2022 CVEs (page 255)
Page 255 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23280 | Medium | 5.3 | 2022-02-09 | Microsoft Outlook for Mac Security Feature Bypass Vulnerability |
CVE-2022-23276 | High | 7.8 | 2022-02-09 | SQL Server for Linux Containers Elevation of Privilege Vulnerability |
CVE-2022-23274 | High | 8.8 | 2022-02-09 | Microsoft Dynamics GP Remote Code Execution Vulnerability |
CVE-2022-23273 | High | 7.1 | 2022-02-09 | Microsoft Dynamics GP Elevation Of Privilege Vulnerability |
CVE-2022-23272 | High | 8.1 | 2022-02-09 | Microsoft Dynamics GP Elevation Of Privilege Vulnerability |
CVE-2022-23271 | Medium | 6.5 | 2022-02-09 | Microsoft Dynamics GP Elevation Of Privilege Vulnerability |
CVE-2022-23269 | Medium | 5.4 | 2022-02-09 | Microsoft Dynamics GP Spoofing Vulnerability |
CVE-2022-23256 | High | 8.1 | 2022-02-09 | Azure Data Explorer Spoofing Vulnerability |
CVE-2022-23255 | Medium | 5.9 | 2022-02-09 | Microsoft OneDrive for Android Security Feature Bypass Vulnerability |
CVE-2022-23254 | Medium | 4.9 | 2022-02-09 | Microsoft Power BI Information Disclosure Vulnerability |
CVE-2022-23252 | Medium | 5.5 | 2022-02-09 | Microsoft Office Information Disclosure Vulnerability |
CVE-2022-22718 | High | 7.8 | 2022-02-09 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-22717 | High | 7.0 | 2022-02-09 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-22716 | Medium | 5.5 | 2022-02-09 | Microsoft Excel Information Disclosure Vulnerability |
CVE-2022-22715 | High | 7.8 | 2022-02-09 | Named Pipe File System Elevation of Privilege Vulnerability |
CVE-2022-22712 | Medium | 5.6 | 2022-02-09 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2022-22710 | Medium | 5.5 | 2022-02-09 | Windows Common Log File System Driver Denial of Service Vulnerability |
CVE-2022-22709 | High | 7.8 | 2022-02-09 | VP9 Video Extensions Remote Code Execution Vulnerability |
CVE-2022-22005 | High | 8.8 | 2022-02-09 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-22004 | High | 7.8 | 2022-02-09 | Microsoft Office ClickToRun Remote Code Execution Vulnerability |
CVE-2022-22003 | High | 7.8 | 2022-02-09 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2022-22002 | Medium | 5.5 | 2022-02-09 | Windows User Account Profile Picture Denial of Service Vulnerability |
CVE-2022-22001 | High | 7.8 | 2022-02-09 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
CVE-2022-22000 | High | 7.8 | 2022-02-09 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2022-21999 | High | 7.8 | 2022-02-09 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-21998 | Medium | 5.5 | 2022-02-09 | Windows Common Log File System Driver Information Disclosure Vulnerability |
CVE-2022-21997 | High | 7.1 | 2022-02-09 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-21996 | High | 7.8 | 2022-02-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2022-21995 | High | 7.9 | 2022-02-09 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2022-21994 | High | 7.8 | 2022-02-09 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2022-21993 | High | 7.5 | 2022-02-09 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability |
CVE-2022-21992 | High | 7.8 | 2022-02-09 | Windows Mobile Device Management Remote Code Execution Vulnerability |
CVE-2022-21991 | High | 8.1 | 2022-02-09 | Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability |
CVE-2022-21989 | High | 7.8 | 2022-02-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-21988 | High | 7.8 | 2022-02-09 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2022-21987 | High | 8.0 | 2022-02-09 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2022-21986 | High | 7.5 | 2022-02-09 | .NET Denial of Service Vulnerability |
CVE-2022-21985 | Medium | 5.5 | 2022-02-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2022-21984 | High | 8.8 | 2022-02-09 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2022-21981 | High | 7.8 | 2022-02-09 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2022-21974 | High | 7.8 | 2022-02-09 | Roaming Security Rights Management Services Remote Code Execution Vulnerability |
CVE-2022-21971 | High | 7.8 | 2022-02-09 | Windows Runtime Remote Code Execution Vulnerability |
CVE-2022-21968 | Medium | 4.3 | 2022-02-09 | Microsoft SharePoint Server Security Feature Bypass Vulnerability |
CVE-2022-21965 | High | 7.5 | 2022-02-09 | Microsoft Teams Denial of Service Vulnerability |
CVE-2022-21957 | High | 7.2 | 2022-02-09 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
CVE-2022-21927 | High | 7.8 | 2022-02-09 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-21926 | High | 7.8 | 2022-02-09 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-21844 | High | 7.8 | 2022-02-09 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2022-23312 | Medium | 6.1 | 2022-02-09 | A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application "Online Help" in affected p… |
CVE-2022-23102 | Medium | 6.1 | 2022-02-09 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacke… |
CVE-2022-0539 | Medium | 5.4 | 2022-02-09 | Cross-site Scripting (XSS) - Stored in Packagist ptrofimov/beanstalk_console prior to 1.7.14. |
CVE-2022-0538 | High | 7.5 | 2022-02-09 | Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability… |
CVE-2022-23378 | Medium | 5.4 | 2022-02-09 | A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D" parameter of a request made to /admin/… |
CVE-2022-0536 | Low | 2.6 | 2022-02-09 | Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8. |
CVE-2022-24694 | Medium | 4.3 | 2022-02-09 | In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the f… |
CVE-2022-0527 | Medium | 6.1 | 2022-02-09 | Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0. |
CVE-2022-0526 | Medium | 6.1 | 2022-02-09 | Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0. |
