2022 CVEs (page 29)
Page 29 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-43675 | Medium | 6.1 | 2023-12-25 | An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS in the Network Element Manager exists via /oms1350/pages/otn/cpbLogDisplay via the filename paramet… |
CVE-2022-41762 | Medium | 6.1 | 2023-12-25 | An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected XSS vulnerabilities exist in the Network Element Manager via any parameter to log.pl, the benc… |
CVE-2022-41761 | Medium | 6.5 | 2023-12-25 | An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the l… |
CVE-2022-41760 | Medium | 6.5 | 2023-12-25 | An issue was discovered in NOKIA NFM-T R19.9. Relative Path Traversal can occur under /oms1350/data/cpb/log of the Network Element Manager via the filename par… |
CVE-2022-39822 | High | 8.8 | 2023-12-25 | In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via the id or host HTTP GET parameter. An auth… |
CVE-2022-39820 | Medium | 6.5 | 2023-12-25 | In Network Element Manager in NOKIA NFM-T R19.9, an Unprotected Storage of Credentials vulnerability occurs under /root/RestUploadManager.xml.DRC and /DEPOT/KE… |
CVE-2022-39818 | High | 8.8 | 2023-12-25 | In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter. This allows… |
CVE-2022-39337 | High | 7.5 | 2023-12-22 | Hertzbeat is an open source, real-time monitoring system with custom-monitoring, high performance cluster, prometheus-like and agentless. Hertzbeat versions 1… |
CVE-2022-47532 | Critical | 9.8 | 2023-12-22 | FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users§ion=cpanel&page=list request. |
CVE-2022-45377 | Medium | 6.5 | 2023-12-21 | Unrestricted Upload of File with Dangerous Type vulnerability in Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce.This issue affects Drag… |
CVE-2022-44684 | Medium | 6.5 | 2023-12-20 | Windows Local Session Manager (LSM) Denial of Service Vulnerability |
CVE-2022-47599 | Medium | 5.5 | 2023-12-20 | Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit… |
CVE-2022-47597 | Medium | 5.3 | 2023-12-20 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Popup Maker Popup Maker – Popup for opt-ins, lead gen, & more.This issue affects Po… |
CVE-2022-43450 | Medium | 4.3 | 2023-12-19 | Authorization Bypass Through User-Controlled Key vulnerability in XWP Stream.This issue affects Stream: from n/a through 3.9.2. |
CVE-2022-45809 | Medium | 5.3 | 2023-12-19 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.0.0. |
CVE-2022-40312 | Medium | 5.5 | 2023-12-18 | Server-Side Request Forgery (SSRF) vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform.This issue affects GiveWP – Donation Plugin and Fu… |
CVE-2022-41677 | Medium | 5.3 | 2023-12-18 | An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabiliti… |
CVE-2022-24351 | Medium | 4.7 | 2023-12-16 | TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before version 05.36.29, Kernel 5.4 version before… |
CVE-2022-45365 | High | 7.1 | 2023-12-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aleksandar Urošević Stock Ticker allows Reflected XSS.Thi… |
CVE-2022-43843 | Medium | 5.9 | 2023-12-14 | IBM Spectrum Scale 5.1.5.0 through 5.1.5.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informat… |
CVE-2022-22942 | High | 7.8 | 2023-12-13 | The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the s… |
CVE-2022-27488 | High | 8.3 | 2023-12-13 | A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0… |
CVE-2022-44543 | Medium | 5.3 | 2023-12-12 | The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if there is a us… |
CVE-2022-47375 | High | 7.5 | 2023-12-12 | A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7… |
CVE-2022-47374 | High | 7.5 | 2023-12-12 | A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7… |
CVE-2022-46141 | Medium | 4.2 | 2023-12-12 | A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulnerability could allow a local attacker t… |
CVE-2022-42784 | High | 7.6 | 2023-12-12 | A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3)… |
CVE-2022-48616 | Medium | 6.4 | 2023-12-12 | A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability may allow attackers to gain higher pri… |
CVE-2022-48615 | Medium | 4.8 | 2023-12-12 | An improper access control vulnerability exists in a Huawei datacom product. Attackers can exploit this vulnerability to obtain partial device information. |
CVE-2022-48614 | Medium | 6.1 | 2023-12-10 | Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS. |
CVE-2022-45362 | High | 7.2 | 2023-12-07 | Server-Side Request Forgery (SSRF) vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway: from n/a through 2.7.0. |
CVE-2022-24403 | Medium | 4.3 | 2023-12-05 | The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (Class 2 networks) or CCK (Class 3 networks). The s… |
CVE-2022-47531 | High | 8.8 | 2023-12-05 | An issue was discovered in Ericsson Evolved Packet Gateway (EPG) versions 3.x before 3.25 and 2.x before 2.16, allows authenticated users to bypass system CLI… |
