2022 CVEs (page 236)
Page 236 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0599 | Medium | 6.1 | 2022-03-28 | The Mapping Multiple URLs Redirect Same Page WordPress plugin through 5.8 does not sanitize and escape the mmursp_id parameter before outputting it back in an… |
CVE-2022-0595 | Medium | 5.4 | 2022-03-28 | The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.3 allows SVG files to be uploaded by default via the dnd_codedropz_upload AJAX action, whi… |
CVE-2022-0499 | High | 8.8 | 2022-03-28 | The Sermon Browser WordPress plugin through 0.45.22 does not have CSRF checks in place when uploading Sermon files, and does not validate them in any way, allo… |
CVE-2022-0493 | Medium | 4.9 | 2022-03-28 | The String locator WordPress plugin before 2.5.0 does not properly validate the path of the files to be searched, allowing high privilege users such as admin t… |
CVE-2022-0479 | Critical | 9.8 | 2022-03-28 | The Popup Builder WordPress plugin before 4.1.1 does not sanitise and escape the sgpb-subscription-popup-id parameter before using it in a SQL statement in the… |
CVE-2022-0450 | Medium | 5.4 | 2022-03-28 | The Menu Image, Icons made easy WordPress plugin before 3.0.6 does not have authorisation and CSRF checks when saving menu settings, and does not validate, san… |
CVE-2022-0397 | Medium | 5.4 | 2022-03-28 | The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.4 does not sanitise and escape the key parameter before outputting it back in the wishlist_q… |
CVE-2022-0388 | Medium | 4.8 | 2022-03-28 | The Interactive Medical Drawing of Human Body WordPress plugin before 2.6 does not sanitise and escape the Link field, allowing high privilege users to perform… |
CVE-2022-23884 | Critical | 9.8 | 2022-03-28 | Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound check bypass caused by PurchaseReceiptPacket::_read (packet deseri… |
CVE-2022-0342 | Critical | 9.8 | 2022-03-28 | An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.5… |
CVE-2022-23882 | Critical | 9.8 | 2022-03-28 | TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php. |
CVE-2022-25757 | Critical | 9.8 | 2022-03-28 | In Apache APISIX before 2.13.0, when decoding JSON with duplicate keys, lua-cjson will choose the last occurred value as the result. By passing a JSON with a d… |
CVE-2022-27950 | Medium | 5.5 | 2022-03-28 | In drivers/hid/hid-elo.c in the Linux kernel before 5.16.11, a memory leak exists for a certain hid_parse error condition. |
CVE-2022-26273 | Critical | 9.8 | 2022-03-28 | EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities. |
CVE-2022-24303 | Critical | 9.1 | 2022-03-28 | Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled. |
CVE-2022-26271 | High | 7.5 | 2022-03-28 | 74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php. |
CVE-2022-26268 | Critical | 9.8 | 2022-03-28 | Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /app/controller/Books.php. |
CVE-2022-26259 | High | 7.8 | 2022-03-28 | A buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD80X09S-KL, NBD80X08S-KL, NBD80X09RA-KL, AHB80X04R-MH, AHB80X04R-MH-V2, AHB80X04-R-MH-V3, AHB80N16T-… |
CVE-2022-26258 | Critical | 9.8 | 2022-03-28 | D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp. |
CVE-2022-26255 | Critical | 9.8 | 2022-03-28 | Clash for Windows v0.19.8 was discovered to allow arbitrary code execution via a crafted payload injected into the Proxies name column. |
CVE-2022-26254 | Medium | 5.3 | 2022-03-27 | WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitraril… |
CVE-2022-26252 | Medium | 6.5 | 2022-03-27 | aaPanel v6.8.21 was discovered to be vulnerable to directory traversal. This vulnerability allows attackers to obtain the root user private SSH key(id_rsa). |
CVE-2022-26245 | Critical | 9.8 | 2022-03-27 | Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go. |
CVE-2022-1106 | Critical | 9.1 | 2022-03-27 | use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2. |
CVE-2022-27948 | High | 7.2 | 2022-03-27 | Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a fixed sequence of approximately one hu… |
CVE-2022-26205 | Critical | 9.8 | 2022-03-27 | Marky commit 3686565726c65756e was discovered to contain a remote code execution (RCE) vulnerability via the Display text fields. This vulnerability allows att… |
CVE-2022-26198 | Critical | 9.8 | 2022-03-27 | Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field. |
CVE-2022-27947 | High | 8.8 | 2022-03-26 | NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the ipv6_fix.cgi i… |
CVE-2022-27946 | High | 8.8 | 2022-03-26 | NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd a… |
CVE-2022-27945 | High | 8.8 | 2022-03-26 | NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd a… |
CVE-2022-27943 | Medium | 5.5 | 2022-03-26 | libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. |
CVE-2022-27942 | High | 7.8 | 2022-03-26 | tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c. |
