2022 CVEs (page 241)
Page 241 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-25488 | Critical | 9.8 | 2022-03-15 | Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php. |
CVE-2022-25487 | Critical | 9.8 | 2022-03-15 | Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php. |
CVE-2022-25486 | High | 7.8 | 2022-03-15 | CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php. |
CVE-2022-25485 | High | 7.8 | 2022-03-15 | CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php. |
CVE-2022-27218 | Medium | 4.3 | 2022-03-15 | Jenkins incapptic connect uploader Plugin 1.15 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed… |
CVE-2022-27217 | Medium | 6.5 | 2022-03-15 | Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be view… |
CVE-2022-27216 | Medium | 6.5 | 2022-03-15 | Jenkins dbCharts Plugin 0.5.2 and earlier stores JDBC connection passwords unencrypted in its global configuration file on the Jenkins controller where they ca… |
CVE-2022-27215 | Medium | 4.3 | 2022-03-15 | A missing permission check in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified… |
CVE-2022-27214 | Medium | 4.3 | 2022-03-15 | A cross-site request forgery (CSRF) vulnerability in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers to connect to an attacker-specified URL u… |
CVE-2022-27213 | Medium | 5.4 | 2022-03-15 | Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values in its views, result… |
CVE-2022-27212 | Medium | 5.4 | 2022-03-15 | Jenkins List Git Branches Parameter Plugin 0.0.9 and earlier does not escape the name of the 'List Git branches (and more)' parameter, resulting in a stored cr… |
CVE-2022-27211 | Medium | 6.5 | 2022-03-15 | A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to connect to an atta… |
CVE-2022-27210 | Medium | 6.5 | 2022-03-15 | A cross-site request forgery (CSRF) vulnerability in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers to connect to an attacker-s… |
CVE-2022-27209 | Medium | 6.5 | 2022-03-15 | A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to enumerate credenti… |
CVE-2022-27208 | Medium | 6.5 | 2022-03-15 | Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows users with Credentials/Create permission to read arbitrary files on the Jenkins controller. |
CVE-2022-27207 | Medium | 4.8 | 2022-03-15 | Jenkins global-build-stats Plugin 1.5 and earlier does not escape multiple fields in the chart configuration on the 'Global Build Stats' page, resulting in a s… |
CVE-2022-27206 | Medium | 6.5 | 2022-03-15 | Jenkins GitLab Authentication Plugin 1.13 and earlier stores the GitLab client secret unencrypted in the global config.xml file on the Jenkins controller where… |
CVE-2022-27205 | Medium | 4.3 | 2022-03-15 | A missing permission check in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Overall/Read permission to connect… |
CVE-2022-27204 | High | 8.8 | 2022-03-15 | A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers to connect to an attacke… |
CVE-2022-27203 | Medium | 6.5 | 2022-03-15 | Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Item/Configure permission to read values from arbitrary JSON and… |
CVE-2022-27202 | Medium | 5.4 | 2022-03-15 | Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the value and description of extended choice parameters of radio button… |
CVE-2022-27201 | Medium | 6.5 | 2022-03-15 | Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about t… |
CVE-2022-27200 | Medium | 4.8 | 2022-03-15 | Jenkins Folder-based Authorization Strategy Plugin 1.3 and earlier does not escape the names of roles shown on the configuration form, resulting in a stored cr… |
CVE-2022-27199 | Medium | 4.3 | 2022-03-15 | A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read permission to connect t… |
CVE-2022-27198 | High | 8.0 | 2022-03-15 | A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read… |
CVE-2022-27197 | Medium | 5.4 | 2022-03-15 | Jenkins Dashboard View Plugin 2.18 and earlier does not perform URL validation for the Iframe Portlet's Iframe source URL, resulting in a stored cross-site scr… |
CVE-2022-27196 | Medium | 5.4 | 2022-03-15 | Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column, resulting in a stored cross-site scripting (XSS) vulnerabil… |
CVE-2022-27195 | Medium | 5.5 | 2022-03-15 | Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized Trigger Plugin, inc… |
CVE-2022-22771 | High | 8.8 | 2022-03-15 | The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO… |
CVE-2022-0970 | Medium | 5.4 | 2022-03-15 | Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31. |
CVE-2022-0778 | High | 7.5 | 2022-03-15 | The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this functi… |
CVE-2022-26779 | High | 7.5 | 2022-03-15 | Apache CloudStack prior to 4.16.1.0 used insecure random number generation for project invitation tokens. If a project invite is created based only on an email… |
CVE-2022-0968 | Medium | 5.5 | 2022-03-15 | The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS)… |
CVE-2022-0967 | Medium | 5.4 | 2022-03-15 | Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0966 | Medium | 5.4 | 2022-03-15 | Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10. |
