2022 CVEs (page 52)
Page 52 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-47326 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. |
CVE-2022-47325 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. |
CVE-2022-47324 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. |
CVE-2022-47323 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-47322 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-45091 | Medium | 5.4 | 2023-02-12 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy and Control Systems Smartpower Web allo… |
CVE-2022-45090 | High | 8.8 | 2023-02-12 | Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: befor… |
CVE-2022-45089 | High | 8.8 | 2023-02-12 | Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: befor… |
CVE-2022-45088 | Critical | 9.8 | 2023-02-12 | Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows PHP Local File Inclusion. This issue affects Smartpower… |
CVE-2022-45087 | Medium | 6.1 | 2023-02-12 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy and Control Systems Smartpower Web allo… |
CVE-2022-45086 | Medium | 5.4 | 2023-02-12 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Group Arge Energy and Control Systems Smartpower Web allo… |
CVE-2022-45085 | Medium | 6.5 | 2023-02-12 | Server-Side Request Forgery (SSRF) vulnerability in Group Arge Energy and Control Systems Smartpower Web allows : Server Side Request Forgery. This issue affe… |
CVE-2022-44448 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-44447 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible null pointer dereference issue due to a missing bounds check. This could lead to local denial of service in wlan services. |
CVE-2022-44421 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing permission check. This could lead to local In wlan driver, information disclosure. |
CVE-2022-43869 | Medium | 6.5 | 2023-02-12 | IBM Spectrum Scale (5.1.0.0 through 5.1.2.8 and 5.1.3.0 through 5.1.5.1) and IBM Elastic Storage System (6.1.0.0 through 6.1.2.4 and 6.1.3.0 through 6.1.4.1) c… |
CVE-2022-43779 | High | 7.0 | 2023-02-12 | A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS) which might… |
CVE-2022-42783 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-42444 | Medium | 4.9 | 2023-02-12 | IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user could overflow… |
CVE-2022-42436 | Medium | 4.0 | 2023-02-12 | IBM MQ 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 Managed File Transfer could allow a local user to obtain sensitive information from diagnostic files. IBM X-Force ID… |
CVE-2022-42292 | Medium | 5.0 | 2023-02-12 | NVIDIA GeForce Experience contains a vulnerability in the NVContainer component, where a user without administrator privileges can create a symbolic link to a… |
CVE-2022-41731 | High | 8.6 | 2023-02-12 | IBM Watson Knowledge Catalog on Cloud Pak for Data 4.5.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which c… |
CVE-2022-40514 | Critical | 9.8 | 2023-02-12 | Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame. |
CVE-2022-40513 | High | 7.5 | 2023-02-12 | Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state. |
CVE-2022-40512 | High | 7.5 | 2023-02-12 | Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. |
CVE-2022-40502 | High | 7.5 | 2023-02-12 | Transient DOS due to improper input validation in WLAN Host. |
CVE-2022-38686 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-38681 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-38680 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-38675 | Medium | 5.5 | 2023-02-12 | In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. |
CVE-2022-38674 | Medium | 5.5 | 2023-02-12 | In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. |
CVE-2022-38657 | High | 8.2 | 2023-02-12 | An open redirect to malicious sites can occur when accessing the "Feedback" action on the manager page. |
CVE-2022-38396 | High | 7.8 | 2023-02-12 | HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via ex… |
CVE-2022-34146 | High | 7.5 | 2023-02-12 | Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation. |
CVE-2022-34145 | High | 7.5 | 2023-02-12 | Transient DOS due to buffer over-read in WLAN Host while parsing frame information. |
CVE-2022-33306 | High | 7.5 | 2023-02-12 | Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs. |
CVE-2022-33280 | High | 7.3 | 2023-02-12 | Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet. |
CVE-2022-33279 | Critical | 9.8 | 2023-02-12 | Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length. |
