2022 CVEs (page 248)
Page 248 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-24337 | Medium | 6.5 | 2022-02-25 | In JetBrains TeamCity before 2021.2, health items of pull requests were shown to users who lacked appropriate permissions. |
CVE-2022-24336 | Medium | 5.3 | 2022-02-25 | In JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via an XML-RPC request to the TeamCity server. |
CVE-2022-24335 | High | 8.1 | 2022-02-25 | JetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use (TOCTOU) race-condition attack in agent registration via XML-RPC. |
CVE-2022-24334 | Medium | 5.3 | 2022-02-25 | In JetBrains TeamCity before 2021.2.1, the Agent Push feature allowed selection of any private key on the server. |
CVE-2022-24333 | Medium | 6.5 | 2022-02-25 | In JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible. |
CVE-2022-24332 | Medium | 5.3 | 2022-02-25 | In JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie. |
CVE-2022-24331 | Critical | 9.8 | 2022-02-25 | In JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible. |
CVE-2022-24330 | Medium | 6.1 | 2022-02-25 | In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible. |
CVE-2022-24329 | Medium | 5.3 | 2022-02-25 | In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects. |
CVE-2022-24328 | Medium | 6.5 | 2022-02-25 | In JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS. |
CVE-2022-24327 | High | 7.5 | 2022-02-25 | In JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with excessive permissions. |
CVE-2022-25374 | High | 7.5 | 2022-02-25 | HashiCorp Terraform Enterprise v202112-1, v202112-2, v202201-1, and v202201-2 were configured to log inbound HTTP requests in a manner that may capture sensiti… |
CVE-2022-24612 | Medium | 5.4 | 2022-02-25 | An authenticated user can upload an XML file containing an XSS via the ITSM module of EyesOfNetwork 5.3.11, resulting in a stored XSS. |
CVE-2022-24594 | Medium | 5.3 | 2022-02-25 | In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address. |
CVE-2022-25328 | Medium | 5.0 | 2022-02-25 | The bash_completion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of circums… |
CVE-2022-25327 | Medium | 5.5 | 2022-02-25 | The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metadata files that prevent other users from… |
CVE-2022-25326 | Medium | 5.5 | 2022-02-25 | fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We… |
CVE-2022-0247 | High | 7.5 | 2022-02-25 | An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker could modify objects in the VMO that they… |
CVE-2022-24948 | Medium | 6.1 | 2022-02-25 | A carefully crafted user preferences for submission could trigger an XSS vulnerability on Apache JSPWiki, related to the user preferences screen, which could a… |
CVE-2022-24947 | High | 8.8 | 2022-02-25 | Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover. Apache JSPWiki users should upgrade to 2.11.2 or later. |
CVE-2022-24288 | High | 8.8 | 2022-02-25 | In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection fr… |
CVE-2022-0746 | Medium | 4.3 | 2022-02-25 | Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0. |
CVE-2022-23835 | High | 8.1 | 2022-02-25 | The Visual Voice Mail (VVM) application through 2022-02-24 for Android allows persistent access if an attacker temporarily controls an application that has the… |
CVE-2022-23701 | Medium | 5.3 | 2022-02-24 | A potential remote host header injection security vulnerability has been identified in HPE Integrated Lights-Out 4 (iLO 4) firmware version(s): Prior to 2.60… |
CVE-2022-24709 | High | 8.8 | 2022-02-24 | @awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multip… |
CVE-2022-25307 | High | 7.2 | 2022-02-24 | The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the platform parameter found in the ~… |
CVE-2022-25306 | High | 7.2 | 2022-02-24 | The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the browser parameter found in the ~/… |
CVE-2022-25305 | High | 7.2 | 2022-02-24 | The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the IP parameter found in the ~/inclu… |
CVE-2022-25149 | Critical | 9.8 | 2022-02-24 | The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the ~/includes… |
CVE-2022-25148 | Critical | 9.8 | 2022-02-24 | The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in t… |
CVE-2022-25004 | Critical | 9.8 | 2022-02-24 | Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/manage_doctor.php. |
CVE-2022-25003 | Critical | 9.8 | 2022-02-24 | Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/view_doctor.php. |
CVE-2022-24232 | High | 7.8 | 2022-02-24 | A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2022-23922 | Medium | 5.6 | 2022-02-24 | WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the Program Announcer directory an… |
