13 | A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, could allow a unauthenticated attacker with physica… |
CVE-2022-30489 | Medium | 6.1 | 2022-05-13 | WAVLINK WN535 G3 was discovered to contain a cross-site scripting (XSS) vulnerability via the hostname parameter at /cgi-bin/login.cgi. |
CVE-2022-30374 | High | 7.2 | 2022-05-13 | Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/?page=transactions/manage_transaction&id=. |
CVE-2022-30373 | High | 7.2 | 2022-05-13 | Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/manage_cargo_type.php?id=. |
CVE-2022-30372 | High | 7.2 | 2022-05-13 | Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo. |
CVE-2022-30371 | High | 7.2 | 2022-05-13 | Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/view_cargo_type.php?id=. |
CVE-2022-30370 | Critical | 9.8 | 2022-05-13 | Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo_type. |
CVE-2022-29383 | Critical | 9.8 | 2022-05-13 | NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platfo… |
CVE-2022-25762 | High | 8.6 | 2022-05-13 | If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomca… |
CVE-2022-29218 | High | 7.7 | 2022-05-13 | RubyGems is a package registry used to supply software for the Ruby language ecosystem. An ordering mistake in the code that accepts gem uploads allowed some g… |
CVE-2022-27134 | High | 7.5 | 2022-05-13 | EOSIO batdappboomx v327c04cf has an Access-control vulnerability in the `transfer` function of the smart contract which allows remote attackers to win the cryp… |
CVE-2022-23742 | High | 7.8 | 2022-05-12 | Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacke… |
CVE-2022-23166 | Medium | 6.1 | 2022-05-12 | Sysaid – Sysaid Local File Inclusion (LFI) – An unauthenticated attacker can access to the system by accessing to "/lib/tinymce/examples/index.html" path. in t… |
CVE-2022-23165 | Medium | 5.5 | 2022-05-12 | Sysaid – Sysaid 14.2.0 Reflected Cross-Site Scripting (XSS) - The parameter "helpPageName" used by the page "/help/treecontent.jsp" suffers from a Reflected Cr… |
CVE-2022-23139 | High | 8.8 | 2022-05-12 | ZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder permission viewed by sftp is 666, which is inconsistent with the ac… |
CVE-2022-22971 | Medium | 6.5 | 2022-05-12 | In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denia… |
CVE-2022-22970 | Medium | 5.3 | 2022-05-12 | In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if the… |
CVE-2022-22798 | Medium | 6.8 | 2022-05-12 | Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control v20.4.74 b10, v22.1.20 b62, v22.1.30 b49 - An attacker needs to log in as a guest after that… |
CVE-2022-22797 | Medium | 4.6 | 2022-05-12 | Sysaid – sysaid Open Redirect - An Attacker can change the redirect link at the parameter "redirectURL" from"GET" request from the url location: /CommunitySSOR… |
CVE-2022-22796 | High | 7.0 | 2022-05-12 | Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click… |
CVE-2022-29369 | High | 7.5 | 2022-05-12 | Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njs_lvlhsh_bucket_find at njs_lvlhsh.c. |
CVE-2022-29368 | High | 7.1 | 2022-05-12 | Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Getter at /moddable/xs/… |
CVE-2022-28819 | High | 7.8 | 2022-05-12 | Adobe Character Animator versions 4.4.2 (and earlier) and 22.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrar… |
CVE-2022-28818 | Medium | 6.1 | 2022-05-12 | ColdFusion versions CF2021U3 (and earlier) and CF2018U13 are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convin… |
CVE-2022-29363 | Critical | 9.8 | 2022-05-12 | Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function in login_control.php. This vulnerability allows attackers to g… |
CVE-2022-27172 | High | 8.8 | 2022-05-12 | A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted network request c… |
CVE-2022-26782 | High | 8.8 | 2022-05-12 | Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-craf… |
CVE-2022-26781 | High | 8.8 | 2022-05-12 | Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-craf… |
CVE-2022-26780 | High | 8.8 | 2022-05-12 | Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-craf… |
CVE-2022-26518 | High | 8.8 | 2022-05-12 | An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of n… |
CVE-2022-26510 | Medium | 6.5 | 2022-05-12 | A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted HTTP request can… |
CVE-2022-26420 | High | 8.8 | 2022-05-12 | An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of… |
CVE-2022-26085 | High | 8.8 | 2022-05-12 | An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can… |
CVE-2022-26075 | High | 8.8 | 2022-05-12 | An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted series of… |
