2022 CVEs (page 255)
Page 255 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-20017 | Medium | 5.5 | 2022-02-09 | In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional… |
CVE-2022-0534 | Medium | 5.5 | 2022-02-09 | A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif_get_code() and occurs when opening a malicious GIF fi… |
CVE-2022-0532 | Medium | 4.2 | 2022-02-09 | An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will b… |
CVE-2022-0530 | Medium | 5.5 | 2022-02-09 | A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This f… |
CVE-2022-0529 | Medium | 5.5 | 2022-02-09 | A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This f… |
CVE-2022-0391 | High | 7.5 | 2022-02-09 | A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The is… |
CVE-2022-0162 | High | 8.4 | 2022-02-09 | The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication information in cleartext… |
CVE-2022-23631 | Critical | 9.0 | 2022-02-09 | superjson is a program to allow JavaScript expressions to be serialized to a superset of JSON. In versions prior to 1.8.1 superjson allows input to run arbitra… |
CVE-2022-23628 | Medium | 6.3 | 2022-02-09 | OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree (AST) that contains synthetic nodes cou… |
CVE-2022-23622 | High | 7.4 | 2022-02-09 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions there is a cross site scripting (… |
CVE-2022-23621 | Medium | 5.5 | 2022-02-09 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with SCRIPT right can re… |
CVE-2022-23620 | Medium | 6.8 | 2022-02-09 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions AbstractSxExportURLFactoryActionH… |
CVE-2022-23619 | Medium | 5.3 | 2022-02-09 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to guess if a user… |
CVE-2022-23618 | Medium | 4.7 | 2022-02-09 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions there is no protection against UR… |
CVE-2022-23617 | Medium | 6.5 | 2022-02-09 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy… |
CVE-2022-23616 | High | 8.8 | 2022-02-09 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible for an unprivileged… |
CVE-2022-23615 | Medium | 5.4 | 2022-02-09 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with SCRIPT right can sa… |
CVE-2022-22567 | Medium | 4.7 | 2022-02-09 | Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authenticated malici… |
CVE-2022-22566 | Medium | 6.9 | 2022-02-09 | Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical acces… |
CVE-2022-21660 | High | 8.1 | 2022-02-09 | Gin-vue-admin is a backstage management system based on vue and gin. In versions prior to 2.4.7 low privilege users are able to modify higher privilege users… |
CVE-2022-23280 | Medium | 5.3 | 2022-02-09 | Microsoft Outlook for Mac Security Feature Bypass Vulnerability |
CVE-2022-23276 | High | 7.8 | 2022-02-09 | SQL Server for Linux Containers Elevation of Privilege Vulnerability |
CVE-2022-23274 | High | 8.8 | 2022-02-09 | Microsoft Dynamics GP Remote Code Execution Vulnerability |
CVE-2022-23273 | High | 7.1 | 2022-02-09 | Microsoft Dynamics GP Elevation Of Privilege Vulnerability |
CVE-2022-23272 | High | 8.1 | 2022-02-09 | Microsoft Dynamics GP Elevation Of Privilege Vulnerability |
CVE-2022-23271 | Medium | 6.5 | 2022-02-09 | Microsoft Dynamics GP Elevation Of Privilege Vulnerability |
CVE-2022-23269 | Medium | 5.4 | 2022-02-09 | Microsoft Dynamics GP Spoofing Vulnerability |
CVE-2022-23256 | High | 8.1 | 2022-02-09 | Azure Data Explorer Spoofing Vulnerability |
CVE-2022-23255 | Medium | 5.9 | 2022-02-09 | Microsoft OneDrive for Android Security Feature Bypass Vulnerability |
CVE-2022-23254 | Medium | 4.9 | 2022-02-09 | Microsoft Power BI Information Disclosure Vulnerability |
CVE-2022-23252 | Medium | 5.5 | 2022-02-09 | Microsoft Office Information Disclosure Vulnerability |
CVE-2022-22718 | High | 7.8 | 2022-02-09 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-22717 | High | 7.0 | 2022-02-09 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-22716 | Medium | 5.5 | 2022-02-09 | Microsoft Excel Information Disclosure Vulnerability |
CVE-2022-22715 | High | 7.8 | 2022-02-09 | Named Pipe File System Elevation of Privilege Vulnerability |
CVE-2022-22712 | Medium | 5.6 | 2022-02-09 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2022-22710 | Medium | 5.5 | 2022-02-09 | Windows Common Log File System Driver Denial of Service Vulnerability |
CVE-2022-22709 | High | 7.8 | 2022-02-09 | VP9 Video Extensions Remote Code Execution Vulnerability |
CVE-2022-22005 | High | 8.8 | 2022-02-09 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-22004 | High | 7.8 | 2022-02-09 | Microsoft Office ClickToRun Remote Code Execution Vulnerability |
CVE-2022-22003 | High | 7.8 | 2022-02-09 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2022-22002 | Medium | 5.5 | 2022-02-09 | Windows User Account Profile Picture Denial of Service Vulnerability |
CVE-2022-22001 | High | 7.8 | 2022-02-09 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
CVE-2022-22000 | High | 7.8 | 2022-02-09 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2022-21999 | High | 7.8 | 2022-02-09 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-21998 | Medium | 5.5 | 2022-02-09 | Windows Common Log File System Driver Information Disclosure Vulnerability |
CVE-2022-21997 | High | 7.1 | 2022-02-09 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-21996 | High | 7.8 | 2022-02-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2022-21995 | High | 7.9 | 2022-02-09 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2022-21994 | High | 7.8 | 2022-02-09 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2022-21993 | High | 7.5 | 2022-02-09 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability |
CVE-2022-21992 | High | 7.8 | 2022-02-09 | Windows Mobile Device Management Remote Code Execution Vulnerability |
CVE-2022-21991 | High | 8.1 | 2022-02-09 | Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability |
CVE-2022-21989 | High | 7.8 | 2022-02-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-21988 | High | 7.8 | 2022-02-09 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2022-21987 | High | 8.0 | 2022-02-09 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2022-21986 | High | 7.5 | 2022-02-09 | .NET Denial of Service Vulnerability |
CVE-2022-21985 | Medium | 5.5 | 2022-02-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2022-21984 | High | 8.8 | 2022-02-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-21981 | High | 7.8 | 2022-02-09 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2022-21974 | High | 7.8 | 2022-02-09 | Roaming Security Rights Management Services Remote Code Execution Vulnerability |
CVE-2022-21971 | High | 7.8 | 2022-02-09 | Windows Runtime Remote Code Execution Vulnerability |
CVE-2022-21968 | Medium | 4.3 | 2022-02-09 | Microsoft SharePoint Server Security Feature Bypass Vulnerability |
CVE-2022-21965 | High | 7.5 | 2022-02-09 | Microsoft Teams Denial of Service Vulnerability |
CVE-2022-21957 | High | 7.2 | 2022-02-09 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
CVE-2022-21927 | High | 7.8 | 2022-02-09 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-21926 | High | 7.8 | 2022-02-09 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-21844 | High | 7.8 | 2022-02-09 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-23312 | Medium | 6.1 | 2022-02-09 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application "Online Help" in affected p… |
CVE-2022-23102 | Medium | 6.1 | 2022-02-09 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacke… |
CVE-2022-0539 | Medium | 5.4 | 2022-02-09 | Cross-site Scripting (XSS) - Stored in Packagist ptrofimov/beanstalk_console prior to 1.7.14. |
CVE-2022-0538 | High | 7.5 | 2022-02-09 | Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability… |
CVE-2022-23378 | Medium | 5.4 | 2022-02-09 | A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D" parameter of a request made to /admin/… |
CVE-2022-0536 | Low | 2.6 | 2022-02-09 | Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8. |
CVE-2022-24694 | Medium | 4.3 | 2022-02-09 | In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the f… |
CVE-2022-0527 | Medium | 6.1 | 2022-02-09 | Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0. |
CVE-2022-0526 | Medium | 6.1 | 2022-02-09 | Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0. |
CVE-2022-24682 | Medium | 6.1 | 2022-02-09 | An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in Dec… |
CVE-2022-0525 | Critical | 9.1 | 2022-02-09 | Out-of-bounds Read in Homebrew mruby prior to 3.2. |
CVE-2022-24677 | Critical | 9.8 | 2022-02-09 | Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php. |
CVE-2022-24676 | High | 8.8 | 2022-02-09 | update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive. |
CVE-2022-23627 | Medium | 5.0 | 2022-02-08 | ArchiSteamFarm (ASF) is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. Due to a bug in ASF code, introduced… |
CVE-2022-23626 | High | 8.5 | 2022-02-08 | m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions `imagecreatefrom*` and `image*` have not been checked properly. Althoug… |
CVE-2022-0524 | High | 7.5 | 2022-02-08 | Business Logic Errors in GitHub repository publify/publify prior to 9.2.7. |
CVE-2022-21713 | Medium | 4.3 | 2022-02-08 | Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose multiple API endpoints which do not properly handle us… |
CVE-2022-21703 | Medium | 6.3 | 2022-02-08 | Grafana is an open-source platform for monitoring and observability. Affected versions are subject to a cross site request forgery vulnerability which allows a… |
CVE-2022-0523 | High | 7.8 | 2022-02-08 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-0522 | High | 7.1 | 2022-02-08 | Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2. |
CVE-2022-0521 | High | 7.1 | 2022-02-08 | Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-0520 | High | 7.8 | 2022-02-08 | Use After Free in NPM radare2.js prior to 5.6.2. |
CVE-2022-0519 | High | 7.1 | 2022-02-08 | Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-0518 | High | 7.1 | 2022-02-08 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-21702 | Medium | 6.5 | 2022-02-08 | Grafana is an open-source platform for monitoring and observability. In affected versions an attacker could serve HTML content thru the Grafana datasource or p… |
CVE-2022-0139 | Critical | 9.8 | 2022-02-08 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0. |
CVE-2022-0510 | Medium | 5.4 | 2022-02-08 | Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore prior to 10.3.1. |
CVE-2022-23340 | Critical | 9.8 | 2022-02-08 | Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results. |
CVE-2022-23331 | High | 8.8 | 2022-02-08 | In DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information and can change the administrator password. |
CVE-2022-0509 | Medium | 5.4 | 2022-02-08 | Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.3.1. |
CVE-2022-22146 | Medium | 6.1 | 2022-02-08 | Cross-site scripting vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vector… |
CVE-2022-22142 | Medium | 6.1 | 2022-02-08 | Reflected cross-site scripting vulnerability in the checkbox of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject… |