CVE-2022-23135 | Medium | 6.5 | 2022-02-24 | There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attack… |
CVE-2022-23104 | Medium | 5.6 | 2022-02-24 | WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the program Operator Workspace dir… |
CVE-2022-21824 | High | 8.2 | 2022-02-24 | Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while s… |
CVE-2022-0710 | Medium | 6.1 | 2022-02-24 | The Header Footer Code Manager plugin <= 1.1.16 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter. |
CVE-2022-0683 | Medium | 6.1 | 2022-02-24 | The Essential Addons for Elementor Lite WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the settings pa… |
CVE-2022-0653 | Medium | 6.1 | 2022-02-24 | The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitizati… |
CVE-2022-0651 | Critical | 9.8 | 2022-02-24 | The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in… |
CVE-2022-0546 | High | 7.8 | 2022-02-24 | A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service… |
CVE-2022-0545 | High | 7.8 | 2022-02-24 | An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attack… |
CVE-2022-0544 | Medium | 5.5 | 2022-02-24 | An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using a crafted DDS imag… |
CVE-2022-22794 | Medium | 6.8 | 2022-02-24 | Cybonet - PineApp Mail Relay Unauthenticated Sql Injection. Attacker can send a request to: /manage/emailrichment/userlist.php?CUSTOMER_ID_INNER=1 /admin/email… |
CVE-2022-22793 | Medium | 6.1 | 2022-02-24 | Cybonet - PineApp Mail Relay Local File Inclusion. Attacker can send a request to : /manage/mailpolicymtm/log/eml_viewer/email.content.body.php?filesystem_path… |
CVE-2022-22349 | Medium | 4.3 | 2022-02-24 | IBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path traversals, due to not properly validating RESTAPI configuratio… |
CVE-2022-24708 | Medium | 6.5 | 2022-02-24 | Anuko Time Tracker is an open source, web-based time tracking application written in PHP. ttUser.class.php in Time Tracker versions prior to 1.20.0.5646 was no… |
CVE-2022-24707 | High | 7.4 | 2022-02-24 | Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-based blind injection vulnerabilities ex… |
CVE-2022-24687 | Medium | 6.5 | 2022-02-24 | HashiCorp Consul and Consul Enterprise 1.9.0 through 1.9.14, 1.10.7, and 1.11.2 clusters with at least one Ingress Gateway allow a user with service:write to r… |
CVE-2022-0732 | High | 7.5 | 2022-02-24 | The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR (I… |
CVE-2022-25838 | High | 8.1 | 2022-02-24 | Laravel Fortify before 1.11.1 allows reuse within a short time window, thus calling into question the "OT" part of the "TOTP" concept. |
CVE-2022-25809 | Critical | 9.8 | 2022-02-24 | Improper Neutralization of audio output from 3rd and 4th Generation Amazon Echo Dot devices allows arbitrary voice command execution on these devices via a mal… |
CVE-2022-25643 | Critical | 9.8 | 2022-02-24 | seatd-launch in seatd 0.6.x before 0.6.4 allows removing files with escalated privileges when installed setuid root. The attack vector is a user-supplied socke… |
CVE-2022-25640 | High | 7.5 | 2022-02-24 | In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can simply omit the certificate_verify mess… |
CVE-2022-25638 | Medium | 6.5 | 2022-02-24 | In wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication by a TLS 1.3 client to a TLS 1.3 server. This occurs when the s… |
CVE-2022-25636 | High | 7.8 | 2022-02-24 | net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is relat… |
CVE-2022-25418 | Critical | 9.8 | 2022-02-24 | Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function openSchedWifi. |
CVE-2022-25417 | Critical | 9.8 | 2022-02-24 | Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function saveparentcontrolinfo. |
CVE-2022-25414 | Critical | 9.8 | 2022-02-24 | Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the parameter NPTR. |
CVE-2022-25406 | Critical | 9.8 | 2022-02-24 | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete_query.php via the DELETE_STR parameter. |
CVE-2022-25405 | Critical | 9.8 | 2022-02-24 | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in change_box.php via the DELETE_STR parameter. |
CVE-2022-25404 | Critical | 9.8 | 2022-02-24 | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the DELETE_STR parameter. |
CVE-2022-25403 | Critical | 9.8 | 2022-02-24 | HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php. |
CVE-2022-25402 | Critical | 9.1 | 2022-02-24 | An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files. |
CVE-2022-25401 | High | 7.5 | 2022-02-24 | The copy function of the file manager in Cuppa CMS v1.0 allows any file to be copied to the current directory, granting attackers read access to arbitrary file… |
