2022 CVEs (page 50)
Page 50 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-27234 | Medium | 4.3 | 2023-02-16 | Server-side request forgery in the CVAT software maintained by Intel(R) before version 2.0.1 may allow an authenticated user to potentially enable information… |
CVE-2022-27170 | Medium | 5.7 | 2023-02-16 | Protection mechanism failure in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privi… |
CVE-2022-21163 | High | 8.4 | 2023-02-16 | Improper access control in the Crypto API Toolkit for Intel(R) SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable e… |
CVE-2022-40080 | High | 7.8 | 2023-02-16 | Stack overflow vulnerability in Aspire E5-475G 's BIOS firmware, in the FpGui module, a second call to GetVariable services allows local attackers to execute a… |
CVE-2022-37329 | Medium | 6.7 | 2023-02-16 | Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro and Standard Edition software may allow an authenticated user to potentially enable escalation o… |
CVE-2022-36794 | Medium | 6.0 | 2023-02-16 | Improper condition check in some Intel(R) SPS firmware before version SPS_E3_06.00.03.300.0 may allow a privileged user to potentially enable denial of service… |
CVE-2022-36398 | Medium | 6.7 | 2023-02-16 | Uncontrolled search path in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escal… |
CVE-2022-36348 | High | 8.8 | 2023-02-16 | Active debug code in some Intel (R) SPS firmware before version SPS_E5_04.04.04.300.0 may allow an authenticated user to potentially enable escalation of privi… |
CVE-2022-36278 | High | 8.2 | 2023-02-16 | Insufficient control flow management in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially… |
CVE-2022-34849 | Medium | 4.4 | 2023-02-16 | Uncaught exception in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1436(v2) may allow a privileged user to potentially enable denial… |
CVE-2022-34157 | Medium | 6.7 | 2023-02-16 | Improper access control in the Intel(R) FPGA SDK for OpenCL(TM) with Intel(R) Quartus(R) Prime Pro Edition software before version 22.1 may allow authenticated… |
CVE-2022-34153 | High | 8.2 | 2023-02-16 | Improper initialization in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escala… |
CVE-2022-33902 | High | 7.3 | 2023-02-16 | Insufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable esca… |
CVE-2022-33892 | High | 7.3 | 2023-02-16 | Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege vi… |
CVE-2022-32764 | High | 7.5 | 2023-02-16 | Description: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege v… |
CVE-2022-32570 | Medium | 6.7 | 2023-02-16 | Improper authentication in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of pri… |
CVE-2022-32231 | High | 7.5 | 2023-02-16 | Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local a… |
CVE-2022-30704 | High | 7.2 | 2023-02-16 | Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege vi… |
CVE-2022-30539 | High | 7.5 | 2023-02-16 | Use after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2022-30531 | Medium | 4.4 | 2023-02-16 | Out-of-bounds read in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information… |
CVE-2022-30530 | High | 7.8 | 2023-02-16 | Protection mechanism failure in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2022-30339 | Medium | 6.0 | 2023-02-16 | Out-of-bounds read in firmware for the Intel(R) Integrated Sensor Solution before versions 5.4.2.4579v3, 5.4.1.4479 and 5.0.0.4143 may allow a privileged user… |
CVE-2022-26888 | Low | 2.8 | 2023-02-16 | Cross-site scripting in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable information disclosu… |
CVE-2022-26843 | High | 8.3 | 2023-02-16 | Insufficient visual distinction of homoglyphs presented to user in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.1 for Intel(R) oneAPI Toolkits be… |
CVE-2022-26841 | Low | 2.5 | 2023-02-16 | Insufficient control flow management for the Intel(R) SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enabl… |
CVE-2022-26840 | High | 7.3 | 2023-02-16 | Improper neutralization in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of pri… |
CVE-2022-26837 | High | 7.5 | 2023-02-16 | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local… |
CVE-2022-26512 | Medium | 6.7 | 2023-02-16 | Uncontrolled search path element in the Intel(R) FPGA Add-on for Intel(R) oneAPI Base Toolkit before version 2022.2 may allow an authenticated user to potentia… |
CVE-2022-26509 | Low | 2.5 | 2023-02-16 | Improper conditions check in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access. |
CVE-2022-26425 | Medium | 6.7 | 2023-02-16 | Uncontrolled search path element in the Intel(R) oneAPI Collective Communications Library (oneCCL) before version 2021.6 for Intel(R) oneAPI Base Toolkit may a… |
CVE-2022-26421 | Medium | 6.7 | 2023-02-16 | Uncontrolled search path element in the Intel(R) oneAPI DPC++/C++ Compiler Runtime before version 2022.0 may allow an authenticated user to potentially enable… |
CVE-2022-26345 | Medium | 6.7 | 2023-02-16 | Uncontrolled search path element in the Intel(R) oneAPI Toolkit OpenMP before version 2022.1 may allow an authenticated user to potentially enable escalation o… |