CVE-2022-26042 | High | 8.8 | 2022-05-12 | An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request c… |
CVE-2022-26020 | Medium | 6.5 | 2022-05-12 | An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted netw… |
CVE-2022-26007 | High | 7.2 | 2022-05-12 | An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request ca… |
CVE-2022-26002 | High | 7.2 | 2022-05-12 | A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network requ… |
CVE-2022-25995 | High | 8.8 | 2022-05-12 | A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted network request can lea… |
CVE-2022-25172 | Medium | 6.1 | 2022-05-12 | An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4. The session cookie miss… |
CVE-2022-24910 | Medium | 6.7 | 2022-05-12 | A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lea… |
CVE-2022-24382 | Medium | 6.7 | 2022-05-12 | Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2022-24297 | Medium | 6.7 | 2022-05-12 | Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2022-22139 | High | 7.3 | 2022-05-12 | Uncontrolled search path in the Intel(R) XTU software before version 7.3.0.33 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2022-21809 | High | 8.1 | 2022-05-12 | A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arb… |
CVE-2022-21238 | Medium | 6.1 | 2022-05-12 | A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lea… |
CVE-2022-21237 | Medium | 6.7 | 2022-05-12 | Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2022-21182 | High | 8.8 | 2022-05-12 | A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP re… |
CVE-2022-21151 | Medium | 5.5 | 2022-05-12 | Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable inf… |
CVE-2022-21147 | Medium | 5.5 | 2022-05-12 | An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this vulnerabili… |
CVE-2022-21136 | Medium | 5.5 | 2022-05-12 | Improper input validation for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable denial of service via local access. |
CVE-2022-21131 | Medium | 5.5 | 2022-05-12 | Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. |
CVE-2022-21128 | High | 7.8 | 2022-05-12 | Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation… |
CVE-2022-0005 | Low | 2.4 | 2022-05-12 | Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enab… |
CVE-2022-0004 | Medium | 6.8 | 2022-05-12 | Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an… |
CVE-2022-30002 | High | 7.2 | 2022-05-12 | Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editNominee.php?nominee_id=. |
CVE-2022-30001 | Critical | 9.8 | 2022-05-12 | Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editAgent.php?agent_id=. |
CVE-2022-30000 | Critical | 9.8 | 2022-05-12 | Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editPayment.php?recipt_no=. |
CVE-2022-29999 | Critical | 9.8 | 2022-05-12 | Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editClient.php?client_id=. |
CVE-2022-29998 | Critical | 9.8 | 2022-05-12 | Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/clientStatus.php?client_id=. |
CVE-2022-29746 | Critical | 9.8 | 2022-05-12 | Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete. |
CVE-2022-29745 | Critical | 9.8 | 2022-05-12 | Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_transaction. |
CVE-2022-29741 | Critical | 9.8 | 2022-05-12 | Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_fee. |
CVE-2022-29739 | Critical | 9.8 | 2022-05-12 | Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manage_user&id=. |
CVE-2022-29738 | Critical | 9.8 | 2022-05-12 | Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id. |
CVE-2022-29307 | Critical | 9.8 | 2022-05-12 | IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/lang_model.php. |
CVE-2022-29306 | Critical | 9.8 | 2022-05-12 | IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in application/models/article_model.php. |
CVE-2022-29303 | Critical | 9.8 | 2022-05-12 | SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php. |
CVE-2022-29302 | Medium | 5.5 | 2022-05-12 | SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/Solar_Ftp.php. |
CVE-2022-29298 | High | 7.5 | 2022-05-12 | SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal. |
CVE-2022-28920 | Medium | 4.8 | 2022-05-12 | Tieba-Cloud-Sign v4.9 was discovered to contain a cross-site scripting (XSS) vulnerability via the function strip_tags. |
CVE-2022-28919 | Medium | 6.1 | 2022-05-12 | HTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS) vulnerability via the function _generateFilename. |
CVE-2022-22413 | Critical | 9.8 | 2022-05-12 | IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which… |
CVE-2022-1699 | High | 7.5 | 2022-05-12 | Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which ge… |
CVE-2022-1698 | High | 7.5 | 2022-05-12 | Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS att… |