CVE-2022-25363 | Medium | 6.5 | 2022-02-24 | WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to modify privileged management user credentials. Th… |
CVE-2022-25360 | High | 8.8 | 2022-02-24 | WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload files to arbitrary locations. This vulnera… |
CVE-2022-25355 | Medium | 5.3 | 2022-02-24 | EC-CUBE 3.0.0 to 3.0.18-p3 and EC-CUBE 4.0.0 to 4.1.1 improperly handle HTTP Host header values, which may lead a remote unauthenticated attacker to direct the… |
CVE-2022-25293 | High | 8.8 | 2022-02-24 | A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by… |
CVE-2022-25292 | High | 8.8 | 2022-02-24 | A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by… |
CVE-2022-25291 | High | 8.8 | 2022-02-24 | An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflow and potentially ex… |
CVE-2022-25290 | Medium | 6.5 | 2022-02-24 | WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys. This vulnerabi… |
CVE-2022-25104 | High | 7.5 | 2022-02-24 | HorizontCMS v1.0.0-beta.2 was discovered to contain an arbitrary file download vulnerability via the component /admin/file-manager/. |
CVE-2022-25101 | High | 7.8 | 2022-02-24 | A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2022-25099 | High | 7.8 | 2022-02-24 | A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2022-25098 | Critical | 9.1 | 2022-02-24 | ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter. |
CVE-2022-25084 | Critical | 9.8 | 2022-02-24 | TOTOLink T6 V5.9c.4085_B20190428 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to exe… |
CVE-2022-25083 | Critical | 9.8 | 2022-02-24 | TOTOLink A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers… |
CVE-2022-25082 | Critical | 9.8 | 2022-02-24 | TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a command injection vulnerability in the "Main" function. This vuln… |
CVE-2022-25081 | Critical | 9.8 | 2022-02-24 | TOTOLink T10 V5.9c.5061_B20200511 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to ex… |
CVE-2022-25080 | Critical | 9.8 | 2022-02-24 | TOTOLink A830R V5.9c.4729_B20191112 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to… |
CVE-2022-25079 | Critical | 9.8 | 2022-02-24 | TOTOLink A810R V4.1.2cu.5182_B20201026 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers… |
CVE-2022-25078 | Critical | 9.8 | 2022-02-24 | TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers… |
CVE-2022-25077 | Critical | 9.8 | 2022-02-24 | TOTOLink A3100R V4.1.2cu.5050_B20200504 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers… |
CVE-2022-25076 | Critical | 9.8 | 2022-02-24 | TOTOLink A800R V4.1.2cu.5137_B20200730 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers… |
CVE-2022-25075 | Critical | 9.8 | 2022-02-24 | TOTOLink A3000RU V5.9c.2280_B20180512 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers t… |
CVE-2022-25074 | Critical | 9.8 | 2022-02-24 | TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability allows unauthentica… |
CVE-2022-25073 | Critical | 9.8 | 2022-02-24 | TL-WR841Nv14_US_0.9.1_4.18 routers were discovered to contain a stack overflow in the function dm_fillObjByStr(). This vulnerability allows unauthenticated att… |
CVE-2022-25072 | Critical | 9.8 | 2022-02-24 | TP-Link Archer A54 Archer A54(US)_V1_210111 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr(). This vulnerability allows u… |
CVE-2022-24633 | Medium | 5.3 | 2022-02-24 | All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARED/<username>". A ma… |
CVE-2022-24620 | Medium | 5.4 | 2022-02-24 | Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation. In this way, admin can steal webmaster's cook… |
CVE-2022-24615 | Medium | 5.5 | 2022-02-24 | zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This could be… |
CVE-2022-24614 | Medium | 5.5 | 2022-02-24 | When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-mem… |
CVE-2022-24613 | Medium | 5.5 | 2022-02-24 | metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash… |
CVE-2022-24610 | High | 8.6 | 2022-02-24 | Settings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and below shows the Wi-Fi passphrase hidden, but by editing/remov… |
CVE-2022-24599 | Medium | 6.5 | 2022-02-24 | In autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo, in printinfo.c, which allows an attacker to leak sensitive i… |
CVE-2022-24582 | Medium | 5.4 | 2022-02-24 | Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manage_user from User lists is vulnerable to XSS-Stored and PHPSESSID… |
CVE-2022-24566 | Medium | 5.4 | 2022-02-24 | In Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escaped when shown as con… |
CVE-2022-24565 | Medium | 5.4 | 2022-02-24 | Checkmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. The Alias of a site w… |