2022 CVEs (page 38)
Page 38 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-41699 | High | 8.2 | 2023-05-10 | Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentia… |
CVE-2022-41693 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escala… |
CVE-2022-41690 | High | 7.1 | 2023-05-10 | Improper access control in the Intel(R) Retail Edge Mobile iOS application before version 3.4.7 may allow an authenticated user to potentially enable escalatio… |
CVE-2022-41687 | Medium | 6.7 | 2023-05-10 | Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an auth… |
CVE-2022-41658 | Medium | 6.7 | 2023-05-10 | Insecure inherited permissions in the Intel(R) VTune(TM) Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalati… |
CVE-2022-41646 | Medium | 4.7 | 2023-05-10 | Insufficient control flow management in the Intel(R) IPP Cryptography software before version 2021.6 may allow an unauthenticated user to potentially enable in… |
CVE-2022-41628 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an au… |
CVE-2022-41621 | Low | 3.3 | 2023-05-10 | Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable information disclos… |
CVE-2022-41610 | Medium | 5.0 | 2023-05-10 | Improper authorization in Intel(R) EMA Configuration Tool before version 1.0.4 and Intel(R) MC before version 2.4 software may allow an authenticated user to p… |
CVE-2022-40974 | Low | 1.8 | 2023-05-10 | Incomplete cleanup in the Intel(R) IPP Cryptography software before version 2021.6 may allow a privileged user to potentially enable information disclosure via… |
CVE-2022-40972 | Medium | 6.7 | 2023-05-10 | Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable escalation of privi… |
CVE-2022-40971 | Medium | 6.7 | 2023-05-10 | Incorrect default permissions for the Intel(R) HDMI Firmware Update Tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable… |
CVE-2022-40685 | Medium | 6.5 | 2023-05-10 | Insufficiently protected credentials in the Intel(R) DCM software before version 5.0.1 may allow an authenticated user to potentially enable information disclo… |
CVE-2022-40210 | Medium | 6.8 | 2023-05-10 | Exposure of data element to wrong session in the Intel DCM software before version 5.0.1 may allow an authenticated user to potentially enable escalation of pr… |
CVE-2022-40207 | High | 8.2 | 2023-05-10 | Improper access control in the Intel(R) SUR software before version 2.4.8989 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2022-38787 | Medium | 5.7 | 2023-05-10 | Improper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentially enable escalat… |
CVE-2022-38103 | Medium | 6.7 | 2023-05-10 | Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated user to potentially en… |
CVE-2022-38101 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to… |
CVE-2022-38087 | Medium | 4.1 | 2023-05-10 | Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via… |
CVE-2022-37409 | Medium | 4.7 | 2023-05-10 | Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable inf… |
CVE-2022-37327 | Medium | 6.1 | 2023-05-10 | Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Compute Element, In… |
CVE-2022-36391 | Medium | 6.7 | 2023-05-10 | Incorrect default permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation o… |
CVE-2022-36339 | High | 7.5 | 2023-05-10 | Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element may allow a privileg… |
CVE-2022-34855 | Medium | 6.7 | 2023-05-10 | Path traversal for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2022-34848 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of pri… |
CVE-2022-34147 | High | 7.5 | 2023-05-10 | Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performance Mini PC, Intel(… |
CVE-2022-33963 | Medium | 6.7 | 2023-05-10 | Incorrect default permissions in the software installer for Intel(R) Unite(R) Client software for Windows before version 4.2.34870 may allow an authenticated u… |
CVE-2022-33894 | High | 7.5 | 2023-05-10 | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local… |
CVE-2022-32766 | High | 7.2 | 2023-05-10 | Improper input validation for some Intel(R) BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2022-32582 | Medium | 5.3 | 2023-05-10 | Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Pro Comput… |
CVE-2022-32578 | Medium | 6.7 | 2023-05-10 | Improper access control for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of priv… |
CVE-2022-32577 | Low | 3.4 | 2023-05-10 | Improper input validation in BIOS Firmware for some Intel(R) NUC Kits before version PY0081 may allow a privileged user to potentially enable information discl… |
CVE-2022-32576 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path in the Intel(R) Unite(R) Plugin SDK before version 4.2 may allow an authenticated user to potentially enable escalation of privilege v… |
CVE-2022-31477 | Medium | 4.0 | 2023-05-10 | Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. |
CVE-2022-30338 | Medium | 6.7 | 2023-05-10 | Incorrect default permissions in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privi… |
CVE-2022-29919 | High | 7.8 | 2023-05-10 | Use after free in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local… |
CVE-2022-29508 | Medium | 6.3 | 2023-05-10 | Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2022-28699 | High | 7.5 | 2023-05-10 | Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2022-27180 | Medium | 4.2 | 2023-05-10 | Uncontrolled search path in the Intel(R) MacCPUID software before version 3.2 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2022-25976 | Medium | 5.5 | 2023-05-10 | Improper input validation in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable denial of service via l… |
CVE-2022-21804 | High | 8.4 | 2023-05-10 | Out-of-bounds write in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable escalation… |
CVE-2022-21239 | Medium | 5.6 | 2023-05-10 | Out-of-bounds read in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable information… |
CVE-2022-21162 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path for the Intel(R) HDMI Firmware Update tool for NUC before version 1.79.1.1 may allow an authenticated user to potentially enable escal… |
CVE-2022-45846 | Medium | 5.4 | 2023-05-10 | Cross-Site Request Forgery (CSRF) vulnerability in Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin < 5.6.9 versions. |
CVE-2022-47606 | Medium | 5.9 | 2023-05-10 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tim Stephenson WP-CORS plugin <= 0.2.1 versions. |
CVE-2022-47600 | High | 7.1 | 2023-05-10 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Mass Email To users plugin <= 1.1.4 versions. |
