2022 CVEs (page 218)
Page 218 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1255 | Medium | 4.8 | 2022-05-02 | The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could allow high privilege us… |
CVE-2022-1250 | Medium | 6.1 | 2022-05-02 | The LifterLMS PayPal WordPress plugin before 1.4.0 does not sanitise and escape some parameters from the payment confirmation page before outputting them back… |
CVE-2022-1239 | High | 8.8 | 2022-05-02 | The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the edit_posts capabi… |
CVE-2022-1046 | Medium | 4.8 | 2022-05-02 | The Visual Form Builder WordPress plugin before 3.0.7 does not sanitise and escape the form's 'Email to' field , which could allow high privilege users to perf… |
CVE-2022-0952 | High | 8.8 | 2022-05-02 | The Sitemap by click5 WordPress plugin before 1.0.36 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure… |
CVE-2022-0783 | Critical | 9.8 | 2022-05-02 | The Multiple Shipping Address Woocommerce WordPress plugin before 2.0 does not properly sanitise and escape numerous parameters before using them in SQL statem… |
CVE-2022-0773 | Critical | 9.8 | 2022-05-02 | The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, le… |
CVE-2022-0771 | Critical | 9.8 | 2022-05-02 | The SiteSuperCharger WordPress plugin before 5.2.0 does not validate, sanitise and escape various user inputs before using them in SQL statements via AJAX acti… |
CVE-2022-0662 | Medium | 4.8 | 2022-05-02 | The AdRotate WordPress plugin before 5.8.23 does not sanitise and escape Advert Names which could allow high privilege users to perform Cross-Site Scripting at… |
CVE-2022-0649 | Medium | 4.8 | 2022-05-02 | The AdRotate WordPress plugin before 5.8.23 does not escape Group Names, which could allow high privilege users to perform Cross-Site Scripting attacks even wh… |
CVE-2022-0428 | Medium | 6.1 | 2022-05-02 | The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin… |
CVE-2022-0418 | Medium | 4.8 | 2022-05-02 | The Event List WordPress plugin before 0.8.8 does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform Cross-Si… |
CVE-2022-0191 | Medium | 6.5 | 2022-05-02 | The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.7 does not have CSRF check deleting banned users, which could allow attackers to make a logge… |
CVE-2022-28573 | Critical | 9.8 | 2022-05-02 | D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers t… |
CVE-2022-28056 | Critical | 9.8 | 2022-05-02 | ShopXO v2.2.5 and below was discovered to contain a system re-install vulnerability via the Add function in app/install/controller/Index.php. |
CVE-2022-28054 | Critical | 9.8 | 2022-05-02 | Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via a crafted value. |
CVE-2022-27983 | High | 7.5 | 2022-05-02 | RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read vulnerability via the url parameter in check.php. |
CVE-2022-27982 | Critical | 9.8 | 2022-05-02 | RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain a remote code execution (RCE) vulnerability via the fileName parameter at /guest_auth/cfg/u… |
CVE-2022-27466 | Critical | 9.8 | 2022-05-02 | MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do. |
CVE-2022-28572 | High | 8.8 | 2022-05-02 | Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in `SetIPv6Status` function |
CVE-2022-28571 | Critical | 9.8 | 2022-05-02 | D-link 882 DIR882A1_FW130B06 was discovered to contain a command injection vulnerability in`/usr/bin/cli. |
CVE-2022-23065 | Medium | 5.4 | 2022-05-02 | In Vendure versions 0.1.0-alpha.2 to 1.5.1 are affected by Stored XSS vulnerability, where an attacker having catalog permission can upload a SVG file that con… |
CVE-2022-23064 | High | 8.8 | 2022-05-02 | In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, i… |
