2022 CVEs (page 220)
Page 220 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-28218 | Medium | 5.5 | 2022-04-26 | An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys (found in a Roundcube configuration file… |
CVE-2022-24883 | High | 7.4 | 2022-04-26 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be success… |
CVE-2022-24882 | Critical | 9.1 | 2022-04-26 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort… |
CVE-2022-24881 | High | 8.8 | 2022-04-26 | Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code exec… |
CVE-2022-23942 | High | 7.5 | 2022-04-26 | Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure. |
CVE-2022-1173 | Medium | 5.4 | 2022-04-26 | stored xss in GitHub repository getgrav/grav prior to 1.7.33. |
CVE-2022-27985 | Critical | 9.8 | 2022-04-26 | CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via /administrator/alerts/alertLightbox.php. |
CVE-2022-27984 | Critical | 9.8 | 2022-04-26 | CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templates/default/html/windows/right.php. |
CVE-2022-27469 | Critical | 9.8 | 2022-04-26 | Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF). |
CVE-2022-27468 | Critical | 9.8 | 2022-04-26 | Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows attackers to execute arbitrary code via a crafted file uploaded to the web se… |
CVE-2022-27299 | Critical | 9.8 | 2022-04-26 | Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php. |
CVE-2022-24706 | Critical | 9.8 | 2022-04-26 | In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The Couch… |
CVE-2022-29806 | Critical | 9.8 | 2022-04-26 | ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to expl… |
CVE-2022-29499 | Critical | 9.8 | 2022-04-26 | The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Applia… |
CVE-2022-24880 | Medium | 5.3 | 2022-04-25 | flask-session-captcha is a package which allows users to extend Flask by adding an image based captcha stored in a server side session. In versions prior to 1… |
CVE-2022-23457 | High | 7.5 | 2022-04-25 | ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementatio… |
CVE-2022-29419 | Medium | 6.0 | 2022-04-25 | SQL Injection (SQLi) vulnerability in Don Crowther's 3xSocializer plugin <= 0.98.22 at WordPress possible for users with a low role like a subscriber or higher. |
CVE-2022-29418 | Medium | 4.8 | 2022-04-25 | Authenticated (admin user role) Persistent Cross-Site Scripting (XSS) in Mark Daniels Night Mode plugin <= 1.0.0 on WordPress via vulnerable parameters: &ntmod… |
CVE-2022-29417 | Medium | 4.3 | 2022-04-25 | Plugin Settings Update vulnerability in ShortPixel's ShortPixel Adaptive Images plugin <= 3.3.1 at WordPress allows an attacker with a low user role like a sub… |
CVE-2022-28290 | Medium | 6.1 | 2022-04-25 | Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access th… |
CVE-2022-25866 | High | 8.1 | 2022-04-25 | The package czproject/git-php before 4.0.3 are vulnerable to Command Injection via git argument injection. When calling the isRemoteUrlReadable($url, array $re… |
CVE-2022-1441 | High | 7.8 | 2022-04-25 | MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion. When MP4Box tries to parse a MP4 file, it calls the function `di… |
CVE-2022-0477 | Medium | 4.9 | 2022-04-25 | An issue has been discovered in GitLab affecting all versions starting from 11.9 before 14.5.4, all versions starting from 14.6.0 before 14.6.4, all versions s… |
CVE-2022-27375 | Medium | 6.5 | 2022-04-25 | Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_422168 at /goform/WifiExtraSet. |
CVE-2022-27374 | Medium | 6.5 | 2022-04-25 | Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_42E328 at /goform/SysToolReboot. |
CVE-2022-26597 | Medium | 6.1 | 2022-04-25 | Cross-site scripting (XSS) vulnerability in the Layout module's Open Graph integration in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before servic… |
CVE-2022-26596 | Medium | 6.1 | 2022-04-25 | Cross-site scripting (XSS) vulnerability in Journal module's web content display configuration page in Liferay Portal 7.1.0 through 7.3.3, and Liferay DXP 7.0… |
CVE-2022-24792 | High | 7.5 | 2022-04-25 | PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that… |
CVE-2022-22392 | High | 7.8 | 2022-04-25 | IBM Planning Analytics Local 2.0 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in co… |
CVE-2022-1396 | Medium | 4.8 | 2022-04-25 | The Donorbox WordPress plugin before 7.1.7 does not sanitise and escape its Campaign URL settings before outputting it in an attribute, leading to a Stored Cro… |
CVE-2022-1392 | High | 7.5 | 2022-04-25 | The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File In… |
CVE-2022-1391 | Critical | 9.8 | 2022-04-25 | The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Loc… |
CVE-2022-1390 | Critical | 9.8 | 2022-04-25 | The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter given to readfile(), which could allow unauthenticated attackers… |
CVE-2022-1228 | Medium | 4.8 | 2022-04-25 | The Opensea WordPress plugin before 1.0.3 does not sanitize and escape some of its settings, like its "Referer address" field, which could allow high privilege… |
