2022 CVEs (page 47)
Page 47 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-47456 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47455 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47454 | Medium | 5.5 | 2023-03-10 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47453 | Medium | 5.5 | 2023-03-10 | In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service. |
CVE-2022-43902 | Medium | 6.5 | 2023-03-10 | IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. IBM X-Force ID: 240… |
CVE-2022-40540 | High | 8.4 | 2023-03-10 | Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel. |
CVE-2022-40539 | High | 8.4 | 2023-03-10 | Memory corruption in Automotive Android OS due to improper validation of array index. |
CVE-2022-40537 | High | 7.3 | 2023-03-10 | Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response. |
CVE-2022-40535 | High | 7.5 | 2023-03-10 | Transient DOS due to buffer over-read in WLAN while sending a packet to device. |
CVE-2022-40531 | High | 8.4 | 2023-03-10 | Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message. |
CVE-2022-40530 | High | 8.4 | 2023-03-10 | Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase. |
CVE-2022-40527 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM. |
CVE-2022-40515 | High | 7.3 | 2023-03-10 | Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms. |
CVE-2022-37939 | Low | 2.3 | 2023-03-10 | A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be locally exploited to al… |
CVE-2022-33309 | High | 7.5 | 2023-03-10 | Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes. |
CVE-2022-33278 | High | 7.8 | 2023-03-10 | Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity. |
CVE-2022-33272 | High | 7.5 | 2023-03-10 | Transient DOS in modem due to reachable assertion. |
CVE-2022-33260 | Medium | 5.9 | 2023-03-10 | Memory corruption due to stack based buffer overflow in core while sending command from USB of large size. |
CVE-2022-33257 | Critical | 9.3 | 2023-03-10 | Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone. |
CVE-2022-33256 | Critical | 9.8 | 2023-03-10 | Memory corruption due to improper validation of array index in Multi-mode call processor. |
CVE-2022-33254 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in Modem while processing SIB1 Message. |
CVE-2022-33250 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover. |
CVE-2022-33245 | Medium | 6.7 | 2023-03-10 | Memory corruption in WLAN due to use after free |
CVE-2022-33244 | High | 7.5 | 2023-03-10 | Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout |
CVE-2022-33242 | High | 7.8 | 2023-03-10 | Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD. |
CVE-2022-33213 | High | 7.5 | 2023-03-10 | Memory corruption in modem due to buffer overflow while processing a PPP packet |
CVE-2022-25709 | High | 8.4 | 2023-03-10 | Memory corruption in modem due to use of out of range pointer offset while processing qmi msg |
CVE-2022-25705 | High | 7.8 | 2023-03-10 | Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response |
CVE-2022-25694 | High | 8.4 | 2023-03-10 | Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM |
CVE-2022-25655 | High | 8.4 | 2023-03-10 | Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload. |
CVE-2022-22075 | Medium | 6.2 | 2023-03-10 | Information Disclosure in Graphics during GPU context switch. |
CVE-2022-20929 | High | 7.8 | 2023-03-10 | A vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, local attacker to… |
CVE-2022-48111 | Medium | 6.1 | 2023-03-10 | A cross-site scripting (XSS) vulnerability in the check_login function of SIPE s.r.l WI400 between version 8 and 11 included allows attackers to execute arbitr… |
CVE-2022-3767 | High | 7.7 | 2023-03-09 | Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless… |
CVE-2022-3758 | Medium | 5.4 | 2023-03-09 | An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions sta… |
CVE-2022-4331 | Medium | 5.7 | 2023-03-09 | An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions… |
CVE-2022-4289 | Medium | 6.4 | 2023-03-09 | An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version 15.9 before 15.9.2… |
CVE-2022-3381 | Medium | 4.3 | 2023-03-09 | An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8 prior to 15.8.4 and 15.9 prior to 15.9.2. A crafted URL could… |
CVE-2022-4462 | Medium | 5.0 | 2023-03-09 | An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions sta… |
