2022 CVEs (page 224)
Page 224 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23975 | Medium | 6.5 | 2022-04-18 | Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to activate any installed plugin. |
CVE-2022-1341 | High | 7.5 | 2022-04-18 | An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in get_cmdln_options() function in src/options.c. |
CVE-2022-26665 | High | 7.5 | 2022-04-18 | An Insecure Direct Object Reference issue exists in the Tyler Odyssey Portal platform before 17.1.20. This may allow an external party to access sensitive case… |
CVE-2022-26631 | Critical | 9.8 | 2022-04-18 | Automatic Question Paper Generator v1.0 contains a Time-Based Blind SQL injection vulnerability via the id GET parameter. |
CVE-2022-28810 | Medium | 6.8 | 2022-04-18 | Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the… |
CVE-2022-27908 | High | 8.8 | 2022-04-18 | Zoho ManageEngine OpManager before 125588 (and before 125603) is vulnerable to authenticated SQL Injection in the Inventory Reports module. |
CVE-2022-1383 | Medium | 6.1 | 2022-04-18 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Ty… |
CVE-2022-1382 | Medium | 5.5 | 2022-04-18 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affecting the a… |
CVE-2022-1381 | High | 7.8 | 2022-04-18 | global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection… |
CVE-2022-28966 | Medium | 5.5 | 2022-04-16 | Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirectly from Compile_BranchTable in m3_compile.c). |
CVE-2022-26777 | Medium | 5.3 | 2022-04-16 | Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details. |
CVE-2022-26653 | Medium | 5.3 | 2022-04-16 | Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username and GUID of an administrator). |
CVE-2022-1380 | Medium | 5.4 | 2022-04-16 | Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. The vulnerability is capable of stolen th… |
CVE-2022-29287 | Medium | 4.9 | 2022-04-16 | Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights (default is Administrator)… |
CVE-2022-29020 | Medium | 6.1 | 2022-04-16 | ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar. |
CVE-2022-1365 | Medium | 6.5 | 2022-04-15 | Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository lquixada/cross-fetch prior to 3.1.5. |
CVE-2022-29281 | High | 8.8 | 2022-04-15 | Notable before 1.9.0-beta.8 doesn't effectively prevent the opening of executable files when clicking on a link. There is improper validation of the file URI s… |
CVE-2022-29072 | High | 7.8 | 2022-04-15 | 7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area. This… |
CVE-2022-27426 | High | 8.8 | 2022-04-15 | A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system commands via a cra… |
CVE-2022-27425 | Medium | 6.1 | 2022-04-15 | Chamilo LMS v1.11.13 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /blog/blog.php. |
CVE-2022-27423 | Critical | 9.8 | 2022-04-15 | Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blog_id parameter at /blog/blog.php. |
CVE-2022-27422 | Medium | 6.1 | 2022-04-15 | A reflected cross-site scripting (XSS) vulnerability in Chamilo LMS v1.11.13 allows attackers to execute arbitrary web scripts or HTML via user interaction wit… |
CVE-2022-27421 | High | 7.2 | 2022-04-15 | Chamilo LMS v1.11.13 lacks validation on the user modification form, allowing attackers to escalate privileges to Platform Admin. |
CVE-2022-24279 | High | 7.5 | 2022-04-15 | The package madlib-object-utils before 0.1.8 are vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to merge object prototypes… |
CVE-2022-28113 | High | 7.2 | 2022-04-15 | An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without having a valid session… |
CVE-2022-27048 | High | 7.4 | 2022-04-15 | A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This affects MGate MB317… |
CVE-2022-26924 | High | 7.5 | 2022-04-15 | YARP Denial of Service Vulnerability |
CVE-2022-26921 | High | 7.3 | 2022-04-15 | Visual Studio Code Elevation of Privilege Vulnerability |
CVE-2022-26920 | Medium | 5.5 | 2022-04-15 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2022-26919 | High | 8.1 | 2022-04-15 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-26918 | High | 7.8 | 2022-04-15 | Windows Fax Compose Form Remote Code Execution Vulnerability |
CVE-2022-26917 | High | 7.8 | 2022-04-15 | Windows Fax Compose Form Remote Code Execution Vulnerability |
CVE-2022-26916 | High | 7.8 | 2022-04-15 | Windows Fax Compose Form Remote Code Execution Vulnerability |
CVE-2022-26915 | High | 7.5 | 2022-04-15 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2022-26914 | High | 7.8 | 2022-04-15 | Win32k Elevation of Privilege Vulnerability |
CVE-2022-26911 | Medium | 6.5 | 2022-04-15 | Skype for Business Information Disclosure Vulnerability |
CVE-2022-26910 | Medium | 5.3 | 2022-04-15 | Skype for Business and Lync Spoofing Vulnerability |
CVE-2022-26907 | Medium | 5.3 | 2022-04-15 | Azure SDK for .NET Information Disclosure Vulnerability |
CVE-2022-26904 | High | 7.0 | 2022-04-15 | Windows User Profile Service Elevation of Privilege Vulnerability |
CVE-2022-26903 | High | 7.8 | 2022-04-15 | Windows Graphics Component Remote Code Execution Vulnerability |