CVE-2022-29973 | Medium | 4.7 | 2022-05-02 | relan exFAT 1.3.0 allows local users to obtain sensitive information (data from deleted files in the filesystem) in certain situations involving offsets beyond… |
CVE-2022-23904 | High | 8.0 | 2022-05-02 | Rainworx Auctionworx < 3.1R2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack that allows an authenticated user to upgrade his account to admin and… |
CVE-2022-1300 | Critical | 9.8 | 2022-05-02 | Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized a… |
CVE-2022-29970 | High | 7.5 | 2022-05-02 | Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files. |
CVE-2022-29969 | Medium | 6.1 | 2022-05-02 | The RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element (if the feed is in $wgRSSUrlWhitelist and $wgRSSAllowLinkTag is true). |
CVE-2022-29968 | High | 7.8 | 2022-05-02 | An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private. |
CVE-2022-29849 | High | 7.8 | 2022-05-02 | In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If… |
CVE-2022-28451 | High | 7.5 | 2022-05-02 | nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature. |
CVE-2022-25301 | High | 7.7 | 2022-05-01 | All versions of package jsgui-lang-essentials are vulnerable to Prototype Pollution due to allowing all Object attributes to be altered, including their magica… |
CVE-2022-26068 | Medium | 6.5 | 2022-05-01 | This affects the package pistacheio/pistache before 0.0.3.20220425. It is possible to traverse directories to fetch arbitrary files from the server. |
CVE-2022-25850 | High | 7.5 | 2022-05-01 | The package github.com/hoppscotch/proxyscotch before 1.0.0 are vulnerable to Server-side Request Forgery (SSRF) when interceptor mode is set to proxy. It occur… |
CVE-2022-25844 | Medium | 5.3 | 2022-05-01 | The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service (ReDoS) by providing a custom locale rule that makes it possible to assi… |
CVE-2022-25842 | Medium | 6.9 | 2022-05-01 | All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially c… |
CVE-2022-25767 | Critical | 9.8 | 2022-05-01 | All versions of package com.bstek.ureport:ureport2-console are vulnerable to Remote Code Execution by connecting to a malicious database server, causing arbitr… |
CVE-2022-25647 | High | 7.7 | 2022-05-01 | The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which… |
CVE-2022-25645 | Medium | 6.5 | 2022-05-01 | All versions of package dset are vulnerable to Prototype Pollution via 'dset/merge' mode, as the dset function checks for prototype pollution by validating if… |
CVE-2022-25349 | Medium | 5.4 | 2022-05-01 | All versions of package materialize-css are vulnerable to Cross-site Scripting (XSS) due to improper escape of user input (such as <not-a-tag />) that is… |
CVE-2022-24437 | Critical | 9.8 | 2022-05-01 | The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for g… |
CVE-2022-23923 | High | 8.6 | 2022-05-01 | All versions of package jailed are vulnerable to Sandbox Bypass via an exported alert() method which can access the main application. Exported methods are stor… |
CVE-2022-22143 | High | 7.5 | 2022-05-01 | The package convict before 6.2.2 are vulnerable to Prototype Pollution via the convict function due to missing validation of parentKey. **Note:** This vulnerab… |
CVE-2022-21230 | Medium | 5.5 | 2022-05-01 | This affects all versions of package org.nanohttpd:nanohttpd. Whenever an HTTP Session is parsing the body of an HTTP request, the body of the request is writt… |
CVE-2022-21227 | High | 7.5 | 2022-05-01 | The package sqlite3 before 5.0.3 are vulnerable to Denial of Service (DoS) which will invoke the toString function of the passed parameter. If passed an invali… |
CVE-2022-21189 | High | 7.3 | 2022-05-01 | The package dexie before 3.2.2, from 4.0.0-alpha.1 and before 4.0.0-alpha.3 are vulnerable to Prototype Pollution in the Dexie.setByKeyPath(obj, keyPath, value… |