CVE-2022-47590 | High | 7.1 | 2023-05-10 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Fugu Maintenance Switch plugin <= 1.5.2 versions. |
CVE-2022-47587 | Medium | 5.9 | 2023-05-10 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Cornel Raiu WP Search Analytics plugin <= 1.4.5 versions. |
CVE-2022-47441 | High | 7.1 | 2023-05-10 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Charitable Donations & Fundraising Team Donation Forms by Charitable plugin <= 1.7.0.10 versions. |
CVE-2022-47436 | Medium | 5.9 | 2023-05-10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MantraBrain Yatra allows Stored XSS.This issue affects Ya… |
CVE-2022-47423 | Medium | 5.9 | 2023-05-10 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions. |
CVE-2022-47137 | Medium | 5.9 | 2023-05-10 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPManageNinja LLC Ninja Tables plugin <= 4.3.4 versions. |
CVE-2022-27856 | Low | 3.4 | 2023-05-10 | Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Atlas Gondal Export All URLs plugin <= 4.1 versions. |
CVE-2022-46861 | Medium | 5.9 | 2023-05-10 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Zia Imtiaz Custom Login Page Styler for WordPress plugin <= 6.2 versions. |
CVE-2022-46819 | Medium | 5.9 | 2023-05-10 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Continuous announcement scroller plugin <= 13.0 versions. |
CVE-2022-46817 | Medium | 5.9 | 2023-05-10 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Flyzoo Flyzoo Chat plugin <= 2.3.3 versions. |
CVE-2022-33961 | Medium | 4.0 | 2023-05-10 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WaspThemes Visual CSS Style Editor plugin <= 7.5.8 versions. |
CVE-2022-32970 | Medium | 4.1 | 2023-05-10 | Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Themify Themify Portfolio Post plugin <= 1.2.4 versions. |
CVE-2022-4008 | Medium | 5.5 | 2023-05-10 | In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service |
CVE-2022-36330 | Low | 1.9 | 2023-05-10 | A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My… |
CVE-2022-23818 | High | 7.5 | 2023-05-09 | Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest memory integrity. … |
CVE-2022-46864 | High | 7.1 | 2023-05-09 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Umair Saleem Woocommerce Custom Checkout Fields Editor With Drag & Drop plugin <= 0.1 versions. |
CVE-2022-46858 | High | 7.1 | 2023-05-09 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Amin A.Rezapour Product Specifications for Woocommerce plugin <= 0.6.0 versions. |
CVE-2022-46844 | Medium | 6.5 | 2023-05-09 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in PixelGrade PixFields plugin <= 0.7.0 versions. |
CVE-2022-46822 | High | 7.1 | 2023-05-09 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in JC Development Team WooCommerce JazzCash Gateway Plugin plugin <= 2.0 versions. |
CVE-2022-41640 | Medium | 6.5 | 2023-05-09 | Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Rymera Web Co Wholesale Suite plugin <= 2.1.5 versions. |
CVE-2022-4537 | Medium | 6.5 | 2023-05-09 | The Hide My WP Ghost – Security Plugin plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.0.18. This is due to insuf… |
CVE-2022-48389 | Medium | 4.4 | 2023-05-09 | In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System executio… |
CVE-2022-48388 | High | 7.8 | 2023-05-09 | In powerEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48387 | Medium | 4.4 | 2023-05-09 | the apipe driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2022-48386 | Medium | 4.4 | 2023-05-09 | the apipe driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed. |
CVE-2022-48385 | Medium | 4.4 | 2023-05-09 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2022-48384 | High | 7.8 | 2023-05-09 | In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48383 | High | 7.8 | 2023-05-09 | .In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48382 | Medium | 4.4 | 2023-05-09 | In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2022-48381 | Medium | 4.4 | 2023-05-09 | In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System executio… |
CVE-2022-48380 | Medium | 4.4 | 2023-05-09 | In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System executio… |
CVE-2022-48379 | Medium | 5.5 | 2023-05-09 | In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48378 | Medium | 5.5 | 2023-05-09 | In engineermode service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48377 | Medium | 5.5 | 2023-05-09 | In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48376 | Medium | 5.5 | 2023-05-09 | In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48375 | Medium | 5.5 | 2023-05-09 | In contacts service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48374 | Medium | 4.4 | 2023-05-09 | In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2022-48373 | Medium | 4.4 | 2023-05-09 | In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2022-48372 | Medium | 4.4 | 2023-05-09 | In bootcp service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution priv… |
CVE-2022-48371 | Medium | 5.5 | 2023-05-09 | In dialer service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges. |
CVE-2022-48370 | Medium | 5.5 | 2023-05-09 | In dialer service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges. |
CVE-2022-48369 | High | 7.8 | 2023-05-09 | In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48368 | High | 7.8 | 2023-05-09 | In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48250 | High | 7.8 | 2023-05-09 | In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48249 | High | 7.8 | 2023-05-09 | In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48248 | High | 7.8 | 2023-05-09 | In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48247 | High | 7.8 | 2023-05-09 | In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48246 | High | 7.8 | 2023-05-09 | In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48245 | High | 7.8 | 2023-05-09 | In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48244 | High | 7.8 | 2023-05-09 | In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48243 | High | 7.8 | 2023-05-09 | In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2022-48242 | Medium | 5.5 | 2023-05-09 | In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges. |
CVE-2022-48241 | Medium | 5.5 | 2023-05-09 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. |
CVE-2022-48240 | Medium | 4.4 | 2023-05-09 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |