2022 CVEs (page 213)
Page 213 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29120 | Medium | 6.5 | 2022-05-10 | Windows Clustered Shared Volume Information Disclosure Vulnerability |
CVE-2022-29117 | High | 7.5 | 2022-05-10 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2022-29116 | Medium | 4.7 | 2022-05-10 | Windows Kernel Information Disclosure Vulnerability |
CVE-2022-29115 | High | 7.8 | 2022-05-10 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2022-29114 | Medium | 5.5 | 2022-05-10 | Windows Print Spooler Information Disclosure Vulnerability |
CVE-2022-29113 | High | 7.8 | 2022-05-10 | Windows Digital Media Receiver Elevation of Privilege Vulnerability |
CVE-2022-29112 | Medium | 6.5 | 2022-05-10 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2022-29110 | High | 7.8 | 2022-05-10 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2022-29109 | High | 7.8 | 2022-05-10 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2022-29108 | High | 8.8 | 2022-05-10 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-29107 | Medium | 5.5 | 2022-05-10 | Microsoft Office Security Feature Bypass Vulnerability |
CVE-2022-29106 | High | 7.0 | 2022-05-10 | Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability |
CVE-2022-29105 | High | 7.8 | 2022-05-10 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability |
CVE-2022-29104 | High | 7.8 | 2022-05-10 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-29103 | High | 7.8 | 2022-05-10 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
CVE-2022-29102 | Medium | 5.5 | 2022-05-10 | Windows Failover Cluster Information Disclosure Vulnerability |
CVE-2022-28601 | Medium | 6.5 | 2022-05-10 | A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number us… |
CVE-2022-26940 | Medium | 6.5 | 2022-05-10 | Remote Desktop Protocol Client Information Disclosure Vulnerability |
CVE-2022-26939 | High | 7.0 | 2022-05-10 | Storage Spaces Direct Elevation of Privilege Vulnerability |
CVE-2022-26938 | High | 7.0 | 2022-05-10 | Storage Spaces Direct Elevation of Privilege Vulnerability |
CVE-2022-26937 | Critical | 9.8 | 2022-05-10 | Windows Network File System Remote Code Execution Vulnerability |
CVE-2022-26936 | Medium | 6.5 | 2022-05-10 | Windows Server Service Information Disclosure Vulnerability |
CVE-2022-26935 | Medium | 6.5 | 2022-05-10 | Windows WLAN AutoConfig Service Information Disclosure Vulnerability |
CVE-2022-26934 | Medium | 6.5 | 2022-05-10 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2022-26933 | Medium | 5.5 | 2022-05-10 | Windows NTFS Information Disclosure Vulnerability |
CVE-2022-26932 | High | 8.2 | 2022-05-10 | Storage Spaces Direct Elevation of Privilege Vulnerability |
CVE-2022-26931 | High | 7.5 | 2022-05-10 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2022-26930 | Medium | 5.5 | 2022-05-10 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2022-26927 | High | 8.8 | 2022-05-10 | Windows Graphics Component Remote Code Execution Vulnerability |
CVE-2022-26926 | High | 7.8 | 2022-05-10 | Windows Address Book Remote Code Execution Vulnerability |
CVE-2022-26925 | High | 8.1 | 2022-05-10 | Windows LSA Spoofing Vulnerability |
CVE-2022-26923 | High | 8.8 | 2022-05-10 | Active Directory Domain Services Elevation of Privilege Vulnerability |
CVE-2022-26913 | High | 7.4 | 2022-05-10 | Windows Authentication Information Disclosure Vulnerability |
CVE-2022-24466 | Medium | 4.1 | 2022-05-10 | Windows Hyper-V Security Feature Bypass Vulnerability |
CVE-2022-23279 | High | 7.0 | 2022-05-10 | Windows ALPC Elevation of Privilege Vulnerability |
CVE-2022-23270 | High | 8.1 | 2022-05-10 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-23267 | High | 7.5 | 2022-05-10 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2022-22713 | Medium | 5.6 | 2022-05-10 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2022-22019 | High | 8.8 | 2022-05-10 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2022-22017 | High | 8.8 | 2022-05-10 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2022-22016 | High | 7.0 | 2022-05-10 | Windows PlayToManager Elevation of Privilege Vulnerability |
CVE-2022-22015 | Medium | 6.5 | 2022-05-10 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability |
CVE-2022-22014 | High | 8.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-22013 | High | 8.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-22012 | Critical | 9.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-22011 | Medium | 5.5 | 2022-05-10 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2022-21978 | High | 8.2 | 2022-05-10 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2022-21972 | High | 8.1 | 2022-05-10 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-20121 | Medium | 5.5 | 2022-05-10 | In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This could lead to local information disclosur… |
CVE-2022-20120 | Critical | 9.8 | 2022-05-10 | Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A |
CVE-2022-20119 | Medium | 5.5 | 2022-05-10 | In private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to uninitialized data. This could lead to local information disclo… |
CVE-2022-20118 | High | 7.0 | 2022-05-10 | In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with… |
CVE-2022-20117 | Medium | 5.5 | 2022-05-10 | In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto. This could lead to local information discl… |
CVE-2022-1431 | Medium | 4.3 | 2022-05-10 | An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions st… |
CVE-2022-1417 | Medium | 4.3 | 2022-05-10 | Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting from 14.9 before 14.9.4, and all version… |
CVE-2022-0866 | Medium | 5.3 | 2022-05-10 | This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an EJB that is configured with a RunAs pri… |