CVE-2022-21167 | High | 7.5 | 2022-05-01 | All versions of package masuit.tools.core are vulnerable to Arbitrary Code Execution via the ReceiveVarData<T> function in the SocketClient.cs component. The s… |
CVE-2022-21149 | Medium | 5.4 | 2022-05-01 | The package s-cart/s-cart before 6.9; the package s-cart/core before 6.9 are vulnerable to Cross-site Scripting (XSS) which can lead to cookie stealing of any… |
CVE-2022-21144 | High | 7.5 | 2022-05-01 | This affects all versions of package libxmljs. When invoking the libxmljs.parseXml function with a non-buffer argument the V8 code will attempt invoking the .t… |
CVE-2022-28481 | Critical | 9.8 | 2022-05-01 | CSV-Safe gem < 3.0.0 doesn't filter out special characters which could trigger CSV Injection. |
CVE-2022-23061 | Medium | 6.5 | 2022-05-01 | In Shopizer versions 2.0 to 2.17.0 a regular admin can permanently delete a superadmin (although this cannot happen according to the documentation) via Insecur… |
CVE-2022-23060 | Medium | 4.8 | 2022-05-01 | A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0, where a privileged user (attacker) can inject malicious JavaS… |
CVE-2022-1544 | High | 7.8 | 2022-05-01 | Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in GitHub repository luyadev/yii-helpers prior to 1.2.1. Success… |
CVE-2022-28323 | High | 7.5 | 2022-04-30 | An issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak because sorting by timestamp is supported, |
CVE-2022-29265 | High | 7.5 | 2022-04-30 | Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer ser… |
CVE-2022-29967 | High | 7.5 | 2022-04-29 | static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal. |
CVE-2022-29947 | Medium | 6.1 | 2022-04-29 | Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping. |
CVE-2022-28198 | Medium | 6.6 | 2022-04-29 | NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the system can cause arbi… |
CVE-2022-29945 | Medium | 4.0 | 2022-04-29 | DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope protocol. |
CVE-2022-25854 | Medium | 5.4 | 2022-04-29 | This affects the package @yaireo/tagify before 4.9.8. The package is used for rendering UI components inside the input or text fields, and an attacker can pass… |
CVE-2022-1543 | High | 8.8 | 2022-04-29 | Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service results in a momentar… |
CVE-2022-29937 | High | 8.8 | 2022-04-29 | USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands are blocked but (f… |
CVE-2022-29936 | High | 8.8 | 2022-04-29 | USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/quantum/save-data-upload-big-file Java d… |
CVE-2022-29935 | High | 7.5 | 2022-04-29 | USU Oracle Optimization before 5.17.5 allows attackers to discover the quantum credentials via an agent-installer download. NOTE: this is not an Oracle Corpora… |
CVE-2022-29934 | High | 7.8 | 2022-04-29 | USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec. NOTE: this is not an Or… |
CVE-2022-29451 | High | 8.8 | 2022-04-29 | Cross-Site Request Forgery (CSRF) leading to Arbitrary File Upload vulnerability in Rara One Click Demo Import plugin <= 1.2.9 on WordPress allows attackers to… |
CVE-2022-29414 | Medium | 5.4 | 2022-04-29 | Multiple (13x) Cross-Site Request Forgery (CSRF) vulnerabilities in WPKube's Subscribe To Comments Reloaded plugin <= 211130 on WordPress allows attackers to c… |
CVE-2022-28994 | Critical | 9.8 | 2022-04-29 | Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request. |
CVE-2022-28480 | Critical | 9.8 | 2022-04-29 | ALLMediaServer 1.6 is vulnerable to Buffer Overflow via MediaServer.exe. |
CVE-2022-1403 | High | 7.8 | 2022-04-29 | ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write conditi… |
CVE-2022-1402 | High | 7.8 | 2022-04-29 | ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read conditio… |
CVE-2022-0984 | Medium | 4.3 | 2022-04-29 | Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, whic… |