CVE-2022-33277 | High | 8.4 | 2023-02-12 | Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command. |
CVE-2022-33271 | High | 8.2 | 2023-02-12 | Information disclosure due to buffer over-read in WLAN while parsing NMF frame. |
CVE-2022-33248 | High | 7.8 | 2023-02-12 | Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http. |
CVE-2022-33246 | Medium | 6.7 | 2023-02-12 | Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id. |
CVE-2022-33243 | High | 8.4 | 2023-02-12 | Memory corruption due to improper access control in Qualcomm IPC. |
CVE-2022-33233 | High | 7.8 | 2023-02-12 | Memory corruption due to configuration weakness in modem wile sending command to write protected files. |
CVE-2022-33232 | Critical | 9.3 | 2023-02-12 | Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory. |
CVE-2022-33229 | High | 8.2 | 2023-02-12 | Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets. |
CVE-2022-33225 | Medium | 6.7 | 2023-02-12 | Memory corruption due to use after free in trusted application environment. |
CVE-2022-33221 | Medium | 6.8 | 2023-02-12 | Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests. |
CVE-2022-33216 | Medium | 6.0 | 2023-02-12 | Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file. |
CVE-2022-25738 | High | 8.2 | 2023-02-12 | Information disclosure in modem due to buffer over-red while performing checksum of packet received |
CVE-2022-25735 | High | 7.5 | 2023-02-12 | Denial of service in modem due to missing null check while processing TCP or UDP packets from server |
CVE-2022-25734 | High | 7.5 | 2023-02-12 | Denial of service in modem due to missing null check while processing IP packets with padding |
CVE-2022-25733 | High | 7.5 | 2023-02-12 | Denial of service in modem due to null pointer dereference while processing DNS packets |
CVE-2022-25732 | High | 8.2 | 2023-02-12 | Information disclosure in modem due to buffer over read in dns client due to missing length check |
CVE-2022-25729 | Critical | 9.8 | 2023-02-12 | Memory corruption in modem due to improper length check while copying into memory |
CVE-2022-25728 | High | 8.2 | 2023-02-12 | Information disclosure in modem due to buffer over-read while processing response from DNS server |
CVE-2022-46755 | Medium | 4.9 | 2023-02-11 | Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for… |
CVE-2022-46754 | High | 8.7 | 2023-02-11 | Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user might access certain pro license fe… |
CVE-2022-46678 | Medium | 4.9 | 2023-02-11 | Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy… |
CVE-2022-46677 | Medium | 6.8 | 2023-02-11 | Wyse Management Suite 3.8 and below contain an improper access control vulnerability with which an custom group admin can create a subgroup under a group for… |
CVE-2022-46676 | Medium | 4.9 | 2023-02-11 | Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A malicious admin user can disable or delete users under administration… |
CVE-2022-46675 | Medium | 5.3 | 2023-02-11 | Wyse Management Suite Repository 3.8 and below contain an information disclosure vulnerability. A unauthenticated attacker could potentially discover the inte… |
CVE-2022-45104 | High | 8.8 | 2023-02-11 | Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain a command execution vulnerability. A low privileged re… |
CVE-2022-34451 | Medium | 4.8 | 2023-02-11 | PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Stored Cross-site Scripting Vulnerability. An authenticated admin user could po… |
CVE-2022-34450 | Medium | 6.7 | 2023-02-11 | PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability. An authenticated admin user could potentially exploit this issue… |
CVE-2022-34449 | Medium | 6.0 | 2023-02-11 | PowerPath Management Appliance with versions 3.3 & 3.2* contains a Hardcoded Cryptographic Keys vulnerability. Authenticated admin users can exploit the issue… |
CVE-2022-34448 | High | 8.8 | 2023-02-11 | PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Cross-site Request Forgery vulnerability. An unauthenticated non-privileged use… |
CVE-2022-34447 | High | 7.2 | 2023-02-11 | PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains OS Command Injection vulnerability. An authenticated remote attacker with adminis… |
CVE-2022-34446 | High | 8.8 | 2023-02-11 | PowerPath Management Appliance with versions 3.3 & 3.2* contains Authorization Bypass vulnerability. An authenticated remote user with limited privileges (e.g… |
