2022 CVEs (page 211)
Page 211 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-30279 | High | 7.5 | 2022-05-12 | An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8. The event logging of the ASQ sofbus lacbus plugin triggers the dereferencing… |
CVE-2022-29995 | Critical | 9.8 | 2022-05-12 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=. |
CVE-2022-29994 | Critical | 9.8 | 2022-05-12 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/manage_facility&id=. |
CVE-2022-29993 | Critical | 9.8 | 2022-05-12 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/view_booking.php?id=. |
CVE-2022-29992 | Critical | 9.8 | 2022-05-12 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/manage_category.php?id=. |
CVE-2022-29990 | Critical | 9.8 | 2022-05-12 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/view_category.php?id=. |
CVE-2022-29989 | Critical | 9.8 | 2022-05-12 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking. |
CVE-2022-29988 | Critical | 9.8 | 2022-05-12 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete. |
CVE-2022-29987 | Critical | 9.8 | 2022-05-12 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=. |
CVE-2022-29986 | Critical | 9.8 | 2022-05-12 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility. |
CVE-2022-29985 | Critical | 9.8 | 2022-05-12 | Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category. |
CVE-2022-29984 | Critical | 9.8 | 2022-05-12 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=. |
CVE-2022-29983 | Critical | 9.8 | 2022-05-12 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=. |
CVE-2022-29982 | Critical | 9.8 | 2022-05-12 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=. |
CVE-2022-29981 | Critical | 9.8 | 2022-05-12 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete. |
CVE-2022-29980 | Critical | 9.8 | 2022-05-12 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=. |
CVE-2022-29979 | Critical | 9.8 | 2022-05-12 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation. |
CVE-2022-29751 | Critical | 9.8 | 2022-05-12 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client. |
CVE-2022-29750 | Critical | 9.8 | 2022-05-12 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_service. |
CVE-2022-29749 | Critical | 9.8 | 2022-05-12 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_invoice. |
CVE-2022-29748 | Critical | 9.8 | 2022-05-12 | Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manage_client&id=. |
CVE-2022-29747 | Critical | 9.8 | 2022-05-12 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manage_invoice&id= // Leak place ---> id. |
CVE-2022-29539 | Critical | 9.8 | 2022-05-12 | resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Command Injection. It does not properly check the parameters sent as input before they are processed on… |
CVE-2022-29538 | Medium | 5.3 | 2022-05-12 | RESI Gemini-Net Web 4.2 is affected by Improper Access Control in authorization logic. An unauthenticated user is able to access some critical resources. |
CVE-2022-30525 | Critical | 9.8 | 2022-05-12 | A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5… |
CVE-2022-28873 | Medium | 4.3 | 2022-05-12 | A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which… |
CVE-2022-28872 | Medium | 4.3 | 2022-05-12 | A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the add… |
CVE-2022-1674 | Medium | 5.5 | 2022-05-12 | NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function v… |
CVE-2022-1650 | High | 8.1 | 2022-05-12 | Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2. |
CVE-2022-29930 | High | 8.7 | 2022-05-12 | SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.0.1. |
CVE-2022-29929 | Low | 3.7 | 2022-05-12 | In JetBrains TeamCity before 2022.04 potential XSS via Referrer header was possible |
CVE-2022-29928 | Medium | 4.4 | 2022-05-12 | In JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possible |
CVE-2022-29927 | Medium | 4.6 | 2022-05-12 | In JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possible |
CVE-2022-1682 | Medium | 6.1 | 2022-05-12 | Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account… |
CVE-2022-29885 | High | 7.5 | 2022-05-12 | The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly… |
CVE-2022-1681 | High | 7.2 | 2022-05-12 | Authentication Bypass Using an Alternate Path or Channel in GitHub repository requarks/wiki prior to 2.5.281. User can get root user permissions |
CVE-2022-1044 | Medium | 6.5 | 2022-05-12 | Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1. |
CVE-2022-30594 | High | 7.8 | 2022-05-12 | The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SU… |
CVE-2022-30592 | Critical | 9.8 | 2022-05-11 | liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY. |
CVE-2022-30557 | High | 7.5 | 2022-05-11 | Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash because of Unsigned32 mishandling during JavaScript execution. |
CVE-2022-29855 | Medium | 6.8 | 2022-05-11 | Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP pho… |
CVE-2022-29596 | Critical | 9.8 | 2022-05-11 | MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../wi… |