CVE-2022-26343 | High | 8.2 | 2023-02-16 | Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local a… |
CVE-2022-26076 | Medium | 6.7 | 2023-02-16 | Uncontrolled search path element in the Intel(R) oneAPI Deep Neural Network (oneDNN) before version 2022.1 may allow an authenticated user to potentially enabl… |
CVE-2022-26062 | Medium | 6.7 | 2023-02-16 | Uncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated… |
CVE-2022-26052 | Medium | 6.7 | 2023-02-16 | Uncontrolled search path element in the Intel(R) MPI Library before version 2021.6 for Intel(R) oneAPI HPC Toolkit may allow an authenticated user to potential… |
CVE-2022-26032 | Medium | 6.7 | 2023-02-16 | Uncontrolled search path element in the Intel(R) Distribution for Python programming language before version 2022.1 for Intel(R) oneAPI Toolkits may allow an a… |
CVE-2022-25992 | High | 7.5 | 2023-02-16 | Insecure inherited permissions in the Intel(R) oneAPI Toolkits oneapi-cli before version 0.2.0 may allow an authenticated user to potentially enable escalation… |
CVE-2022-25987 | High | 8.3 | 2023-02-16 | Improper handling of Unicode encoding in source code to be compiled by the Intel(R) C++ Compiler Classic before version 2021.6 for Intel(R) oneAPI Toolkits bef… |
CVE-2022-25905 | Medium | 6.7 | 2023-02-16 | Uncontrolled search path element in the Intel(R) oneAPI Data Analytics Library (oneDAL) before version 2021.5 for Intel(R) oneAPI Base Toolkit may allow an aut… |
CVE-2022-21216 | High | 7.5 | 2023-02-16 | Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to po… |
CVE-2022-43954 | Medium | 4.3 | 2023-02-16 | An insertion of sensitive information into log file vulnerability [CWE-532] in the FortiPortal management interface 7.0.0 through 7.0.2 may allow a remote auth… |
CVE-2022-42472 | Medium | 4.2 | 2023-02-16 | A improper neutralization of crlf sequences in http headers ('http response splitting') in Fortinet FortiOS versions 7.2.0 through 7.2.2, 7.0.0 through 7.0.8… |
CVE-2022-41335 | High | 8.8 | 2023-02-16 | A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.10, FortiProxy version 7.2… |
CVE-2022-41334 | High | 8.8 | 2023-02-16 | An improper neutralization of input during web page generation [CWE-79] vulnerability in FortiOS versions 7.0.0 to 7.0.7 and 7.2.0 to 7.2.3 may allow a remote… |
CVE-2022-40683 | High | 7.8 | 2023-02-16 | A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crafted commands |
CVE-2022-40678 | High | 7.4 | 2023-02-16 | An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7… |
CVE-2022-40677 | High | 7.2 | 2023-02-16 | A improper neutralization of argument delimiters in a command ('argument injection') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9… |
CVE-2022-40675 | Medium | 6.5 | 2023-02-16 | Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7… |
CVE-2022-39954 | High | 7.3 | 2023-02-16 | An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.7, FortiNAC versi… |
CVE-2022-39952 | Critical | 9.8 | 2023-02-16 | A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7… |
CVE-2022-39948 | Medium | 4.8 | 2023-02-16 | An improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all ver… |
CVE-2022-38378 | Medium | 4.2 | 2023-02-16 | An improper privilege management vulnerability [CWE-269] in Fortinet FortiOS version 7.2.0 and before 7.0.7 and FortiProxy version 7.2.0 through 7.2.1 and befo… |
CVE-2022-38376 | Medium | 6.1 | 2023-02-16 | Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] in Fortinet FortiNAC portal UI before 9… |
CVE-2022-38375 | Critical | 9.1 | 2023-02-16 | An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform… |
CVE-2022-33871 | Medium | 6.6 | 2023-02-16 | A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privilege… |
CVE-2022-33869 | High | 8.8 | 2023-02-16 | An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiWAN 4.0.0 through 4.5.9 may all… |
CVE-2022-30306 | Medium | 6.6 | 2023-02-16 | A stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and be… |
CVE-2022-30304 | Medium | 4.3 | 2023-02-16 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAnalyzer versions prior to 7.2.1, 7.0.4 and 6.4.8 may allow a rem… |
CVE-2022-30303 | High | 8.8 | 2023-02-16 | An improper neutralization of special elements used in an os command ('OS Command Injection') [CWE-78] in FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19, 6… |
CVE-2022-30300 | Medium | 6.5 | 2023-02-16 | A relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all versions may allow an authenticated attacker to… |
CVE-2022-30299 | Medium | 5.3 | 2023-02-16 | A path traversal vulnerability [CWE-23] in the API of FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19, 6.4 all versions, 6.2 all versions, 6.1 all versions… |
CVE-2022-29054 | Low | 3.3 | 2023-02-16 | A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0… |
CVE-2022-27489 | High | 7.2 | 2023-02-16 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.0.0 through 7.0.3, 5.3.2, 4.2.4 and be… |
CVE-2022-27482 | High | 7.8 | 2023-02-16 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC version 7.0.0 through 7.0.1, 6.2.0 through 6… |
