2022 CVEs (page 76)
Page 76 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4585 | Low | 3.5 | 2022-12-17 | A vulnerability classified as problematic has been found in Opencaching Deutschland oc-server3. This affects an unknown part of the file htdocs/templates2/ocst… |
CVE-2022-4584 | Medium | 6.3 | 2022-12-17 | A vulnerability was found in Axiomatic Bento4 up to 1.6.0-639. It has been rated as critical. Affected by this issue is some unknown functionality of the compo… |
CVE-2022-4583 | Medium | 6.3 | 2022-12-17 | A vulnerability was found in jLEMS. It has been declared as critical. Affected by this vulnerability is the function unpackJar of the file src/main/java/org/le… |
CVE-2022-4582 | Low | 3.5 | 2022-12-17 | A vulnerability was found in starter-public-edition-4 up to 4.6.10. It has been classified as problematic. Affected is an unknown function. The manipulation le… |
CVE-2022-4581 | Low | 3.5 | 2022-12-17 | A vulnerability was found in 1j01 mind-map and classified as problematic. This issue affects some unknown processing of the file app.coffee. The manipulation o… |
CVE-2022-4567 | High | 8.1 | 2022-12-17 | Improper Access Control in GitHub repository openemr/openemr prior to 7.0.0.2. |
CVE-2022-4572 | Medium | 5.4 | 2022-12-17 | A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Affected by this issue is the function ubireader_extract_files… |
CVE-2022-23488 | Medium | 6.5 | 2022-12-17 | BigBlueButton is an open source web conferencing system. Versions prior to 2.4-rc-6 are vulnerable to Insertion of Sensitive Information Into Sent Data. The mo… |
CVE-2022-23531 | Medium | 5.8 | 2022-12-17 | GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to 0.1.5 are vulnerable to Relative Path Traversal when scanning a specially-crafted… |
CVE-2022-38756 | Medium | 4.3 | 2022-12-16 | A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent tha… |
CVE-2022-23530 | Medium | 5.8 | 2022-12-16 | GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to v0.1.8 are vulnerable to arbitrary file write when scanning a specially-crafted r… |
CVE-2022-37832 | Critical | 9.8 | 2022-12-16 | Mutiny 7.2.0-10788 suffers from Hardcoded root password. |
CVE-2022-26582 | High | 7.8 | 2022-12-16 | PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow an attacker to gain root access through command injection in systool client. The attack… |
CVE-2022-26581 | Medium | 6.8 | 2022-12-16 | PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow an unauthorized attacker to perform privileged actions through the execution of specifi… |
CVE-2022-26580 | Medium | 6.8 | 2022-12-16 | PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow the execution of specific command injections on selected binaries in the ADB daemon she… |
CVE-2022-26579 | Medium | 6.0 | 2022-12-16 | PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow a root privileged attacker to install unsigned packages. The attacker must have shell a… |
CVE-2022-23490 | Medium | 4.3 | 2022-12-16 | BigBlueButton is an open source web conferencing system. Versions prior to 2.4.0 expose sensitive information to Unauthorized Actors. This issue affects meetin… |
CVE-2022-46670 | High | 7.1 | 2022-12-16 | Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controll… |
CVE-2022-3157 | High | 8.6 | 2022-12-16 | A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault (MNRF) and a denial-o… |
CVE-2022-47210 | High | 7.8 | 2022-12-16 | The default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be… |
CVE-2022-47209 | High | 8.8 | 2022-12-16 | A support user exists on the device and appears to be a backdoor for Technical Support staff. The default password for this account is “support” and cannot be… |
CVE-2022-47208 | High | 8.8 | 2022-12-16 | The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user input. An unauthenticated attacker on th… |
CVE-2022-3166 | High | 7.5 | 2022-12-16 | Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-servic… |
CVE-2022-2966 | Low | 3.3 | 2022-12-16 | Out-of-bounds Read vulnerability in Delta Electronics DOPSoft.This issue affects DOPSoft: All Versions. |
CVE-2022-4566 | Medium | 5.5 | 2022-12-16 | A vulnerability, which was classified as critical, has been found in y_project RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/ge… |
CVE-2022-4565 | Medium | 4.3 | 2022-12-16 | A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.Zip… |
CVE-2022-41972 | Low | 2.9 | 2022-12-16 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 contain a NULL Pointer Dereference in BLE… |
CVE-2022-41964 | Medium | 5.7 | 2022-12-16 | BigBlueButton is an open source web conferencing system. This vulnerability only affects release candidates of BigBlueButton 2.4. The attacker can start a subs… |
CVE-2022-4564 | Medium | 4.3 | 2022-12-16 | A vulnerability classified as problematic has been found in University of Central Florida Materia up to 9.0.0. This affects the function before of the file fue… |