CVE-2022-1156 | Medium | 4.8 | 2022-04-25 | The Books & Papers WordPress plugin through 0.20210223 does not escape its Custom DB prefix settings, allowing high privilege users to perform Cross-Site Scrip… |
CVE-2022-1153 | Medium | 4.8 | 2022-04-25 | The LayerSlider WordPress plugin before 7.1.2 does not sanitise and escape Project's slug before outputting it back in various place, which could allow high pr… |
CVE-2022-1152 | Medium | 5.4 | 2022-04-25 | The Menubar WordPress plugin before 5.8 does not sanitise and escape the command parameter before outputting it back in the response via the menubar AJAX actio… |
CVE-2022-1094 | Medium | 4.8 | 2022-04-25 | The amr users WordPress plugin before 4.59.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2022-1092 | Medium | 4.3 | 2022-04-25 | The myCred WordPress plugin before 2.4.3.1 does not have authorisation and CSRF checks in its mycred-tools-import-export AJAX action, allowing any authenticate… |
CVE-2022-1027 | Medium | 4.8 | 2022-04-25 | The Page Restriction WordPress (WP) WordPress plugin before 1.2.7 allows bad actors with administrator privileges to the settings page to inject Javascript cod… |
CVE-2022-0953 | Medium | 6.1 | 2022-04-25 | The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.96 does not sanitise and escape the QUERY_STRING before outputting it back in a… |
CVE-2022-0876 | Medium | 4.8 | 2022-04-25 | The Social comments by WpDevArt WordPress plugin before 2.5.0 does not sanitise and escape its settings, allowing high privilege users such as admin to perform… |
CVE-2022-0782 | Critical | 9.8 | 2022-04-25 | The Donations WordPress plugin through 1.8 does not sanitise and escape the nd_donations_id parameter before using it in a SQL statement via the nd_donations_s… |
CVE-2022-0769 | Critical | 9.8 | 2022-04-25 | The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the data_target parameter before it is being interpolated in an SQL statem… |
CVE-2022-0693 | Critical | 9.8 | 2022-04-25 | The Master Elements WordPress plugin through 8.0 does not validate and escape the meta_ids parameter of its remove_post_meta_condition AJAX action (available t… |
CVE-2022-0657 | Critical | 9.8 | 2022-04-25 | The 5 Stars Rating Funnel WordPress Plugin | RRatingg WordPress plugin before 1.2.54 does not properly sanitise, validate and escape lead ids before using them… |
CVE-2022-0656 | High | 7.5 | 2022-04-25 | The Web To Print Shop : uDraw WordPress plugin before 3.3.3 does not validate the url parameter in its udraw_convert_url_to_base64 AJAX action (available to bo… |
CVE-2022-0634 | Medium | 4.3 | 2022-04-25 | The ThirstyAffiliates WordPress plugin before 3.10.5 lacks authorization checks in the ta_insert_external_image action, allowing a low-privilege user (with a r… |
CVE-2022-0541 | Critical | 9.8 | 2022-04-25 | The flo-launch WordPress plugin before 2.4.1 injects code into wp-config.php when creating a cloned site, allowing any attacker to initiate a new site install… |
CVE-2022-0398 | Medium | 5.4 | 2022-04-25 | The ThirstyAffiliates Affiliate Link Manager WordPress plugin before 3.10.5 does not have authorisation and CSRF checks when creating affiliate links, which co… |
CVE-2022-0363 | Medium | 4.3 | 2022-04-25 | The myCred WordPress plugin before 2.4.3.1 does not have any authorisation and CSRF checks in the mycred-tools-import-export AJAX action, allowing any authenti… |
CVE-2022-0287 | Medium | 4.3 | 2022-04-25 | The myCred WordPress plugin before 2.4.4.1 does not have any authorisation in place in its mycred-tools-select-user AJAX action, allowing any authenticated use… |
CVE-2022-29078 | Critical | 9.8 | 2022-04-25 | The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side template injection in settings[view options][outputFunctionName]. This… |
CVE-2022-28094 | Medium | 6.1 | 2022-04-25 | SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the fid parameter at booking.php. |
CVE-2022-28093 | Critical | 9.8 | 2022-04-25 | SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a local file inclusion vulnerability which allow attackers to execute arbitrary code… |
CVE-2022-26111 | High | 8.8 | 2022-04-25 | The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creating a custom search (or editing an exist… |
CVE-2022-28586 | Medium | 6.1 | 2022-04-25 | XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payload bypass filter some special chars. |
CVE-2022-28506 | Medium | 5.5 | 2022-04-25 | There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45. |
CVE-2022-28053 | High | 8.8 | 2022-04-25 | Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function. This vulnerability allows attackers to execute arbitr… |
CVE-2022-27429 | Critical | 9.8 | 2022-04-25 | Jizhicms v1.9.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via /admin.php/Plugins/update.html. |
CVE-2022-27428 | Medium | 5.4 | 2022-04-25 | A stored cross-site scripting (XSS) vulnerability in /index.php/album/add of GalleryCMS v2.0 allows attackers to execute arbitrary web scripts or HTML via a cr… |
CVE-2022-27311 | Critical | 9.8 | 2022-04-25 | Gibbon v3.4.4 and below allows attackers to execute a Server-Side Request Forgery (SSRF) via a crafted URL. |
