2022 CVEs (page 46)
Page 46 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-34422 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34421 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34420 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34419 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34418 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34417 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34416 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34415 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34414 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34413 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34412 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34411 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34410 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34409 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34408 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34407 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-34406 | High | 7.5 | 2023-03-16 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileg… |
CVE-2022-41554 | Medium | 4.8 | 2023-03-16 | Stored Cross-Site Scripting (XSS) vulnerability in John West Slideshow SE plugin <= 2.5.5 versions. |
CVE-2022-40699 | Medium | 5.4 | 2023-03-16 | Cross-Site Scripting (XSS) vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin <= 3.1.2 versions. |
CVE-2022-38971 | Medium | 4.7 | 2023-03-16 | Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submiss… |
CVE-2022-38063 | Medium | 5.4 | 2023-03-16 | Cross-Site Request Forgery (CSRF) vulnerability in Social Login WP plugin <= 5.0.0.0 versions. |
CVE-2022-4009 | High | 8.8 | 2023-03-16 | In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation |
CVE-2022-4313 | High | 8.8 | 2023-03-15 | A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, c… |
CVE-2022-46773 | Medium | 4.3 | 2023-03-15 | IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be… |
CVE-2022-46774 | Medium | 5.4 | 2023-03-15 | IBM Manage Application 8.8.0 and 8.9.0 in the IBM Maximo Application Suite is vulnerable to incorrect default permissions which could give access to a user to… |
CVE-2022-43874 | Medium | 6.1 | 2023-03-15 | IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows… |
CVE-2022-37402 | Medium | 4.8 | 2023-03-15 | Stored Cross-site Scripting (XSS) vulnerability in AFS Analytics plugin <= 4.18 versions. |
CVE-2022-44580 | Critical | 9.1 | 2023-03-15 | SQL Injection (SQLi) vulnerability in RichPlugins Plugin for Google Reviews plugin <= 2.2.3 versions. |
CVE-2022-38456 | Medium | 4.3 | 2023-03-15 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ernest Marcinko Ajax Search Lite plugin <= 4.10.3 versions. |
CVE-2022-34148 | Medium | 4.8 | 2023-03-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in JetBackup JetBackup – WP Backup, Migrate & Restore plugin… |
CVE-2022-45155 | Medium | 5.5 | 2023-03-15 | An Improper Handling of Exceptional Conditions vulnerability in obs-service-go_modules of openSUSE Factory allows attackers that can influence the call to the… |
CVE-2022-47427 | Medium | 5.4 | 2023-03-15 | Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.3.24.1 versions. |
CVE-2022-39216 | High | 7.4 | 2023-03-14 | Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, the reset password token is generated without an… |
CVE-2022-39214 | Critical | 9.6 | 2023-03-14 | Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take ov… |
CVE-2022-47443 | Medium | 4.3 | 2023-03-14 | Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions. |
CVE-2022-47422 | Medium | 4.3 | 2023-03-14 | Cross-Site Request Forgery (CSRF) vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin <= 3.1.5 versions. |
CVE-2022-47147 | Medium | 5.4 | 2023-03-14 | Cross-Site Request Forgery (CSRF) vulnerability in Kesz1 Technologies ipBlockList plugin <= 1.0 versions. |
CVE-2022-47143 | Medium | 4.3 | 2023-03-14 | Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG plugin <= 3.3.9 versions. |
CVE-2022-47141 | Medium | 5.4 | 2023-03-14 | Cross-Site Request Forgery (CSRF) vulnerability in Seerox WP Dynamic Keywords Injector plugin <= 2.3.15 versions. |
CVE-2022-23791 | Medium | 6.1 | 2023-03-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firmanet Software and Technology Customer Relation Manage… |
CVE-2022-23790 | Medium | 6.1 | 2023-03-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firmanet Software and Technology Customer Relation Manage… |
CVE-2022-47154 | Medium | 4.3 | 2023-03-14 | Cross-Site Request Forgery (CSRF) vulnerability in Pi Websolution CSS JS Manager, Async JavaScript, Defer Render Blocking CSS supports WooCommerce plugin <= 2… |
CVE-2022-47595 | Medium | 4.9 | 2023-03-14 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Go Maps (formerly WP Google Maps) plugin <= 9.0.15 versions. |
CVE-2022-47171 | Medium | 5.9 | 2023-03-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paul C. Schroeder IP Vault – WP Firewall plugin <= 1.1 ve… |
CVE-2022-47163 | Low | 3.1 | 2023-03-14 | Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, josh401 WP CSV to Database – Insert CSV file content into WordPress plugin <= 2.6 versio… |
CVE-2022-47162 | Medium | 4.3 | 2023-03-14 | Cross-Site Request Forgery (CSRF) vulnerability in Dannie Herdyawan DH – Anti AdBlocker plugin <= 36 versions. |