CVE-2022-34445 | Medium | 6.0 | 2023-02-11 | Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password. A malicious local privileged attacker may potentially exploit this… |
CVE-2022-34444 | Medium | 5.9 | 2023-02-11 | Dell PowerScale OneFS, versions 9.2.0.x through 9.4.0.x contain an information vulnerability. A remote unauthenticated attacker may potentially exploit this v… |
CVE-2022-34404 | Medium | 6.5 | 2023-02-11 | Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A local attacker with high privileges could… |
CVE-2022-34392 | Medium | 5.5 | 2023-02-11 | SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability. An authenticated non-admin user can be able t… |
CVE-2022-34389 | Low | 3.7 | 2023-02-11 | Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component. An unauthenticated attacker could potentially exploit this vul… |
CVE-2022-34388 | High | 7.1 | 2023-02-11 | Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain information disclosure vulner… |
CVE-2022-34387 | Medium | 6.4 | 2023-02-11 | Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain a privilege escalation vuln… |
CVE-2022-34386 | Medium | 5.5 | 2023-02-11 | Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnera… |
CVE-2022-34385 | Medium | 5.5 | 2023-02-11 | SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerabili… |
CVE-2022-34384 | High | 7.8 | 2023-02-11 | Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Update, Dell Update, an… |
CVE-2022-44261 | Medium | 6.1 | 2023-02-10 | Avery Dennison Monarch Printer M9855 is vulnerable to Cross Site Scripting (XSS). |
CVE-2022-34377 | Low | 1.9 | 2023-02-10 | Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privil… |
CVE-2022-34376 | Low | 3.9 | 2023-02-10 | Dell PowerEdge BIOS and Dell Precision BIOS contain an improper input validation vulnerability. A local authenticated malicious user may potentially exploit… |
CVE-2022-34366 | Medium | 6.5 | 2023-02-10 | Dell SupportAssist for Home PCs (version 3.11.2 and prior) contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user cou… |
CVE-2022-34364 | Medium | 4.4 | 2023-02-10 | Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing s… |
CVE-2022-33934 | High | 7.7 | 2023-02-10 | Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with h… |
CVE-2022-45766 | Critical | 9.1 | 2023-02-10 | Hardcoded credentials in Global Facilities Management Software (GFMS) Version 3 software distributed by Key Systems Management permits remote attackers to impa… |
CVE-2022-46650 | Medium | 4.9 | 2023-02-10 | Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials on the pre-login st… |
CVE-2022-46649 | High | 8.8 | 2023-02-10 | Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary shell commands on the… |
CVE-2022-4903 | Medium | 5.0 | 2023-02-10 | A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function. The manipulation leads to use of impli… |
CVE-2022-24410 | Medium | 6.8 | 2023-02-10 | Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system con… |
CVE-2022-34454 | Medium | 6.7 | 2023-02-10 | Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerabili… |
CVE-2022-34452 | Low | 2.7 | 2023-02-10 | PowerPath Management Appliance with versions 3.3, 3.2*, 3.1 & 3.0* contains sensitive information disclosure vulnerability. An Authenticated admin user can ab… |
CVE-2022-43501 | Critical | 9.1 | 2023-02-10 | KASAGO TCP/IP stack provided by Zuken Elmic generates ISNs(Initial Sequence Number) for TCP connections from an insufficiently random source. An attacker may b… |
CVE-2022-45699 | Critical | 9.8 | 2023-02-10 | Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as roo… |
CVE-2022-3568 | High | 8.8 | 2023-02-10 | The ImageMagick Engine plugin for WordPress is vulnerable to deserialization of untrusted input via the 'cli_path' parameter in versions up to, and including 1… |
CVE-2022-21940 | High | 7.5 | 2023-02-09 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and v… |
CVE-2022-21939 | High | 7.5 | 2023-02-09 | Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 1… |
CVE-2022-44572 | High | 7.5 | 2023-02-09 | A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.0.1 could allow an attacker tocraft inp… |
CVE-2022-44571 | High | 7.5 | 2023-02-09 | There is a denial of service vulnerability in the Content-Disposition parsingcomponent of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1. This could allow an… |
CVE-2022-44570 | High | 7.5 | 2023-02-09 | A denial of service vulnerability in the Range header parsing component of Rack >= 1.5.0. A Carefully crafted input can cause the Range header parsing componen… |