CVE-2022-26901 | High | 7.8 | 2022-04-15 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2022-26898 | High | 7.2 | 2022-04-15 | Azure Site Recovery Remote Code Execution Vulnerability |
CVE-2022-26897 | Medium | 4.9 | 2022-04-15 | Azure Site Recovery Information Disclosure Vulnerability |
CVE-2022-26896 | Medium | 4.9 | 2022-04-15 | Azure Site Recovery Information Disclosure Vulnerability |
CVE-2022-26832 | High | 7.5 | 2022-04-15 | .NET Framework Denial of Service Vulnerability |
CVE-2022-26831 | High | 7.5 | 2022-04-15 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2022-26830 | High | 7.5 | 2022-04-15 | DiskUsage.exe Remote Code Execution Vulnerability |
CVE-2022-26829 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26828 | High | 7.0 | 2022-04-15 | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
CVE-2022-26827 | High | 7.0 | 2022-04-15 | Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
CVE-2022-26826 | High | 7.2 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26825 | High | 7.2 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26824 | High | 7.2 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26823 | High | 7.2 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26822 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26821 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26820 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26819 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26818 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26817 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26816 | Medium | 6.5 | 2022-04-15 | Windows DNS Server Information Disclosure Vulnerability |
CVE-2022-26815 | High | 7.2 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26814 | Medium | 6.6 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26813 | High | 7.2 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26812 | High | 7.2 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26811 | High | 7.2 | 2022-04-15 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-26810 | High | 7.8 | 2022-04-15 | Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
CVE-2022-26809 | Critical | 9.8 | 2022-04-15 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2022-26808 | High | 7.0 | 2022-04-15 | Windows File Explorer Elevation of Privilege Vulnerability |
CVE-2022-26807 | High | 7.0 | 2022-04-15 | Windows Work Folder Service Elevation of Privilege Vulnerability |
CVE-2022-26803 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26802 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26801 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26798 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26797 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26796 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26795 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26794 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26793 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26792 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26791 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26790 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26789 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26788 | High | 7.8 | 2022-04-15 | PowerShell Elevation of Privilege Vulnerability |
CVE-2022-26787 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26786 | High | 7.8 | 2022-04-15 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-26785 | Medium | 6.5 | 2022-04-15 | Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability |
CVE-2022-26784 | Medium | 6.5 | 2022-04-15 | Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability |
CVE-2022-26783 | Medium | 6.5 | 2022-04-15 | Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability |
CVE-2022-24857 | High | 7.3 | 2022-04-15 | django-mfa3 is a library that implements multi factor authentication for the django web framework. It achieves this by modifying the regular login view. Django… |
CVE-2022-24851 | High | 8.1 | 2022-04-15 | LDAP Account Manager (LAM) is an open source web frontend for managing entries stored in an LDAP directory. The profile editor tool has an edit profile functio… |
CVE-2022-24550 | High | 7.8 | 2022-04-15 | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2022-24549 | High | 7.8 | 2022-04-15 | Windows AppX Package Manager Elevation of Privilege Vulnerability |
CVE-2022-24548 | Medium | 5.5 | 2022-04-15 | Microsoft Defender Denial of Service Vulnerability |
CVE-2022-24547 | High | 7.8 | 2022-04-15 | Windows Digital Media Receiver Elevation of Privilege Vulnerability |
CVE-2022-24546 | High | 7.8 | 2022-04-15 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2022-24545 | High | 8.1 | 2022-04-15 | Windows Kerberos Remote Code Execution Vulnerability |
CVE-2022-24544 | High | 7.8 | 2022-04-15 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2022-24543 | High | 7.8 | 2022-04-15 | Windows Upgrade Assistant Remote Code Execution Vulnerability |
CVE-2022-24542 | High | 7.8 | 2022-04-15 | Windows Win32k Elevation of Privilege Vulnerability |