CVE-2022-29856 | High | 7.5 | 2022-04-29 | A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages. |
CVE-2022-1353 | High | 7.1 | 2022-04-29 | A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to… |
CVE-2022-1249 | Low | 3.3 | 2022-04-29 | A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocat… |
CVE-2022-1227 | High | 8.8 | 2022-04-29 | A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded… |
CVE-2022-1195 | Medium | 5.5 | 2022-04-29 | A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial… |
CVE-2022-1114 | High | 7.1 | 2022-04-29 | A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm.c file. This vulnerability is triggered when an attacker passes a spe… |
CVE-2022-1048 | High | 7.0 | 2022-04-29 | A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or simil… |
CVE-2022-1015 | Medium | 6.6 | 2022-04-29 | A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds… |
CVE-2022-0985 | Medium | 4.3 | 2022-04-29 | Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete c… |
CVE-2022-28452 | Critical | 9.8 | 2022-04-29 | Red Planet Laundry Management System 1.0 is vulnerable to SQL Injection. |
CVE-2022-24900 | Critical | 9.9 | 2022-04-29 | Piano LED Visualizer is software that allows LED lights to light up as a person plays a piano connected to a computer. Version 1.3 and prior are vulnerable to… |
CVE-2022-1536 | Low | 3.5 | 2022-04-29 | A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argumen… |
CVE-2022-1534 | High | 7.1 | 2022-04-29 | Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the inten… |
CVE-2022-1533 | High | 7.8 | 2022-04-29 | Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11. This vulnerability is capable of arbitrary code execution. |
CVE-2022-1531 | Critical | 9.8 | 2022-04-29 | SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in GitHub repository rtxteam/rtx prior to checkpoint_2022-04-20 . This vulnerability is cri… |
CVE-2022-1530 | Medium | 6.1 | 2022-04-29 | Cross-site Scripting (XSS) in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application. |
CVE-2022-1526 | Low | 3.5 | 2022-04-29 | A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulatio… |
CVE-2022-29907 | Medium | 6.1 | 2022-04-29 | The Nimbus skin for MediaWiki through 1.37.2 (before 6f9c8fb868345701d9544a54d9752515aace39df) allows XSS in Advertise link messages. |
CVE-2022-29906 | Critical | 9.8 | 2022-04-29 | The admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66) omits a check for the quizadmin u… |
CVE-2022-29905 | Medium | 4.3 | 2022-04-29 | The FanBoxes extension for MediaWiki through 1.37.2 (before 027ffb0b9d6fe0d823810cf03f5b562a212162d4) allows Special:UserBoxes CSRF. |
CVE-2022-29904 | Critical | 9.8 | 2022-04-29 | The SemanticDrilldown extension for MediaWiki through 1.37.2 (before e688bdba6434591b5dff689a45e4d53459954773) allows SQL injection with certain '-' and '_' co… |
CVE-2022-29903 | Medium | 4.3 | 2022-04-29 | The Private Domains extension for MediaWiki through 1.37.2 (before 1ad65d4c1c199b375ea80988d99ab51ae068f766) allows CSRF for editing pages that store the exten… |
CVE-2022-24449 | Critical | 9.8 | 2022-04-28 | Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document. |
CVE-2022-29556 | Critical | 9.8 | 2022-04-28 | The iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2 allows SSRF because the Azure IoT Hub integration provides several SSRF prim… |
CVE-2022-29555 | High | 8.8 | 2022-04-28 | The Deviceconnect microservice through 1.3.0 in Northern.tech Mender Enterprise before 3.2.2. allows Cross-Origin Websocket Hijacking. |
CVE-2022-29081 | Critical | 9.8 | 2022-04-28 | Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few R… |
CVE-2022-28477 | Medium | 6.1 | 2022-04-28 | WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS). |
CVE-2022-28454 | Medium | 6.1 | 2022-04-28 | Limbas 4.3.36.1319 is vulnerable to Cross Site Scripting (XSS). |