CVE-2022-46480 | High | 8.1 | 2023-12-05 | Incorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3 2nd Gen Smart Lock Firmware 02.27.0012 allows an attacker to s… |
CVE-2022-48464 | Medium | 5.5 | 2023-12-04 | In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution… |
CVE-2022-48463 | Medium | 5.5 | 2023-12-04 | In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution… |
CVE-2022-48462 | Medium | 5.5 | 2023-12-04 | In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution… |
CVE-2022-4957 | Low | 3.5 | 2023-12-03 | A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality… |
CVE-2022-45135 | Critical | 9.8 | 2023-11-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Cocoon.This issue affects Apache Cocoon: from 2.2… |
CVE-2022-42541 | Critical | 9.8 | 2023-11-29 | Remote code execution |
CVE-2022-42540 | Critical | 9.8 | 2023-11-29 | Elevation of privilege |
CVE-2022-42539 | High | 7.5 | 2023-11-29 | Information disclosure |
CVE-2022-42538 | Critical | 9.8 | 2023-11-29 | Elevation of privilege |
CVE-2022-42537 | Critical | 9.8 | 2023-11-29 | Remote code execution |
CVE-2022-42536 | Critical | 9.8 | 2023-11-29 | Remote code execution |
CVE-2022-41678 | High | 8.8 | 2023-11-28 | Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolok… |
CVE-2022-41951 | High | 8.5 | 2023-11-27 | OroPlatform is a PHP Business Application Platform (BAP) designed to make development of custom business applications easier and faster. Path Traversal is poss… |
CVE-2022-44011 | Medium | 6.5 | 2023-11-23 | An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could cause a heap buffer overflow and crash th… |
CVE-2022-44010 | High | 7.5 | 2023-11-23 | An issue was discovered in ClickHouse before 22.9.1.2603. An attacker could send a crafted HTTP request to the HTTP Endpoint (usually listening on port 8123 by… |
CVE-2022-36777 | Medium | 4.3 | 2023-11-22 | IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.16.0could allow an authenticated user to obta… |
CVE-2022-35638 | Medium | 4.3 | 2023-11-22 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 is vulnerable to cross-site request forgery which could allow… |
CVE-2022-46337 | Critical | 9.8 | 2023-11-20 | A cleverly devised username might bypass LDAP authentication checks. In LDAP-authenticated Derby installations, this could let an attacker fill up the disk b… |
CVE-2022-45781 | High | 8.8 | 2023-11-14 | Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.1_2994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName. |
CVE-2022-46647 | Low | 2.2 | 2023-11-14 | Insertion of sensitive information into log file for some Intel Unison software may allow an authenticated user to potentially enable information disclosure vi… |
CVE-2022-46646 | Low | 2.2 | 2023-11-14 | Exposure of sensitive information to an unauthorized actor for some Intel Unison software may allow an authenticated user to potentially enable information dis… |
CVE-2022-46301 | Low | 1.9 | 2023-11-14 | Improper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access. |
CVE-2022-46299 | Low | 3.3 | 2023-11-14 | Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local acce… |
CVE-2022-46298 | Low | 1.9 | 2023-11-14 | Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access. |
CVE-2022-45469 | Low | 2.2 | 2023-11-14 | Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2022-45109 | Low | 3.3 | 2023-11-14 | Improper initialization for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access. |
CVE-2022-43666 | Low | 3.3 | 2023-11-14 | Exposure of sensitive system information due to uncleared debug information for some Intel Unison software may allow an authenticated user to potentially enabl… |
CVE-2022-43477 | Low | 3.3 | 2023-11-14 | Incomplete cleanup for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access. |
CVE-2022-42879 | Medium | 6.1 | 2023-11-14 | NULL pointer dereference in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable denial of s… |
CVE-2022-41700 | Medium | 6.7 | 2023-11-14 | Insecure inherited permissions in some Intel(R) NUC Pro Software Suite installation software before version 2.0.0.9 may allow an authenticated user to potentia… |
CVE-2022-41689 | High | 7.3 | 2023-11-14 | Improper access control in some Intel In-Band Manageability software before version 3.0.14 may allow an authenticated user to potentially enable escalation of… |
CVE-2022-41659 | Low | 1.9 | 2023-11-14 | Improper access control for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access. |
CVE-2022-40681 | High | 7.1 | 2023-11-14 | A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to cause denial o… |
CVE-2022-38786 | Medium | 6.7 | 2023-11-14 | Improper access control in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authenticated user to potentially enable escalati… |
CVE-2022-36396 | High | 8.2 | 2023-11-14 | Improper access control in some Intel(R) Aptio* V UEFI Firmware Integrator Tools before version iDmiEdit-Linux-5.27.06.0017 may allow a privileged user to pote… |