CVE-2022-4317 | Medium | 5.0 | 2023-03-09 | An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects. |
CVE-2022-29056 | Low | 3.7 | 2023-03-09 | A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0, version 6.2.0 through 6.2.4 and before… |
CVE-2022-4315 | Medium | 5.0 | 2023-03-08 | An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every requ… |
CVE-2022-4007 | Medium | 5.4 | 2023-03-08 | A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8.4, and version 15.9 prior to 15.9.2 A… |
CVE-2022-46394 | High | 8.8 | 2023-03-08 | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed me… |
CVE-2022-46752 | Medium | 4.6 | 2023-03-08 | Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial… |
CVE-2022-46257 | Medium | 4.3 | 2023-03-07 | An information disclosure vulnerability was identified in GitHub Enterprise Server that allowed private repositories to be added to a GitHub Actions runner gro… |
CVE-2022-45861 | Medium | 6.5 | 2023-03-07 | An access of uninitialized pointer vulnerability [CWE-824] in the SSL VPN portal of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 a… |
CVE-2022-42476 | High | 8.2 | 2023-03-07 | A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.11, FortiProxy version 7.2… |
CVE-2022-41333 | High | 7.5 | 2023-03-07 | An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allo… |
CVE-2022-41329 | Medium | 5.3 | 2023-03-07 | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0… |
CVE-2022-41328 | Medium | 6.7 | 2023-03-07 | A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0… |
CVE-2022-40676 | High | 7.5 | 2023-03-07 | A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through… |
CVE-2022-39953 | High | 7.8 | 2023-03-07 | A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6, FortiNAC version 9.1.0 through 9.1.8, F… |
CVE-2022-39951 | High | 7.2 | 2023-03-07 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version… |
CVE-2022-27490 | Medium | 5.4 | 2023-03-07 | A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.0.0 through 6.0.4, F… |
CVE-2022-22297 | Medium | 5.5 | 2023-03-07 | An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through… |
CVE-2022-4932 | Medium | 4.3 | 2023-03-07 | The Total Upkeep plugin for WordPress is vulnerable to information disclosure in versions up to, and including 1.14.13. This is due to missing authorization on… |
CVE-2022-4931 | Medium | 4.3 | 2023-03-07 | The BackupWordPress plugin for WordPress is vulnerable to information disclosure in versions up to, and including 3.12. This is due to missing authorization on… |
CVE-2022-3760 | Critical | 9.8 | 2023-03-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mia Technology Mia-Med. This issue affects Mia-Med: befo… |
CVE-2022-4904 | High | 8.6 | 2023-03-06 | A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary lengt… |
CVE-2022-4134 | Low | 2.8 | 2023-03-06 | A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual mach… |
CVE-2022-45142 | High | 7.5 | 2023-03-06 | The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp… |
CVE-2022-45141 | Critical | 9.8 | 2023-03-06 | Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac i… |
CVE-2022-3854 | Medium | 6.5 | 2023-03-06 | A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by providing a null URL to crash the RGW… |
CVE-2022-3707 | Medium | 5.5 | 2023-03-06 | A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the inte… |
CVE-2022-3424 | High | 7.8 | 2023-03-06 | A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail… |
CVE-2022-3277 | Medium | 6.5 | 2023-03-06 | An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for a… |
CVE-2022-42248 | Medium | 5.4 | 2023-03-06 | QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functionality. |
CVE-2022-4930 | Low | 3.5 | 2023-03-06 | A vulnerability classified as problematic was found in nuxsmin sysPass up to 3.2.4. Affected by this vulnerability is an unknown functionality of the component… |
CVE-2022-4328 | Critical | 9.8 | 2023-03-06 | The WooCommerce Checkout Field Manager WordPress plugin before 18.0 does not validate files to be uploaded, which could allow unauthenticated attackers to uplo… |
CVE-2022-4265 | High | 8.8 | 2023-03-06 | The Replyable WordPress plugin before 2.2.10 does not validate the class name submitted by the request when instantiating an object in the prompt_dismiss_notic… |
CVE-2022-48364 | Medium | 4.3 | 2023-03-06 | The undo_mark_statuses_as_sensitive method in app/services/approve_appeal_service.rb in Mastodon 3.5.x before 3.5.3 does not use the server's representative ac… |
CVE-2022-46395 | High | 8.8 | 2023-03-06 | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed me… |
CVE-2022-2178 | Medium | 6.1 | 2023-03-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saysis Computer Starcities allows Cross-Site Scripting (X… |
CVE-2022-4862 | Medium | 5.0 | 2023-03-06 | Rendering of HTML provided by another authenticated user is possible in browser on M-Files Web before 22.12.12140.3. This allows the content to steal user sens… |
CVE-2022-3284 | Medium | 6.5 | 2023-03-06 | Download key for a file in a vault was passed in an insecure way that could easily be logged in M-Files New Web in M-Files before 22.11.12011.0. This issue aff… |
CVE-2022-44875 | Medium | 5.4 | 2023-03-06 | KioWare through 8.33 on Windows sets KioScriptingUrlACL.AclActions.AllowHigh for the about:blank origin, which allows attackers to obtain SYSTEM access via Kio… |
CVE-2022-4929 | Low | 3.5 | 2023-03-06 | A vulnerability was found in icplayer up to 0.818. It has been rated as problematic. Affected by this issue is some unknown functionality of the file addons/Co… |
CVE-2022-4928 | Low | 3.5 | 2023-03-06 | A vulnerability was found in icplayer up to 0.819. It has been declared as problematic. Affected by this vulnerability is the function AddonText_Selection_crea… |
CVE-2022-4927 | Medium | 5.5 | 2023-03-05 | A vulnerability was found in ualbertalib NEOSDiscovery 1.0.70 and classified as problematic. This issue affects some unknown processing of the file app/views/b… |
CVE-2022-46973 | Critical | 9.8 | 2023-03-03 | Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability. |
CVE-2022-4645 | Medium | 6.8 | 2023-03-03 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users tha… |
CVE-2022-41862 | Low | 3.7 | 2023-03-03 | In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditi… |
CVE-2022-2837 | Medium | 6.1 | 2023-03-03 | A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod they control by creat… |
CVE-2022-2835 | Medium | 4.4 | 2023-03-03 | A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format o… |
CVE-2022-47665 | High | 7.8 | 2023-03-03 | Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int) |
CVE-2022-47664 | High | 7.8 | 2023-03-03 | Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse |
CVE-2022-45988 | High | 7.8 | 2023-03-03 | starsoftcomm CooCare 5.304 allows local attackers to escalate privileges and execute arbitrary commands via a crafted file upload. |
CVE-2022-45553 | Critical | 9.8 | 2023-03-03 | An issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows attacker to execute arbitrary commands via serial connection to the U… |
CVE-2022-45552 | High | 7.5 | 2023-03-03 | An Insecure Permissions vulnerability in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to obtain sensitive information via SPI bu… |
CVE-2022-45551 | Critical | 9.8 | 2023-03-03 | An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET command to the Network Diagn… |
CVE-2022-40633 | Medium | 4.6 | 2023-03-02 | A malicious actor can clone access cards used to open control cabinets secured with Rittal CMC III locks. |
CVE-2022-46501 | Critical | 9.8 | 2023-03-02 | Accruent LLC Maintenance Connection 2021 (all) & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function. |
CVE-2022-35645 | Medium | 6.4 | 2023-03-02 | IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to stored cross-site scripting. This vulnerabi… |
CVE-2022-38734 | High | 7.5 | 2023-03-02 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0.8 are susceptible to a Denial of Service (DoS) vulnerability. A successful exploit could l… |
CVE-2022-4901 | Low | 3.3 | 2023-03-01 | Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI via a malicious VPN configuration… |
CVE-2022-48310 | Medium | 5.5 | 2023-03-01 | An information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect versions older than 2.2.90. |
CVE-2022-48309 | Medium | 4.3 | 2023-03-01 | A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older than 2.2.90. |
CVE-2022-3294 | Medium | 6.6 | 2023-03-01 | Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and… |
CVE-2022-3162 | Medium | 6.5 | 2023-03-01 | Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group witho… |