CVE-2022-26115 | Medium | 5.9 | 2023-02-16 | A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may allow an attacker with access to the pas… |
CVE-2022-48308 | Medium | 6.3 | 2023-02-16 | It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious a… |
CVE-2022-48307 | Medium | 6.3 | 2023-02-16 | It was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious… |
CVE-2022-48306 | Medium | 5.7 | 2023-02-16 | Improper Validation of Certificate with Host Mismatch vulnerability in Gotham Chat IRC helper of Palantir Gotham allows A malicious attacker in a privileged ne… |
CVE-2022-27897 | Medium | 5.3 | 2023-02-16 | Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously crafted zip files to memory. An attack… |
CVE-2022-27892 | Medium | 5.3 | 2023-02-16 | Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory of the Gotham dispat… |
CVE-2022-27891 | Medium | 5.3 | 2023-02-16 | Palantir Gotham included an unauthenticated endpoint that listed all active usernames on the stack with an active session. The affected services have been patc… |
CVE-2022-27890 | Medium | 6.3 | 2023-02-16 | It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious a… |
CVE-2022-3843 | Critical | 9.1 | 2023-02-16 | In WAGO Unmanaged Switch (852-111/000-001) in firmware version 01 an undocumented configuration interface without authorization allows an remote attacker to re… |
CVE-2022-43969 | Critical | 9.1 | 2023-02-16 | Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials. |
CVE-2022-38731 | Medium | 4.3 | 2023-02-16 | Qaelum DOSE 18.08 through 21.1 before 21.2 allows Directory Traversal via the loadimages name parameter. It allows a user to specify an arbitrary location on t… |
CVE-2022-40016 | High | 7.5 | 2023-02-15 | Use After Free (UAF) vulnerability in ireader media-server before commit 3e0f63f1d3553f75c7d4eb32fa7c7a1976a9ff84 in librtmp, allows attackers to cause a denia… |
CVE-2022-38935 | High | 8.8 | 2023-02-15 | An issue was discovered in NiterForum version 2.5.0-beta in /src/main/java/cn/niter/forum/api/SsoApi.java and /src/main/java/cn/niter/forum/controller/AdminCon… |
CVE-2022-38868 | High | 7.2 | 2023-02-15 | SQL Injection vulnerability in Ehoney version 2.0.0 in models/protocol.go and models/images.go, allows attackers to execute arbitrary code. |
CVE-2022-38867 | High | 8.8 | 2023-02-15 | SQL Injection vulnerability in rttys versions 4.0.0, 4.0.1, 4.0.2, and 4.4.x in api.go, allows attackers to execute arbitrary code. |
CVE-2022-45546 | High | 7.5 | 2023-02-15 | Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authenticat… |
CVE-2022-45543 | Medium | 6.1 | 2023-02-15 | Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via th… |
CVE-2022-42455 | High | 7.8 | 2023-02-15 | ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software pro… |
CVE-2022-47508 | High | 7.5 | 2023-02-15 | Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP a… |
CVE-2022-47507 | High | 7.2 | 2023-02-15 | SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account acces… |
CVE-2022-47506 | High | 7.8 | 2023-02-15 | SolarWinds Platform was susceptible to the Directory Traversal Vulnerability. This vulnerability allows a local adversary with authenticated account access to… |
CVE-2022-47504 | High | 7.2 | 2023-02-15 | SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account acces… |
CVE-2022-47503 | High | 7.2 | 2023-02-15 | SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account acces… |
CVE-2022-38111 | High | 7.2 | 2023-02-15 | SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account acces… |
CVE-2022-45587 | Medium | 5.5 | 2023-02-15 | Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service. |
CVE-2022-45586 | Medium | 5.5 | 2023-02-15 | Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service. |
CVE-2022-46892 | Critical | 9.8 | 2023-02-15 | In Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root complex. |
CVE-2022-32477 | High | 7.0 | 2023-02-15 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FvbServicesRuntimeDxe shared buffer used by SMM and non-SMM code co… |
CVE-2022-32475 | High | 7.0 | 2023-02-15 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the VariableRuntimeDxe shared buffer used by SMM and non-SMM code could… |
CVE-2022-32469 | High | 7.0 | 2023-02-15 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the PnpSmm shared buffer used by SMM and non-SMM code could cause TOCTO… |
CVE-2022-45154 | Medium | 4.4 | 2023-02-15 | A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Ent… |
CVE-2022-45153 | High | 7.0 | 2023-02-15 | An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise S… |
CVE-2022-42735 | High | 8.8 | 2023-02-15 | Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privilege low-level administrators create us… |
CVE-2022-25978 | Medium | 5.4 | 2023-02-15 | All versions of the package github.com/usememos/memos/server are vulnerable to Cross-site Scripting (XSS) due to insufficient checks on external resources, whi… |
CVE-2022-47373 | Medium | 6.4 | 2023-02-15 | Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget passwor… |