CVE-2022-30278 | Medium | 6.1 | 2022-05-10 | A vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an unauthenticated remote attacker to conduct a cross-site scripting… |
CVE-2022-29399 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN_00415bf0. |
CVE-2022-29398 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the File parameter in the function FUN_0041309c. |
CVE-2022-29397 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004196c8. |
CVE-2022-29396 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418f10. |
CVE-2022-29395 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the apcliKey parameter in the function FUN_0041bac4. |
CVE-2022-29394 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN_0041b448. |
CVE-2022-29393 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004192cc. |
CVE-2022-29392 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418c24. |
CVE-2022-29391 | Critical | 9.8 | 2022-05-10 | TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004200c8. |
CVE-2022-27167 | High | 7.1 | 2022-05-10 | Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbi… |
CVE-2022-20116 | High | 7.8 | 2022-05-10 | In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation… |
CVE-2022-20115 | Medium | 5.5 | 2022-05-10 | In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permission due to a missi… |
CVE-2022-20114 | High | 7.8 | 2022-05-10 | In placeCall of TelecomManager.java, there is a possible way for an application to keep itself running with foreground service importance due to a permissions… |
CVE-2022-20113 | High | 7.8 | 2022-05-10 | In mPreference of DefaultUsbConfigurationPreferenceController.java, there is a possible way to enable file transfer mode due to a logic error in the code. This… |
CVE-2022-20112 | Medium | 5.5 | 2022-05-10 | In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change private DNS settings due to a permissions b… |
CVE-2022-20011 | Medium | 5.5 | 2022-05-10 | In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to missing check. This could lead to local i… |
CVE-2022-20010 | Medium | 6.5 | 2022-05-10 | In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclos… |
CVE-2022-20009 | Medium | 6.8 | 2022-05-10 | In various functions of the USB gadget subsystem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of… |
CVE-2022-20008 | Medium | 4.6 | 2022-05-10 | In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosur… |
CVE-2022-20007 | High | 7.0 | 2022-05-10 | In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foregroun… |
CVE-2022-20006 | High | 7.0 | 2022-05-10 | In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race condi… |
CVE-2022-20005 | High | 7.8 | 2022-05-10 | In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code and a parsed APK . This could lead to loca… |
CVE-2022-20004 | High | 7.8 | 2022-05-10 | In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input validation. This could lead to local escalati… |
CVE-2022-1567 | Medium | 6.1 | 2022-05-10 | The WP-JS plugin for WordPress contains a script called wp-js.php with the function wp_js_admin, that accepts unvalidated user input and echoes it back to the… |
CVE-2022-1505 | Critical | 9.8 | 2022-05-10 | The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed… |
CVE-2022-1476 | Medium | 6.6 | 2022-05-10 | The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the ~… |
CVE-2022-1463 | High | 8.8 | 2022-05-10 | The Booking Calendar plugin for WordPress is vulnerable to PHP Object Injection via the [bookingflextimeline] shortcode in versions up to, and including, 9.1… |
CVE-2022-1453 | Critical | 9.8 | 2022-05-10 | The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed… |
CVE-2022-1442 | High | 7.5 | 2022-05-10 | The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/action.php file which can be… |
CVE-2022-1209 | Medium | 4.3 | 2022-05-10 | The Ultimate Member plugin for WordPress is vulnerable to arbitrary redirects due to insufficient validation on supplied URLs in the social fields of the Profi… |
CVE-2022-28986 | High | 7.5 | 2022-05-10 | LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references (IDOR) vulnerability, which allows re… |
CVE-2022-23677 | High | 8.1 | 2022-05-10 | A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch… |
CVE-2022-23676 | Critical | 9.8 | 2022-05-10 | A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch… |
CVE-2022-0947 | Critical | 9.0 | 2022-05-10 | A vulnerability in ABB ARG600 Wireless Gateway series that could allow an attacker to exploit the vulnerability by remotely connecting to the serial port gatew… |
CVE-2022-22774 | High | 8.6 | 2022-05-10 | The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Command Cente… |
CVE-2022-1649 | Medium | 5.5 | 2022-05-10 | Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0. It is likely to be exploi… |
CVE-2022-22454 | High | 7.8 | 2022-05-10 | IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted… |
CVE-2022-26988 | High | 7.8 | 2022-05-10 | TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MntAte` function. Local users… |
CVE-2022-26987 | High | 7.8 | 2022-05-10 | TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MmtAtePrase` function. Local… |
CVE-2022-29329 | Critical | 9.8 | 2022-05-10 | D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a heap overflow via the devicename parameter in /goform/setDeviceSettings. |
CVE-2022-29328 | Critical | 9.8 | 2022-05-10 | D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a stack overflow via the function checkvalidupgrade. |
CVE-2022-29327 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel. |
CVE-2022-29326 | Critical | 9.8 | 2022-05-10 | D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parameter in /goform/websHostFilter. |