CVE-2022-30451 | High | 8.8 | 2022-05-11 | An authenticated user could execute code via a SQLi vulnerability in waimairenCMS before version 9.1. |
CVE-2022-30450 | Critical | 9.8 | 2022-05-11 | A Remote Code Execution (RCE) vulnerability exists in waimairen 9.1 via wx.php |
CVE-2022-30449 | Critical | 9.8 | 2022-05-11 | Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in room.php. |
CVE-2022-30448 | Critical | 9.8 | 2022-05-11 | Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a File upload vulnerability in treatmentrecord.php. |
CVE-2022-30063 | Critical | 9.8 | 2022-05-11 | ftcms <=2.1 was discovered to be vulnerable to code execution attacks . |
CVE-2022-30453 | Critical | 9.8 | 2022-05-11 | ShopWind <= 3.4.2 has a RCE vulnerability in Database.php |
CVE-2022-30452 | High | 7.2 | 2022-05-11 | ShopWind <= v3.4.2 has a Sql injection vulnerability in Database.php |
CVE-2022-30062 | Medium | 6.5 | 2022-05-11 | ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php |
CVE-2022-30061 | Medium | 6.5 | 2022-05-11 | ftcms <=2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp. |
CVE-2022-30060 | High | 8.8 | 2022-05-11 | ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php |
CVE-2022-30059 | Medium | 6.5 | 2022-05-11 | Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php. |
CVE-2022-30058 | Medium | 5.3 | 2022-05-11 | Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Download vulnerability via the neirong parameter at \backend\controllers\DbController.php. |
CVE-2022-30057 | Medium | 5.4 | 2022-05-11 | Shopwind <=v3.4.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability. |
CVE-2022-30048 | Critical | 9.8 | 2022-05-11 | Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter. |
CVE-2022-30047 | Critical | 9.8 | 2022-05-11 | Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter. |
CVE-2022-30040 | High | 7.5 | 2022-05-11 | Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file syst… |
CVE-2022-29848 | Medium | 6.5 | 2022-05-11 | In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow the… |
CVE-2022-29847 | High | 7.5 | 2022-05-11 | In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would all… |
CVE-2022-29846 | Medium | 5.3 | 2022-05-11 | In Progress Ipswitch WhatsUp Gold 16.1 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to obtain the WhatsUp Gold installation seria… |
CVE-2022-29845 | Medium | 6.5 | 2022-05-11 | In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow the… |
CVE-2022-28838 | High | 7.8 | 2022-05-11 | Acrobat Acrobat Pro DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerabi… |
CVE-2022-28837 | Medium | 5.5 | 2022-05-11 | Acrobat Pro DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability tha… |
CVE-2022-28269 | Low | 3.3 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28268 | Low | 3.3 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerab… |
CVE-2022-28267 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28266 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28265 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28264 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28263 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28262 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28261 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28260 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28259 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28258 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28257 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28256 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28255 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28254 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28253 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28252 | Low | 3.3 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28251 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28250 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28249 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28248 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28247 | Medium | 6.7 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an uncontrolled search path vul… |
CVE-2022-28246 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28245 | Medium | 5.5 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28244 | Medium | 6.3 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a violation of secure design pr… |
CVE-2022-28243 | High | 7.8 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28242 | High | 7.8 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28241 | High | 7.8 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28240 | High | 7.8 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28239 | High | 7.8 | 2022-05-11 | Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-28238 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28237 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28236 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnera… |
CVE-2022-28235 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-28234 | High | 7.8 | 2022-05-11 | Acrobat Reader DC versions 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) is affected by a heap-based buffer overflow vu… |