CVE-2022-27135 | Medium | 5.5 | 2022-04-25 | xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service (Segmentatio… |
CVE-2022-27103 | Medium | 6.1 | 2022-04-25 | element-plus 2.0.5 is vulnerable to Cross Site Scripting (XSS) via el-table-column. |
CVE-2022-28871 | Medium | 4.3 | 2022-04-25 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger… |
CVE-2022-1461 | Medium | 6.5 | 2022-04-25 | Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1. |
CVE-2022-1459 | High | 8.3 | 2022-04-25 | Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1. |
CVE-2022-1458 | Medium | 5.4 | 2022-04-25 | Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1. |
CVE-2022-1457 | Medium | 5.4 | 2022-04-25 | Store XSS in title parameter executing at EditUser Page & EditProducto page in GitHub repository neorazorx/facturascripts prior to 2022.04. Cross-site scriptin… |
CVE-2022-29264 | Critical | 9.8 | 2022-04-25 | An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur. |
CVE-2022-29603 | High | 8.1 | 2022-04-25 | A SQL Injection vulnerability exists in UniverSIS UniverSIS-API through 1.2.1 via the $select parameter to multiple API endpoints. A remote authenticated attac… |
CVE-2022-29546 | High | 7.5 | 2022-04-25 | HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the parsing of Processing Instruction (PI)… |
CVE-2022-29077 | Critical | 9.8 | 2022-04-25 | A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or execute commands remotely on a rippled node… |
CVE-2022-1452 | High | 7.1 | 2022-04-24 | Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads da… |
CVE-2022-1451 | High | 7.1 | 2022-04-24 | Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data… |
CVE-2022-1445 | Medium | 5.4 | 2022-04-24 | Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is capable of s… |
CVE-2022-1444 | Medium | 5.5 | 2022-04-23 | heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.7.0. This vulnerability is capable of inducing denial of service. |
CVE-2022-1427 | High | 7.8 | 2022-04-23 | Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2. # Impact: Possible arbitrary code execution if being exploited. |
CVE-2022-1108 | Medium | 6.7 | 2022-04-22 | A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an at… |
CVE-2022-1107 | Medium | 6.7 | 2022-04-22 | During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad… |
CVE-2022-0636 | Medium | 5.0 | 2022-04-22 | A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a system crash. |
CVE-2022-0354 | High | 7.3 | 2022-04-22 | A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated pri… |
CVE-2022-0192 | High | 7.3 | 2022-04-22 | A DLL search path vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow privilege escalation. |
CVE-2022-27342 | Critical | 9.8 | 2022-04-22 | Link-Admin v0.0.1 was discovered to contain a SQL injection vulnerability via DictRest.ResponseResult(). |
CVE-2022-27341 | Critical | 9.8 | 2022-04-22 | JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management function. |
CVE-2022-27340 | High | 8.8 | 2022-04-22 | MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify d… |
CVE-2022-1440 | Critical | 9.8 | 2022-04-22 | Command Injection vulnerability in git-interface@2.1.1 in GitHub repository yarkeev/git-interface prior to 2.1.2. If both are provided by user input, then the… |
CVE-2022-29589 | Medium | 6.1 | 2022-04-22 | Crypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername, and username. |
CVE-2022-1439 | Medium | 6.1 | 2022-04-22 | Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microweber/microweber prior to 1.2.15. Execute Arbitrary JavaScript as the attacked user… |
CVE-2022-29583 | High | 7.8 | 2022-04-22 | service_windows.go in the kardianos service package for Go omits quoting that is sometimes needed for execution of a Windows service executable from the intend… |
CVE-2022-29582 | High | 7.0 | 2022-04-22 | In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This can be triggered by a local user who h… |
CVE-2022-1437 | High | 7.1 | 2022-04-22 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Ty… |
CVE-2022-28074 | Medium | 4.8 | 2022-04-22 | Halo-1.5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via \admin\index.html#/system/tools. |
CVE-2022-27406 | High | 7.5 | 2022-04-22 | FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size. |
CVE-2022-27405 | High | 7.5 | 2022-04-22 | FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request. |
CVE-2022-27404 | Critical | 9.8 | 2022-04-22 | FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face. |
CVE-2022-1429 | High | 7.5 | 2022-04-22 | SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capable of steal the data |
CVE-2022-26674 | Critical | 9.8 | 2022-04-22 | ASUS RT-AX88U has a Format String vulnerability, which allows an unauthenticated remote attacker to write to arbitrary memory address and perform remote arbitr… |
CVE-2022-26673 | Medium | 5.4 | 2022-04-22 | ASUS RT-AX88U has insufficient filtering for special characters in the HTTP header parameter. A remote attacker with general user privilege can exploit this vu… |
CVE-2022-26672 | High | 7.3 | 2022-04-22 | ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token to establish connections with the serve… |