CVE-2022-24682 | Medium | 6.1 | 2022-02-09 | An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in Dec… |
CVE-2022-0525 | Critical | 9.1 | 2022-02-09 | Out-of-bounds Read in Homebrew mruby prior to 3.2. |
CVE-2022-24677 | Critical | 9.8 | 2022-02-09 | Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related configuration information to conf.php. |
CVE-2022-24676 | High | 8.8 | 2022-02-09 | update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP archive. |
CVE-2022-23627 | Medium | 5.0 | 2022-02-08 | ArchiSteamFarm (ASF) is a C# application with primary purpose of idling Steam cards from multiple accounts simultaneously. Due to a bug in ASF code, introduced… |
CVE-2022-23626 | High | 8.5 | 2022-02-08 | m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions `imagecreatefrom*` and `image*` have not been checked properly. Althoug… |
CVE-2022-0524 | High | 7.5 | 2022-02-08 | Business Logic Errors in GitHub repository publify/publify prior to 9.2.7. |
CVE-2022-21713 | Medium | 4.3 | 2022-02-08 | Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose multiple API endpoints which do not properly handle us… |
CVE-2022-21703 | Medium | 6.3 | 2022-02-08 | Grafana is an open-source platform for monitoring and observability. Affected versions are subject to a cross site request forgery vulnerability which allows a… |
CVE-2022-0523 | High | 7.8 | 2022-02-08 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-0522 | High | 7.1 | 2022-02-08 | Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2. |
CVE-2022-0521 | High | 7.1 | 2022-02-08 | Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-0520 | High | 7.8 | 2022-02-08 | Use After Free in NPM radare2.js prior to 5.6.2. |
CVE-2022-0519 | High | 7.1 | 2022-02-08 | Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-0518 | High | 7.1 | 2022-02-08 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-21702 | Medium | 6.5 | 2022-02-08 | Grafana is an open-source platform for monitoring and observability. In affected versions an attacker could serve HTML content thru the Grafana datasource or p… |
CVE-2022-0139 | Critical | 9.8 | 2022-02-08 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0. |
CVE-2022-0510 | Medium | 5.4 | 2022-02-08 | Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore prior to 10.3.1. |
CVE-2022-23340 | Critical | 9.8 | 2022-02-08 | Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results. |
CVE-2022-23331 | High | 8.8 | 2022-02-08 | In DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information and can change the administrator password. |
CVE-2022-0509 | Medium | 5.4 | 2022-02-08 | Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.3.1. |
CVE-2022-22146 | Medium | 6.1 | 2022-02-08 | Cross-site scripting vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vector… |
CVE-2022-22142 | Medium | 6.1 | 2022-02-08 | Reflected cross-site scripting vulnerability in the checkbox of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject… |
CVE-2022-21805 | Medium | 6.1 | 2022-02-08 | Reflected cross-site scripting vulnerability in the attached file name of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker… |
CVE-2022-21799 | Medium | 5.2 | 2022-02-08 | Cross-site scripting vulnerability in ELECOM LAN router WRC-300FEBK-R firmware v1.13 and earlier allows an attacker on the adjacent network to inject an arbitr… |
CVE-2022-21241 | Critical | 9.6 | 2022-02-08 | Cross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauthenticated attacker to inject an arbitrary script or an arbitrary OS command via… |
CVE-2022-21193 | High | 7.5 | 2022-02-08 | Directory traversal vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated attacker to obtain an arbitrary file on the server via unspeci… |
CVE-2022-21173 | High | 8.8 | 2022-02-08 | Hidden functionality vulnerability in ELECOM LAN routers (WRH-300BK3 firmware v1.05 and earlier, WRH-300WH3 firmware v1.05 and earlier, WRH-300BK3-S firmware v… |
CVE-2022-0508 | Medium | 5.3 | 2022-02-08 | Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832 |
CVE-2022-0506 | Medium | 5.4 | 2022-02-08 | Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11. |
CVE-2022-0505 | Medium | 6.5 | 2022-02-08 | Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11. |
CVE-2022-0504 | Medium | 6.5 | 2022-02-08 | Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11. |
CVE-2022-24450 | High | 8.8 | 2022-02-08 | NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically… |
CVE-2022-23624 | High | 8.1 | 2022-02-07 | Frourio-express is a minimal full stack framework, for TypeScript. Frourio-express users who uses frourio-express version prior to v0.26.0 and integration with… |
CVE-2022-23623 | High | 8.1 | 2022-02-07 | Frourio is a full stack framework, for TypeScript. Frourio users who uses frourio version prior to v0.26.0 and integration with class-validator through `valida… |
CVE-2022-23613 | High | 7.8 | 2022-02-07 | xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows a… |
CVE-2022-21712 | High | 7.5 | 2022-02-07 | twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-ori… |
CVE-2022-21816 | Medium | 5.5 | 2022-02-07 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where a user in the guest OS can cause a GPU interrupt storm on the hyper… |
CVE-2022-21815 | Medium | 5.5 | 2022-02-07 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer derefere… |
CVE-2022-21814 | Medium | 6.1 | 2022-02-07 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges ma… |
CVE-2022-21813 | Medium | 6.1 | 2022-02-07 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow… |
CVE-2022-22931 | Medium | 4.3 | 2022-02-07 | Fix of CVE-2021-40525 do not prepend delimiters upon valid directory validations. Affected implementations include: - maildir mailbox store - Sieve file reposi… |
CVE-2022-23263 | High | 7.7 | 2022-02-07 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |