2022 CVEs (page 34)
Page 34 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-41793 | Critical | 9.8 | 2023-07-21 | An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafted malformed… |
CVE-2022-37331 | High | 7.3 | 2023-07-21 | An out-of-bounds write vulnerability exists in the Gaussian format orientation functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially crafte… |
CVE-2022-2127 | Medium | 5.9 | 2023-07-20 | An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the… |
CVE-2022-28737 | Medium | 6.5 | 2023-07-20 | There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the S… |
CVE-2022-28736 | Medium | 6.4 | 2023-07-20 | There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems that doesn't support mu… |
CVE-2022-28735 | Medium | 6.7 | 2023-07-20 | The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverifie… |
CVE-2022-28734 | High | 8.1 | 2023-07-20 | Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally moves its internal data buffer point by on… |
CVE-2022-28733 | High | 8.1 | 2023-07-20 | Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->… |
CVE-2022-40896 | Medium | 5.5 | 2023-07-19 | A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer. |
CVE-2022-43910 | High | 8.4 | 2023-07-19 | IBM Security Guardium 11.3 could allow a local user to escalate their privileges due to improper permission controls. IBM X-Force ID: 240908. |
CVE-2022-43908 | Medium | 4.3 | 2023-07-19 | IBM Security Guardium 11.3 could allow an authenticated user to cause a denial of service due to improper input validation. IBM X-Force ID: 240903. |
CVE-2022-47421 | Medium | 5.9 | 2023-07-18 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember (free), Repute InfoSystems ARMember (premium) plugins. |
CVE-2022-47085 | High | 7.5 | 2023-07-18 | An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the print_panic function in repo… |
CVE-2022-41409 | High | 7.5 | 2023-07-18 | Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input. |
CVE-2022-34155 | High | 8.8 | 2023-07-18 | Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Sing… |
CVE-2022-33065 | High | 7.8 | 2023-07-18 | Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an… |
CVE-2022-33064 | High | 7.8 | 2023-07-18 | An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker to execute arbitrar… |
CVE-2022-26563 | High | 8.8 | 2023-07-18 | An issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidges due to improper PAM-authorization. |
CVE-2022-47169 | Medium | 4.3 | 2023-07-18 | Cross-Site Request Forgery (CSRF) vulnerability in StaxWP Visibility Logic for Elementor plugin <= 2.3.4 versions. |
CVE-2022-46857 | Medium | 6.5 | 2023-07-18 | Cross-Site Request Forgery (CSRF) vulnerability in SiteAlert plugin <= 1.9.7 versions. |
CVE-2022-45828 | Medium | 4.3 | 2023-07-18 | Cross-Site Request Forgery (CSRF) vulnerability in NooTheme Noo Timetable plugin <= 2.1.3 versions. |
CVE-2022-4146 | High | 7.3 | 2023-07-18 | Expression Language Injection vulnerability in Hitachi Replication Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Replicat… |
CVE-2022-30858 | Medium | 6.5 | 2023-07-17 | An issue was discovered in ngiflib 0.4. There is SEGV in SDL_LoadAnimatedGif when use SDLaffgif. poc : ./SDLaffgif CA_file2_0 |
CVE-2022-38062 | Medium | 4.3 | 2023-07-17 | Cross-Site Request Forgery (CSRF) vulnerability in Metagauss Download Theme plugin <= 1.0.9 versions. |
CVE-2022-36424 | Medium | 4.3 | 2023-07-17 | Cross-Site Request Forgery (CSRF) vulnerability in Nikola Loncar Easy Appointments plugin <= 3.11.9 versions. |
CVE-2022-47172 | Medium | 4.3 | 2023-07-17 | Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.6.2 versions. |
CVE-2022-4023 | Medium | 5.3 | 2023-07-17 | The 3DPrint WordPress plugin before 3.5.6.9 does not protect against CSRF attacks in the modified version of Tiny File Manager included with the plugin, allowi… |
CVE-2022-4952 | Low | 3.5 | 2023-07-17 | A vulnerability has been found in OmniSharp csharp-language-server-protocol up to 0.19.6 and classified as problematic. This vulnerability affects the function… |
CVE-2022-42045 | Medium | 6.7 | 2023-07-13 | Certain Zemana products are vulnerable to Arbitrary code injection. This affects Watchdog Anti-Malware 4.1.422 and Zemana AntiMalware 3.2.28. |
CVE-2022-24834 | High | 7.0 | 2023-07-13 | Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and r… |
