2022 CVEs (page 57)
Page 57 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-48010 | Medium | 5.4 | 2023-01-27 | LimeSurvey v5.4.15 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /index.php/surveyAdministration/rendersidemenul… |
CVE-2022-48008 | Critical | 9.8 | 2023-01-27 | An arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted PHP file. |
CVE-2022-48007 | Medium | 5.4 | 2023-01-27 | A stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a craft… |
CVE-2022-48073 | High | 7.5 | 2023-01-27 | Phicomm K2G v22.6.3.20 was discovered to store the root and admin passwords in plaintext. |
CVE-2022-48072 | High | 7.8 | 2023-01-27 | Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function. |
CVE-2022-48071 | High | 7.5 | 2023-01-27 | Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext. |
CVE-2022-48070 | High | 7.8 | 2023-01-27 | Phicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function. |
CVE-2022-48069 | High | 7.5 | 2023-01-27 | Totolink A830R V4.1.2cu.5182 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter. |
CVE-2022-48067 | Medium | 5.5 | 2023-01-27 | An information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to obtain the root password via a brute-force attack. |
CVE-2022-48066 | Critical | 9.8 | 2023-01-27 | An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie. |
CVE-2022-47632 | Medium | 6.8 | 2023-01-27 | Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate va… |
CVE-2022-44718 | Low | 3.5 | 2023-01-27 | An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 2 of 2). After successful login, an attacker must visit the v… |
CVE-2022-44717 | Low | 3.1 | 2023-01-27 | An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 1 of 2). After successful login, an attacker must visit the v… |
CVE-2022-44715 | High | 8.8 | 2023-01-27 | Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload. |
CVE-2022-44298 | Critical | 9.8 | 2023-01-27 | SiteServer CMS 7.1.3 is vulnerable to SQL Injection. |
CVE-2022-44029 | Medium | 6.1 | 2023-01-27 | An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 6 of 6. |
CVE-2022-44028 | Medium | 6.1 | 2023-01-27 | An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 5 of 6. |
CVE-2022-44027 | Medium | 6.1 | 2023-01-27 | An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 4 of 6. |
CVE-2022-44026 | Medium | 6.1 | 2023-01-27 | An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 3 of 6. |
CVE-2022-44025 | Medium | 6.1 | 2023-01-27 | An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 2 of 6. |
CVE-2022-44024 | Medium | 6.1 | 2023-01-27 | An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 1 of 6. |
CVE-2022-2712 | Medium | 6.5 | 2023-01-27 | In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'. S… |
CVE-2022-46967 | Critical | 9.8 | 2023-01-26 | An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admin/DBbackup/ directory. |
CVE-2022-46966 | Critical | 9.8 | 2023-01-26 | Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php. |
CVE-2022-47951 | Medium | 5.7 | 2023-01-26 | An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova befor… |
CVE-2022-45770 | High | 7.8 | 2023-01-26 | Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation. |
CVE-2022-44264 | High | 7.8 | 2023-01-26 | Dentsply Sirona Sidexis <= 4.3 is vulnerable to Unquoted Service Path. |
CVE-2022-44263 | High | 7.8 | 2023-01-26 | Dentsply Sirona Sidexis <= 4.3 is vulnerable to Incorrect Access Control. |
CVE-2022-42493 | Critical | 9.8 | 2023-01-26 | Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lea… |
CVE-2022-42492 | Critical | 9.8 | 2023-01-26 | Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lea… |
CVE-2022-42491 | Critical | 9.8 | 2023-01-26 | Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lea… |
CVE-2022-42490 | Critical | 9.8 | 2023-01-26 | Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lea… |
CVE-2022-41991 | Critical | 9.8 | 2023-01-26 | A heap-based buffer overflow vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted n… |
CVE-2022-41154 | Medium | 6.5 | 2023-01-26 | A directory traversal vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network… |
CVE-2022-41030 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41029 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41028 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41027 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41026 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41025 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41024 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41023 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41022 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41021 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41020 | High | 7.2 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41019 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41018 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41017 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41016 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41015 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41014 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41013 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41012 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41011 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41010 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41009 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41008 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41007 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41006 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41005 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41004 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41003 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41002 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41001 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-41000 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40999 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40998 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40997 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40996 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40995 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40994 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40993 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40992 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40991 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40990 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40989 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40988 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40987 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40986 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40985 | Critical | 9.8 | 2023-01-26 | Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A speci… |
CVE-2022-40969 | High | 8.8 | 2023-01-26 | An os command injection vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP req… |
CVE-2022-40701 | High | 8.1 | 2023-01-26 | A directory traversal vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP reque… |
CVE-2022-40222 | Critical | 9.8 | 2023-01-26 | An OS command injection vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted networ… |
CVE-2022-40220 | High | 8.8 | 2023-01-26 | An OS command injection vulnerability exists in the httpd txt/restore.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted netw… |
CVE-2022-39045 | High | 8.8 | 2023-01-26 | A file write vulnerability exists in the httpd upload.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request can lea… |
CVE-2022-38715 | High | 8.8 | 2023-01-26 | A leftover debug code vulnerability exists in the httpd shell.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP request… |
CVE-2022-38459 | High | 8.8 | 2023-01-26 | A stack-based buffer overflow vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted H… |
CVE-2022-38088 | Medium | 6.5 | 2023-01-26 | A directory traversal vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP requ… |
CVE-2022-38066 | High | 8.8 | 2023-01-26 | An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HTTP response c… |
CVE-2022-36279 | High | 8.8 | 2023-01-26 | A stack-based buffer overflow vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted HT… |
CVE-2022-4510 | High | 7.8 | 2023-01-26 | A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, a… |
CVE-2022-4092 | Medium | 5.7 | 2023-01-26 | An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. It was possible to create a malicious README page due to imp… |
CVE-2022-4054 | Medium | 5.5 | 2023-01-26 | An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions star… |
CVE-2022-48199 | High | 8.8 | 2023-01-26 | SoftPerfect NetWorx 7.1.1 on Windows allows an attacker to execute a malicious binary with potentially higher privileges via a low-privileged user account that… |
CVE-2022-47767 | Critical | 9.8 | 2023-01-26 | A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker. This affects Solar-Log dev… |
CVE-2022-47615 | Critical | 9.3 | 2023-01-26 | Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions. |
CVE-2022-47100 | High | 7.5 | 2023-01-26 | A vulnerability in Sengled Smart bulb 0x0000024 allows attackers to arbitrarily perform a factory reset on the device via a crafted IEEE 802.15.4 frame. |
CVE-2022-47073 | Medium | 5.4 | 2023-01-26 | A cross-site scripting (XSS) vulnerability in the Create Ticket page of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted… |
CVE-2022-47052 | Medium | 6.1 | 2023-01-26 | The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi Router' is vulnerable to a CRLF Injection attack that can be leveraged to perform Reflected XSS an… |
CVE-2022-47042 | High | 8.8 | 2023-01-26 | MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/writeFileContent.do. |