2022 CVEs (page 57)
Page 57 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-44024 | Medium | 6.1 | 2023-01-27 | An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 1 of 6. |
CVE-2022-2712 | Medium | 6.5 | 2023-01-27 | In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'. S… |
CVE-2022-46967 | Critical | 9.8 | 2023-01-26 | An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admin/DBbackup/ directory. |
CVE-2022-46966 | Critical | 9.8 | 2023-01-26 | Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php. |
CVE-2022-47951 | Medium | 5.7 | 2023-01-26 | An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova befor… |
CVE-2022-45770 | High | 7.8 | 2023-01-26 | Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation. |
CVE-2022-44264 | High | 7.8 | 2023-01-26 | Dentsply Sirona Sidexis <= 4.3 is vulnerable to Unquoted Service Path. |
CVE-2022-44263 | High | 7.8 | 2023-01-26 | Dentsply Sirona Sidexis <= 4.3 is vulnerable to Incorrect Access Control. |
CVE-2022-42493 | Critical | 9.8 | 2023-01-26 | Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lea… |
CVE-2022-42492 | Critical | 9.8 | 2023-01-26 | Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lea… |
CVE-2022-42491 | Critical | 9.8 | 2023-01-26 | Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lea… |
CVE-2022-42490 | Critical | 9.8 | 2023-01-26 | Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lea… |
CVE-2022-41991 | Critical | 9.8 | 2023-01-26 | A heap-based buffer overflow vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted n… |
CVE-2022-41154 | Medium | 6.5 | 2023-01-26 | A directory traversal vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network… |
CVE-2022-41030 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41029 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41028 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41027 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41026 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41025 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41024 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41023 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41022 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41021 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41020 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41019 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41018 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41017 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41016 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41015 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41014 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41013 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41012 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41011 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41010 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41009 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41008 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41007 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41006 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41005 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41004 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41003 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41002 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41001 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41000 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40999 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40998 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40997 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40996 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40995 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40994 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40993 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40992 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40991 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40990 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40989 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40988 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40987 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40986 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40985 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40969 | High | 8.8 | 2023-01-26 | An os command injection vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP req… |
CVE-2022-40701 | High | 8.1 | 2023-01-26 | A directory traversal vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP reque… |
CVE-2022-40222 | Critical | 9.8 | 2023-01-26 | An OS command injection vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted networ… |
CVE-2022-40220 | High | 8.8 | 2023-01-26 | An OS command injection vulnerability exists in the httpd txt/restore.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted netw… |
CVE-2022-39045 | High | 8.8 | 2023-01-26 | A file write vulnerability exists in the httpd upload.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lea… |
CVE-2022-38715 | High | 8.8 | 2023-01-26 | A leftover debug code vulnerability exists in the httpd shell.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request… |
CVE-2022-38459 | High | 8.8 | 2023-01-26 | A stack-based buffer overflow vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted H… |
CVE-2022-38088 | Medium | 6.5 | 2023-01-26 | A directory traversal vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP requ… |
CVE-2022-38066 | High | 8.8 | 2023-01-26 | An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP response c… |
CVE-2022-36279 | High | 8.8 | 2023-01-26 | A stack-based buffer overflow vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HT… |
CVE-2022-4510 | High | 7.8 | 2023-01-26 | A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, a… |
CVE-2022-4092 | Medium | 5.7 | 2023-01-26 | An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. It was possible to create a malicious README page due to imp… |
CVE-2022-4054 | Medium | 5.5 | 2023-01-26 | An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions star… |
CVE-2022-48199 | High | 8.8 | 2023-01-26 | SoftPerfect NetWorx 7.1.1 on Windows allows an attacker to execute a malicious binary with potentially higher privileges via a low-privileged user account that… |
CVE-2022-47767 | Critical | 9.8 | 2023-01-26 | A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker. This affects Solar-Log dev… |
CVE-2022-47615 | Critical | 9.3 | 2023-01-26 | Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. |
CVE-2022-47100 | High | 7.5 | 2023-01-26 | A vulnerability in Sengled Smart bulb 0x0000024 allows attackers to arbitrarily perform a factory reset on the device via a crafted IEEE 802.15.4 frame. |
CVE-2022-47073 | Medium | 5.4 | 2023-01-26 | A cross-site scripting (XSS) vulnerability in the Create Ticket page of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted… |
CVE-2022-47052 | Medium | 6.1 | 2023-01-26 | The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi Router' is vulnerable to a CRLF Injection attack that can be leveraged to perform Reflected XSS an… |
CVE-2022-47042 | High | 8.8 | 2023-01-26 | MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do. |
CVE-2022-47040 | High | 7.8 | 2023-01-26 | An issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN1001_s32_7 allows attackers to escalate privileges via running the tcpdump command after placing a cra… |
CVE-2022-46999 | Critical | 9.8 | 2023-01-26 | Tuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \App\Manage\Controller\UserController.class.php. |
CVE-2022-46998 | Critical | 9.8 | 2023-01-26 | An issue in the website background of taocms v3.0.2 allows attackers to execute a Server-Side Request Forgery (SSRF). |
CVE-2022-46957 | Medium | 6.1 | 2023-01-26 | Sourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS). |
CVE-2022-46624 | Medium | 6.1 | 2023-01-26 | A cross-site scripting (XSS) vulnerability in Online Graduate Tracer System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payl… |
CVE-2022-46128 | Medium | 6.1 | 2023-01-26 | phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting (XSS) via searchdata=. |
CVE-2022-45920 | High | 7.5 | 2023-01-26 | In Softing uaToolkit Embedded before 1.41, a malformed CreateMonitoredItems request may cause a memory leak. |
CVE-2022-45820 | Critical | 9.1 | 2023-01-26 | SQL Injection (SQLi) vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. |
CVE-2022-45808 | Critical | 9.9 | 2023-01-26 | SQL Injection vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. |
CVE-2022-45730 | Medium | 6.1 | 2023-01-26 | A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a craft… |
CVE-2022-44297 | Critical | 9.8 | 2023-01-26 | SiteServer CMS 7.1.3 has a SQL injection vulnerability the background. |
CVE-2022-44018 | High | 7.5 | 2023-01-26 | In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory acc… |
CVE-2022-43997 | High | 7.8 | 2023-01-26 | Incorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows for local privilege escalation. There is an insufficiently protected ha… |
CVE-2022-43917 | Medium | 5.9 | 2023-01-26 | IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensit… |
CVE-2022-43864 | High | 7.5 | 2023-01-26 | IBM Business Automation Workflow 22.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL re… |
CVE-2022-42330 | High | 7.5 | 2023-01-26 | Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the libxl based Xen toolstack will normally per… |
CVE-2022-41941 | Medium | 6.2 | 2023-01-26 | GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6, are subject to Cross-site Scripting. An administrator may… |
CVE-2022-40037 | Critical | 9.8 | 2023-01-26 | An issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and execute arbitrary commands via the component /upFile. |
CVE-2022-40036 | Medium | 6.5 | 2023-01-26 | An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing permission checks via the /adminGetUserLi… |
CVE-2022-40035 | High | 8.8 | 2023-01-26 | File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList… |