CVE-2022-46651 | Medium | 6.5 | 2023-07-12 | Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection e… |
CVE-2022-45855 | High | 8.0 | 2023-07-12 | SpringEL injection in the metrics source in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary code remotely. User… |
CVE-2022-42009 | High | 8.0 | 2023-07-12 | SpringEL injection in the server agent in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary code remotely. Users… |
CVE-2022-48451 | Medium | 4.1 | 2023-07-12 | In bluetooth service, there is a possible out of bounds write due to race condition. This could lead to local denial of service with System execution privileg… |
CVE-2022-48450 | Medium | 4.4 | 2023-07-12 | In bluetooth service, there is a possible missing params check. This could lead to local denial of service with System execution privileges needed. |
CVE-2022-48521 | Medium | 5.3 | 2023-07-11 | An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authenticatio… |
CVE-2022-23447 | High | 7.5 | 2023-07-11 | An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiExtender management interface 7.0.0 through 7… |
CVE-2022-31810 | High | 7.5 | 2023-07-11 | A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications improperly check the size of data packets rec… |
CVE-2022-29562 | Low | 3.7 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2022-29561 | High | 7.5 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2022-22302 | Medium | 5.3 | 2023-07-11 | A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1, 6.2.0 through 6.2.9 and 6.0.0 through 6.0… |
CVE-2022-45823 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in GalleryPlugins Video Contest WordPress plugin <= 3.2 versions. |
CVE-2022-4361 | Critical | 10.0 | 2023-07-07 | Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerabili… |
CVE-2022-48520 | High | 7.5 | 2023-07-06 | Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48519 | High | 7.5 | 2023-07-06 | Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48518 | Medium | 5.5 | 2023-07-06 | Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation… |
CVE-2022-48517 | High | 7.5 | 2023-07-06 | Unauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48516 | High | 7.5 | 2023-07-06 | Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation of this vulnerability will affect confid… |
CVE-2022-48515 | High | 7.5 | 2023-07-06 | Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2022-48514 | High | 7.5 | 2023-07-06 | The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2022-48513 | Critical | 9.8 | 2023-07-06 | Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access. |
CVE-2022-48512 | Critical | 9.8 | 2023-07-06 | Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perfor… |
CVE-2022-48511 | Critical | 9.8 | 2023-07-06 | Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio featu… |
CVE-2022-48510 | Critical | 9.8 | 2023-07-06 | Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations. |
CVE-2022-48509 | Medium | 5.9 | 2023-07-06 | Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may caus… |
CVE-2022-48508 | High | 7.5 | 2023-07-06 | Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity. |
CVE-2022-48507 | High | 7.5 | 2023-07-06 | Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2022-46080 | Critical | 9.8 | 2023-07-06 | Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET. |
CVE-2022-42175 | High | 8.8 | 2023-07-05 | Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker to change the password and hostname of other customer servers… |
CVE-2022-4623 | Medium | 5.4 | 2023-07-04 | The ND Shortcodes WordPress plugin before 7.0 does not validate and escape numerous of its shortcode attributes before outputting them back in a page/post wher… |
CVE-2022-32666 | High | 7.5 | 2023-07-04 | In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service with no additional e… |
CVE-2022-44720 | Critical | 9.8 | 2023-06-29 | An issue was discovered in Weblib Ucopia before 6.0.13. OS Command Injection injection can occur, related to chroot. |
CVE-2022-44719 | High | 7.5 | 2023-06-29 | An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions. |
CVE-2022-23264 | Medium | 4.7 | 2023-06-29 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2022-46408 | Medium | 6.8 | 2023-06-29 | Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager (NCM) where improper Neutraliz… |
CVE-2022-46407 | Medium | 4.8 | 2023-06-29 | Ericsson Network Manager (ENM), versions prior to 22.2, contains a vulnerability in the REST endpoint “editprofile” where Open Redirect HTTP Header Injection c… |
CVE-2022-26899 | Medium | 6.3 | 2023-06-29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-29147 | Low | 3.1 | 2023-06-29 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2022-29146 | High | 8.3 | 2023-06-29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-29144 | High | 7.5 | 2023-06-29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-4143 | Medium | 6.4 | 2023-06-28 | An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that all… |
CVE-2022-20443 | High | 7.8 | 2023-06-28 | In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay attack. This could lead to local escalati… |
CVE-2022-44276 | Critical | 9.8 | 2023-06-28 | In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE. |
CVE-2022-48505 | Medium | 5.5 | 2023-06-28 | This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system |
CVE-2022-34352 | Medium | 6.5 | 2023-06-27 | IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see dat… |
CVE-2022-4115 | Medium | 5.4 | 2023-06-27 | The Editorial Calendar WordPress plugin before 3.8.3 does not sanitise and escape its settings, allowing users with roles as low as contributor to inject arbit… |
CVE-2022-48336 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow. |
CVE-2022-48335 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resultant buffer overflow. |
CVE-2022-48334 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys total_len+file_name_len integer overflow and resultant buffer overflow. |
CVE-2022-48333 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len+feature_name_len integer overflow and resultant buffer overflow. |
CVE-2022-48332 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer overflow and resultant buffer overflow. |
CVE-2022-40010 | Medium | 5.4 | 2023-06-26 | Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50_multi was discovered to contain a cross-site scripting (XSS) vulnerability via the deviceId parameter… |
CVE-2022-48331 | Critical | 9.8 | 2023-06-26 | Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len integer overflow and resultant buffer overflow. |
CVE-2022-46718 | Medium | 5.5 | 2023-06-23 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Mo… |
CVE-2022-46715 | Medium | 5.5 | 2023-06-23 | A logic issue was addressed with improved checks. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to bypass certain Privacy preferences |
CVE-2022-42860 | Medium | 5.5 | 2023-06-23 | This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Monterey 12.6.1, macOS Big Sur 11.7.1, macOS Ventur… |
CVE-2022-42834 | Low | 3.3 | 2023-06-23 | An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13, macOS Big Sur 11.7.3. An app m… |
CVE-2022-42807 | Medium | 4.3 | 2023-06-23 | A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. A user may accidentally add a participant to a Shared Albu… |
CVE-2022-42792 | Medium | 5.5 | 2023-06-23 | This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to read sensitive location information |
CVE-2022-22630 | Critical | 9.8 | 2023-06-23 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.6, macOS Monterey 12.3, Security Update 2022-00… |
CVE-2022-47614 | High | 7.5 | 2023-06-23 | Unauth. SQL Injection (SQLi) vulnerability in InspireUI MStore API plugin <= 3.9.7 versions. |
CVE-2022-47593 | High | 8.5 | 2023-06-22 | Auth. (subscriber+) SQL Injection (SQLi) vulnerability in RapidLoad RapidLoad Power-Up for Autoptimize plugin <= 1.6.35 versions. |
CVE-2022-45287 | High | 8.8 | 2023-06-21 | An access control issue in Registration.aspx of Temenos CWX 8.5.6 allows authenticated attackers to escalate privileges and perform arbitrary Administrative co… |
CVE-2022-3372 | High | 8.8 | 2023-06-21 | There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due… |
CVE-2022-25883 | Medium | 5.3 | 2023-06-21 | Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data… |
CVE-2022-48501 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48500 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48499 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48498 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |
CVE-2022-48497 | High | 7.5 | 2023-06-19 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. |