CVE-2022-27941 | High | 7.8 | 2022-03-26 | tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c. |
CVE-2022-27940 | High | 7.8 | 2022-03-26 | tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c. |
CVE-2022-27939 | Medium | 5.5 | 2022-03-26 | tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c. |
CVE-2022-27938 | Medium | 5.5 | 2022-03-26 | stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a reachable assertion in stbi__create_png_image_raw. |
CVE-2022-1071 | High | 8.2 | 2022-03-26 | User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2. |
CVE-2022-22995 | Critical | 10.0 | 2022-03-25 | The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of p… |
CVE-2022-22274 | Critical | 9.8 | 2022-03-25 | A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potent… |
CVE-2022-24784 | Low | 3.7 | 2022-03-25 | Statamic is a Laravel and Git powered CMS. Before versions 3.2.39 and 3.3.2, it is possible to confirm a single character of a user's password hash using a spe… |
CVE-2022-24783 | Critical | 10.0 | 2022-03-25 | Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 (inclusive) are vulnerable to an attack where a malicio… |
CVE-2022-26659 | High | 7.1 | 2022-03-25 | Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of… |
CVE-2022-26197 | Medium | 5.4 | 2022-03-25 | Joget DX 7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Datalist table. |
CVE-2022-25523 | High | 8.8 | 2022-03-25 | TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which is exploited via a crafted POST request. |
CVE-2022-24643 | Medium | 5.4 | 2022-03-25 | A stored cross-site scripting (XSS) issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0. |
CVE-2022-27920 | Medium | 6.1 | 2022-03-25 | libkiwix 10.0.0 and 10.0.1 allows XSS in the built-in webserver functionality via the search suggestions URL parameter. This is fixed in 10.1.0. |
CVE-2022-27919 | Critical | 9.8 | 2022-03-25 | Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file. The configuration allow… |
CVE-2022-27906 | Medium | 5.9 | 2022-03-25 | Mendelson OFTP2 before 1.1 b43 is affected by directory traversal. To access the vulnerable code path, the attacker has to know one of the configured Odette ID… |
CVE-2022-27887 | Medium | 6.1 | 2022-03-25 | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/vod/data.html via the repeat parameter. |
CVE-2022-27886 | Medium | 6.1 | 2022-03-25 | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/ulog/index.html via the wd parameter. |
CVE-2022-27885 | Medium | 6.1 | 2022-03-25 | Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/website/data.html via the select and inp… |
CVE-2022-27884 | Medium | 6.1 | 2022-03-25 | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/plog/index.html via the wd parameter. |
CVE-2022-26573 | Medium | 6.1 | 2022-03-25 | Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/art/data.html via the select and input p… |
CVE-2022-25612 | Medium | 4.1 | 2022-03-25 | Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in Simple Event Planner WordPress plugin <= 1.5.4 allows user with author or highe… |
CVE-2022-25611 | Medium | 4.1 | 2022-03-25 | Authenticated Stored Cross-Site Scripting (XSS) in Simple Event Planner plugin <= 1.5.4 allows attackers with contributor or higher user roles to inject the ma… |
CVE-2022-25610 | Low | 3.4 | 2022-03-25 | Unauthenticated Stored Cross-Site Scripting (XSS) in Simple Ajax Chat <= 20220115 allows an attacker to store the malicious code. However, the attack requires… |
CVE-2022-25606 | Medium | 4.8 | 2022-03-25 | Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions <= 1.68.6). Vulnerable par… |
CVE-2022-25590 | Medium | 6.5 | 2022-03-25 | SurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing attackers to login to the system and access data using the browser cac… |
CVE-2022-1049 | High | 8.8 | 2022-03-25 | A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when usi… |
CVE-2022-0995 | High | 7.8 | 2022-03-25 | An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel… |
CVE-2022-0988 | High | 7.1 | 2022-03-25 | Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow… |
CVE-2022-0983 | High | 8.8 | 2022-03-25 | An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by… |
CVE-2022-0897 | Medium | 4.3 | 2022-03-25 | A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating ove… |
CVE-2022-0759 | High | 8.1 | 2022-03-25 | A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files… |
CVE-2022-0500 | High | 7.8 | 2022-03-25 | A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to th… |
CVE-2022-0494 | Medium | 4.4 | 2022-03-25 | A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker wi… |
CVE-2022-0435 | High | 8.8 | 2022-03-25 | A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of d… |
CVE-2022-0330 | High | 7.8 | 2022-03-25 | A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw… |
CVE-2022-0322 | Medium | 5.5 | 2022-03-25 | A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privileg… |
CVE-2022-27882 | High | 7.5 | 2022-03-25 | slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router a… |
CVE-2022-27881 | High | 7.5 | 2022-03-25 | engine.c in slaacd in OpenBSD 6.9 and 7.0 before 2022-02-21 has a buffer overflow triggerable by an IPv6 router advertisement with more than seven nameservers… |
CVE-2022-24778 | High | 7.5 | 2022-03-25 | The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-decoder command line tool for use by co… |
CVE-2022-26263 | Medium | 6.1 | 2022-03-25 | Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability via the component /u8sl/WebHelp. |
CVE-2022-25582 | Medium | 5.4 | 2022-03-25 | A stored cross-site scripting (XSS) vulnerability in the Column module of ClassCMS v2.5 and below allows attackers to execute arbitrary web scripts or HTML via… |
CVE-2022-25577 | Critical | 9.1 | 2022-03-25 | ALF-BanCO v8.2.5 and below was discovered to use a hardcoded password to encrypt the SQLite database containing the user's data. Attackers who are able to gain… |
CVE-2022-24777 | High | 7.5 | 2022-03-25 | grpc-swift is the Swift language implementation of gRPC, a remote procedure call (RPC) framework. Prior to version 1.7.2, a grpc-swift server is vulnerable to… |
CVE-2022-25574 | Medium | 4.8 | 2022-03-25 | A stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php allows attackers to execute arbitrary web scripts or HTML via a cra… |
CVE-2022-27227 | High | 7.5 | 2022-03-25 | In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x bef… |
CVE-2022-1064 | High | 8.8 | 2022-03-25 | SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1. |
CVE-2022-1040 | Critical | 9.8 | 2022-03-25 | An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older. |
CVE-2022-22688 | High | 8.8 | 2022-03-25 | Improper neutralization of special elements used in a command ('Command Injection') vulnerability in File service functionality in Synology DiskStation Manager… |
CVE-2022-22687 | Critical | 9.8 | 2022-03-25 | Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in Synology DiskStation Manager (DSM) befo… |
CVE-2022-25576 | Medium | 4.5 | 2022-03-24 | Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component anchor/routes/posts.php. This vulnerability allows attackers… |
CVE-2022-26301 | Critical | 9.8 | 2022-03-24 | TuziCMS v2.0.6 was discovered to contain a SQL injection vulnerability via the component App\Manage\Controller\ZhuantiController.class.php. |
CVE-2022-26279 | Critical | 9.8 | 2022-03-24 | EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata. |
CVE-2022-26272 | Critical | 9.8 | 2022-03-24 | A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute arbitrary code via a crafted string written to the file application/… |
CVE-2022-26249 | Critical | 9.8 | 2022-03-24 | Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a… |
CVE-2022-25575 | Medium | 6.1 | 2022-03-24 | Multiple cross-site scripting (XSS) vulnerabilities in Parking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via crafted pay… |
CVE-2022-25571 | High | 7.5 | 2022-03-24 | Bluedon Information Security Technologies Co.,Ltd Internet Access Detector v1.0 was discovered to contain an information leak which allows attackers to access… |
CVE-2022-24782 | Medium | 4.3 | 2022-03-24 | Discourse is an open source discussion platform. Versions 2.8.2 and prior in the `stable` branch, 2.9.0.beta3 and prior in the `beta` branch, and 2.9.0.beta3 a… |
CVE-2022-24781 | High | 7.1 | 2022-03-24 | Geon is a board game based on solving questions about the Pythagorean Theorem. Malicious users can obtain the uuid from other users, spoof that uuid through th… |
CVE-2022-24776 | Medium | 6.1 | 2022-03-24 | Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an open redirect vulnerability whe… |
CVE-2022-24769 | Medium | 5.9 | 2022-03-24 | Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby (Docker Engine) prior to version 2… |
CVE-2022-22374 | Critical | 9.1 | 2022-03-24 | The BMC (IBM Power 9 AC922 OP910, OP920, OP930, and OP940) may be subject to a firmware downgrade attack which may affect its ability to operate its host. IBM… |
CVE-2022-25568 | High | 7.5 | 2022-03-24 | MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user p… |
CVE-2022-21820 | Medium | 6.3 | 2022-03-24 | NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited co… |
CVE-2022-0153 | High | 7.5 | 2022-03-24 | SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1. |
CVE-2022-26629 | Critical | 9.1 | 2022-03-24 | An Access Control vulnerability exists in SoroushPlus+ Messenger 1.0.30 in the Lock Screen Security Feature function due to insufficient permissions and privil… |
CVE-2022-1058 | Medium | 6.1 | 2022-03-24 | Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5. |
CVE-2022-0955 | Medium | 4.8 | 2022-03-24 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/data-hub prior to 1.2.4. |