CVE-2022-47155 | Medium | 4.3 | 2023-03-14 | Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Slider by Supsystic plugin <= 1.8.5 versions. |
CVE-2022-4661 | Medium | 5.4 | 2023-03-13 | The Widgets for WooCommerce Products on Elementor WordPress plugin before 1.0.8 does not validate and escape some of its shortcode attributes before outputting… |
CVE-2022-4652 | Medium | 5.4 | 2023-03-13 | The Video Background WordPress plugin before 2.7.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post whe… |
CVE-2022-4466 | Medium | 5.4 | 2023-03-13 | The WordPress Infinite Scroll WordPress plugin before 5.6.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a pa… |
CVE-2022-38074 | High | 7.1 | 2023-03-13 | SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions. |
CVE-2022-31474 | High | 7.5 | 2023-03-13 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allows Path Traversal.This issue affects Ba… |
CVE-2022-47440 | Medium | 4.3 | 2023-03-13 | Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Tickets plugin <= 1.9.10 versions. |
CVE-2022-47166 | Medium | 4.3 | 2023-03-13 | Cross-Site Request Forgery (CSRF) vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.1.1 versions. |
CVE-2022-2259 | Medium | 4.3 | 2023-03-13 | In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items |
CVE-2022-2258 | Medium | 4.3 | 2023-03-13 | In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items |
CVE-2022-48367 | Critical | 9.8 | 2023-03-12 | An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled. |
CVE-2022-48366 | Low | 3.7 | 2023-03-12 | An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack. |
CVE-2022-48365 | High | 7.2 | 2023-03-12 | An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges. |
CVE-2022-44574 | High | 7.5 | 2023-03-10 | An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port. |
CVE-2022-47484 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privile… |
CVE-2022-47483 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privile… |
CVE-2022-47482 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privile… |
CVE-2022-47481 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privile… |
CVE-2022-47480 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privile… |
CVE-2022-47479 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47478 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47477 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47476 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47475 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47474 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47473 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47472 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47471 | Medium | 5.5 | 2023-03-10 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2022-47462 | Medium | 6.7 | 2023-03-10 | In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed. |
CVE-2022-47461 | Medium | 6.7 | 2023-03-10 | In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed. |
CVE-2022-47460 | Medium | 5.5 | 2023-03-10 | In gpu device, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel. |
CVE-2022-47459 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47458 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47457 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47456 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47455 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47454 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47453 | Medium | 5.5 | 2023-03-10 | In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service. |
CVE-2022-43902 | Medium | 6.5 | 2023-03-10 | IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. IBM X-Force ID: 240… |
CVE-2022-40540 | High | 8.4 | 2023-03-10 | Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel. |
CVE-2022-40539 | High | 8.4 | 2023-03-10 | Memory corruption in Automotive Android OS due to improper validation of array index. |
CVE-2022-40537 | High | 7.3 | 2023-03-10 | Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response. |
CVE-2022-40535 | High | 7.5 | 2023-03-10 | Transient DOS due to buffer over-read in WLAN while sending a packet to device. |
CVE-2022-40531 | High | 8.4 | 2023-03-10 | Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message. |
CVE-2022-40530 | High | 8.4 | 2023-03-10 | Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase. |
CVE-2022-40527 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM. |
CVE-2022-40515 | High | 7.3 | 2023-03-10 | Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms. |
CVE-2022-37939 | Low | 2.3 | 2023-03-10 | A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be locally exploited to al… |
CVE-2022-33309 | High | 7.5 | 2023-03-10 | Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes. |
CVE-2022-33278 | High | 7.8 | 2023-03-10 | Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity. |
CVE-2022-33272 | High | 7.5 | 2023-03-10 | Transient DOS in modem due to reachable assertion. |
CVE-2022-33260 | Medium | 5.9 | 2023-03-10 | Memory corruption due to stack based buffer overflow in core while sending command from USB of large size. |
CVE-2022-33257 | Critical | 9.3 | 2023-03-10 | Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone. |
CVE-2022-33256 | Critical | 9.8 | 2023-03-10 | Memory corruption due to improper validation of array index in Multi-mode call processor. |