CVE-2022-0965 | Medium | 5.4 | 2022-03-15 | Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0964 | Medium | 5.4 | 2022-03-15 | Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0963 | Medium | 5.4 | 2022-03-15 | Unrestricted XML Files Leads to Stored XSS in GitHub repository microweber/microweber prior to 1.2.12. |
CVE-2022-24756 | High | 7.5 | 2022-03-15 | Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >= 18.2 but prior to 21.1.0, 20.0.6, and… |
CVE-2022-24755 | High | 8.1 | 2022-03-15 | Bareos is open source software for backup, archiving, and recovery of data for operating systems. When Bareos Director >= 18.2 >= 18.2 but prior to 21.1.0, 20… |
CVE-2022-24752 | Critical | 9.8 | 2022-03-15 | SyliusGridBundle is a package of generic data grids for Symfony applications. Prior to versions 1.10.1 and 1.11-rc2, values added at the end of query sorting w… |
CVE-2022-0961 | Medium | 5.5 | 2022-03-15 | The microweber application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a… |
CVE-2022-0430 | Medium | 5.3 | 2022-03-15 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0. |
CVE-2022-24721 | High | 8.1 | 2022-03-15 | CometD is a scalable comet implementation for web messaging. In any version prior to 5.0.11, 6.0.6, and 7.0.6, internal usage of Oort and Seti channels is impr… |
CVE-2022-0942 | Medium | 5.4 | 2022-03-15 | Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0957 | Medium | 5.4 | 2022-03-15 | Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0956 | Medium | 5.4 | 2022-03-15 | Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4. |
CVE-2022-0954 | Medium | 5.4 | 2022-03-15 | Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub r… |
CVE-2022-0894 | Medium | 5.4 | 2022-03-15 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0. |
CVE-2022-0893 | Medium | 5.4 | 2022-03-15 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0. |
CVE-2022-0951 | Medium | 6.1 | 2022-03-15 | File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0950 | Medium | 5.4 | 2022-03-15 | Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-27193 | Medium | 6.1 | 2022-03-15 | CVRF-CSAF-Converter before 1.0.0-rc2 resolves XML External Entities (XXE). This leads to the inclusion of arbitrary (local) file content into the generated out… |
CVE-2022-0945 | Medium | 5.4 | 2022-03-15 | Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4. |
CVE-2022-0944 | High | 7.2 | 2022-03-15 | Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1. |
CVE-2022-24762 | Medium | 6.5 | 2022-03-14 | sysend.js is a library that allows a user to send messages between pages that are open in the same browser. Users that use cross-origin communication may have… |
CVE-2022-24740 | Medium | 5.0 | 2022-03-14 | Volto is a ReactJS-based frontend for the Plone Content Management System. Between versions 14.0.0-alpha.5 and 15.0.0-alpha.0, a user could have their authenti… |
CVE-2022-24749 | Medium | 6.1 | 2022-03-14 | Sylius is an open source eCommerce platform. In versions prior to 1.9.10, 1.10.11, and 1.11.2, it is possible to upload an SVG file containing cross-site scrip… |
CVE-2022-24743 | High | 7.1 | 2022-03-14 | Sylius is an open source eCommerce platform. Prior to versions 1.10.11 and 1.11.2, the reset password token was not set to null after the password was changed… |
CVE-2022-0943 | High | 7.8 | 2022-03-14 | Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563. |
CVE-2022-24742 | Medium | 5.0 | 2022-03-14 | Sylius is an open source eCommerce platform. Prior to versions 1.9.10, 1.10.11, and 1.11.2, any other user can view the data if browser tab remains unclosed af… |
CVE-2022-24733 | Medium | 6.1 | 2022-03-14 | Sylius is an open source eCommerce platform. Prior to versions 1.9.10, 1.10.11, and 1.11.2, it is possible for a page controlled by an attacker to load the web… |
CVE-2022-24578 | High | 7.8 | 2022-03-14 | GPAC 1.0.1 is affected by a heap-based buffer overflow in SFS_AddString () at bifs/script_dec.c. |
CVE-2022-20001 | High | 7.8 | 2022-03-14 | fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary code execution. git repositories can contain per-repository c… |
CVE-2022-26320 | Critical | 9.1 | 2022-03-14 | The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imag… |
CVE-2022-21187 | High | 8.1 | 2022-03-14 | The package libvcs before 0.11.1 are vulnerable to Command Injection via argument injection. When calling the update_repo function (when using hg), the url par… |
CVE-2022-22354 | High | 7.5 | 2022-03-14 | IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do not limit the length of a connection whic… |
CVE-2022-22353 | Medium | 6.5 | 2022-03-14 | IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive informa… |
CVE-2022-22348 | Low | 2.4 | 2022-03-14 | IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse tabnabbing where it could allow a page linked to from within Opera… |
CVE-2022-22346 | High | 8.8 | 2022-03-14 | IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to cross-site request forgery which could allow an attacker to execute malici… |
CVE-2022-22344 | Medium | 6.1 | 2022-03-14 | IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers… |
CVE-2022-0962 | Medium | 5.4 | 2022-03-14 | Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-24577 | High | 7.8 | 2022-03-14 | GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen. (gf_utf8_wcslen is a renamed Unicode utf8_wcslen function.) |
CVE-2022-22735 | High | 8.8 | 2022-03-14 | The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks in various of its AJAX actions and is lacking escaping of use… |
CVE-2022-22734 | Medium | 6.1 | 2022-03-14 | The Simple Quotation WordPress plugin through 1.3.2 does not have CSRF check when creating or editing a quote and does not sanitise and escape Quotes. As a res… |
CVE-2022-0960 | Medium | 5.4 | 2022-03-14 | Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4. |
CVE-2022-0703 | Medium | 4.8 | 2022-03-14 | The GD Mylist WordPress plugin through 1.1.1 does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform Cross-Si… |
CVE-2022-0702 | Medium | 4.8 | 2022-03-14 | The Petfinder Listings WordPress plugin through 1.0.18 does not escape its settings, allowing high privilege users such as admin to perform Cross-Site Scriptin… |
CVE-2022-0701 | Medium | 4.8 | 2022-03-14 | The SEO 301 Meta WordPress plugin through 1.9.1 does not escape its Request and Destination settings, allowing high privilege users such as admin to perform Cr… |
CVE-2022-0700 | Medium | 4.8 | 2022-03-14 | The Simple Tracking WordPress plugin before 1.7 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Sc… |
CVE-2022-0684 | Medium | 4.8 | 2022-03-14 | The WP Home Page Menu WordPress plugin before 3.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site… |
CVE-2022-0674 | Medium | 4.8 | 2022-03-14 | The Kunze Law WordPress plugin before 2.1 does not escape its 'E-Mail Error "From" Address' settings, allowing high privilege users such as admin to perform Cr… |
CVE-2022-0659 | Medium | 4.8 | 2022-03-14 | The Sync QCloud COS WordPress plugin before 2.0.1 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scrip… |
CVE-2022-0658 | Critical | 9.8 | 2022-03-14 | The CommonsBooking WordPress plugin before 2.6.8 does not sanitise and escape the location parameter of the calendar_data AJAX action (available to unauthentic… |
CVE-2022-0648 | Medium | 6.1 | 2022-03-14 | The Team Circle Image Slider With Lightbox WordPress plugin before 1.0.16 does not sanitize and escape the order_pos parameter before outputting it back in an… |
CVE-2022-0601 | Medium | 6.1 | 2022-03-14 | The Countdown, Coming Soon, Maintenance WordPress plugin before 2.2.9 does not sanitize and escape the post parameter before outputting it back in an admin pag… |
CVE-2022-0593 | Medium | 6.5 | 2022-03-14 | The Login with phone number WordPress plugin before 1.3.7 includes a file delete.php with no form of authentication or authorization checks placed in the plugi… |
CVE-2022-0503 | Medium | 6.1 | 2022-03-14 | The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attri… |
CVE-2022-0478 | High | 8.8 | 2022-03-14 | The Event Manager and Tickets Selling for WooCommerce WordPress plugin before 3.5.8 does not validate and escape the post_author_gutenberg parameter before usi… |
CVE-2022-0449 | Medium | 6.1 | 2022-03-14 | The Flexi WordPress plugin before 4.20 does not sanitise and escape various parameters before outputting them back in some pages such as the user dashboard, le… |
CVE-2022-0399 | Medium | 6.1 | 2022-03-14 | The Advanced Product Labels for WooCommerce WordPress plugin before 1.2.3.7 does not sanitise and escape the tax_color_set_type parameter before outputting it… |
CVE-2022-0327 | Medium | 6.1 | 2022-03-14 | The Master Addons for Elementor WordPress plugin before 1.8.5 does not sanitise and escape the error_message parameter before outputting it back in the respons… |
CVE-2022-0321 | Medium | 6.1 | 2022-03-14 | The WP Voting Contest WordPress plugin before 3.0 does not sanitise and escape the post_id parameter before outputting it back in the response via the wpvc_soc… |
CVE-2022-0254 | Critical | 9.8 | 2022-03-14 | The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statem… |
CVE-2022-0248 | Medium | 6.1 | 2022-03-14 | The Contact Form Submissions WordPress plugin before 1.7.3 does not sanitise and escape additional fields in contact form requests before outputting them in th… |
CVE-2022-0230 | Medium | 6.1 | 2022-03-14 | The Better WordPress Google XML Sitemaps WordPress plugin through 1.4.1 does not sanitise and escape its logs when outputting them in the admin dashboard, whic… |
CVE-2022-0169 | Critical | 9.8 | 2022-03-14 | The Photo Gallery by 10Web WordPress plugin before 1.6.0 does not validate and escape the bwg_tag_id_bwg_thumbnails_0 parameter before using it in a SQL statem… |
CVE-2022-0165 | Medium | 6.1 | 2022-03-14 | The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX ac… |
CVE-2022-0161 | Medium | 6.1 | 2022-03-14 | The ARI Fancy Lightbox WordPress plugin before 1.3.9 does not sanitise and escape the msg parameter before outputting it back in an admin page, leading to a Re… |
CVE-2022-0147 | Medium | 6.1 | 2022-03-14 | The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admi… |