CVE-2022-36374 | High | 7.5 | 2023-11-14 | Improper access control in some Intel(R) Aptio* V UEFI Firmware Integrator Tools before version iDmi Windows 5.27.03.0003 may allow a privileged user to potent… |
CVE-2022-33945 | High | 8.2 | 2023-11-14 | Improper input validation in some Intel(R) Server board and Intel(R) Server System BIOS firmware may allow a privileged user to potentially enable escalation o… |
CVE-2022-33898 | Medium | 6.7 | 2023-11-14 | Insecure inherited permissions in some Intel(R) NUC Watchdog Timer installation software before version 2.0.21.0 may allow an authenticated user to potentially… |
CVE-2022-29510 | High | 7.5 | 2023-11-14 | Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escal… |
CVE-2022-29262 | High | 7.9 | 2023-11-14 | Improper buffer restrictions in some Intel(R) Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local ac… |
CVE-2022-27229 | Medium | 6.7 | 2023-11-14 | Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated u… |
CVE-2022-24379 | High | 7.5 | 2023-11-14 | Improper input validation in some Intel(R) Server System M70KLP Family BIOS firmware before version 01.04.0029 may allow a privileged user to potentially enabl… |
CVE-2022-23830 | Low | 1.9 | 2023-11-14 | SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity. |
CVE-2022-23821 | Critical | 9.8 | 2023-11-14 | Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution. |
CVE-2022-23820 | High | 7.5 | 2023-11-14 | Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution. |
CVE-2022-45835 | Medium | 5.8 | 2023-11-13 | Server-Side Request Forgery (SSRF) vulnerability in PhonePe PhonePe Payment Solutions.This issue affects PhonePe Payment Solutions: from n/a through 1.0.15. |
CVE-2022-48613 | Medium | 5.9 | 2023-11-08 | Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable values to be read with the condition evalua… |
CVE-2022-47181 | Medium | 4.3 | 2023-11-07 | Cross-Site Request Forgery (CSRF) vulnerability in wpexpertsio Email Templates Customizer and Designer for WordPress and WooCommerce email-templates allows Cro… |
CVE-2022-44738 | Medium | 5.8 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Patrick Robrecht Posts and Users Stats.This issue affects Posts and Users Stats: fro… |
CVE-2022-42882 | Medium | 5.8 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Shambix Simple CSV/XLS Exporter.This issue affects Simple CSV/XLS Exporter: from n/a… |
CVE-2022-41616 | High | 7.6 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Kaushik Kalathiya Export Users Data CSV.This issue affects Export Users Data CSV: fr… |
CVE-2022-38702 | Medium | 5.8 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Nakashima Masahiro WP CSV Exporter.This issue affects WP CSV Exporter: from n/a thro… |
CVE-2022-46821 | Medium | 5.8 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Jackmail & Sarbacane Emails & Newsletters with Jackmail.This issue affects Emails &… |
CVE-2022-46809 | Medium | 6.1 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce.This issue aff… |
CVE-2022-46804 | Medium | 5.8 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Narola Infotech Solutions LLP Export Users Data Distinct.This issue affects Export U… |
CVE-2022-46803 | Medium | 6.1 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Noptin Newsletter Simple Newsletter Plugin – Noptin.This issue affects Simple Newsle… |
CVE-2022-46801 | Medium | 6.1 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Paul Ryley Site Reviews.This issue affects Site Reviews: from n/a through 6.2.0. |
CVE-2022-45810 | Medium | 4.7 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Icegram Icegram Express – Email Marketing, Newsletters and Automation for WordPress… |
CVE-2022-45370 | Medium | 6.1 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee WordPress Comments Import & Export.This issue affects WordPress Comments I… |
CVE-2022-45360 | Medium | 4.7 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Scott Reilly Commenter Emails.This issue affects Commenter Emails: from n/a through… |
CVE-2022-45348 | Medium | 5.8 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in anmari amr users.This issue affects amr users: from n/a through 4.59.4. |
CVE-2022-45078 | Medium | 5.9 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Solwin Infotech User Blocker.This issue affects User Blocker: from n/a through 1.5.5. |
CVE-2022-46802 | Medium | 6.1 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee Product Reviews Import Export for WooCommerce.This issue affects Product R… |
CVE-2022-45357 | Medium | 6.1 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Lenderd 1003 Mortgage Application.This issue affects 1003 Mortgage Application: from… |
CVE-2022-47442 | Medium | 5.8 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a through 1.2.3.9. |
CVE-2022-45350 | Medium | 5.8 | 2023-11-07 | Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple History – user activity log, audit tool.This issue affects Sim… |