CVE-2022-4563 | High | 7.8 | 2022-12-16 | A vulnerability was found in Freedom of the Press SecureDrop. It has been rated as critical. Affected by this issue is some unknown functionality of the file g… |
CVE-2022-4561 | Low | 3.5 | 2022-12-16 | A vulnerability classified as problematic has been found in SemanticDrilldown Extension. Affected is the function printFilterLine of the file includes/specials… |
CVE-2022-4560 | Low | 3.5 | 2022-12-16 | A vulnerability was found in Joget up to 7.0.31. It has been rated as problematic. This issue affects the function getInternalJsCssLib of the file wflow-core/s… |
CVE-2022-4559 | Low | 3.5 | 2022-12-16 | A vulnerability was found in INEX IPX-Manager up to 6.2.0. It has been declared as problematic. This vulnerability affects unknown code of the file resources/v… |
CVE-2022-4558 | Low | 3.5 | 2022-12-16 | A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+U… |
CVE-2022-4556 | Low | 3.5 | 2022-12-16 | A vulnerability was found in Alinto SOGo up to 5.7.1 and classified as problematic. Affected by this issue is the function _migrateMailIdentities of the file S… |
CVE-2022-46109 | High | 7.5 | 2022-12-16 | Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState. |
CVE-2022-41992 | High | 7.8 | 2022-12-16 | A memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record functionality of PowerISO PowerISO 8.3. A specially-crafted file can le… |
CVE-2022-4326 | Medium | 5.5 | 2022-12-16 | Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator priv… |
CVE-2022-4130 | Medium | 4.5 | 2022-12-16 | A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external interaction to an attacker's server by… |
CVE-2022-46137 | High | 7.5 | 2022-12-16 | AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: AeroCMS v0.0.1. |
CVE-2022-46135 | High | 7.2 | 2022-12-16 | In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the… |
CVE-2022-45796 | Critical | 9.1 | 2022-12-16 | Command injection vulnerability in nw_interface.html in SHARP multifunction printers (MFPs)'s Digital Full-color Multifunctional System 202 or earlier, 120 or… |
CVE-2022-44502 | Medium | 5.5 | 2022-12-16 | Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2022-44500 | Medium | 5.5 | 2022-12-16 | Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2022-44499 | Medium | 5.5 | 2022-12-16 | Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2022-44498 | Medium | 5.5 | 2022-12-16 | Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2022-44473 | Medium | 5.4 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able… |
CVE-2022-44469 | Medium | 5.4 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able… |
CVE-2022-44468 | Medium | 5.4 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able… |
CVE-2022-44462 | Medium | 5.4 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able… |
CVE-2022-42544 | High | 7.8 | 2022-12-16 | In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could… |
CVE-2022-42543 | Medium | 4.4 | 2022-12-16 | In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosur… |
CVE-2022-42542 | Medium | 6.7 | 2022-12-16 | In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o… |
CVE-2022-42535 | Medium | 5.5 | 2022-12-16 | In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with U… |
CVE-2022-42534 | High | 7.8 | 2022-12-16 | In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input validation. This could lead to local escalatio… |
CVE-2022-42532 | Medium | 4.4 | 2022-12-16 | In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2022-42531 | High | 7.8 | 2022-12-16 | In mmu_map_for_fw of gs_ldfw_load.c, there is a possible mitigation bypass due to Permissive Memory Allocation. This could lead to local escalation of privileg… |
CVE-2022-42530 | Medium | 4.4 | 2022-12-16 | In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2022-42529 | Critical | 9.8 | 2022-12-16 | Product: AndroidVersions: Android kernelAndroid ID: A-235292841References: N/A |
CVE-2022-42527 | High | 7.5 | 2022-12-16 | In cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional executi… |
CVE-2022-42526 | Medium | 6.7 | 2022-12-16 | In ConvertUtf8ToUcs2 of radio_hal_utils.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of priv… |
CVE-2022-42525 | Medium | 6.7 | 2022-12-16 | In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala… |
CVE-2022-42524 | High | 7.5 | 2022-12-16 | In sms_GetTpUdlIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure wit… |
CVE-2022-42523 | Medium | 6.7 | 2022-12-16 | In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala… |
CVE-2022-42522 | Medium | 4.4 | 2022-12-16 | In DoSetCarrierConfig of miscservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclos… |
CVE-2022-42521 | Medium | 6.7 | 2022-12-16 | In encode of wlandata.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with Syst… |
CVE-2022-42520 | Medium | 6.7 | 2022-12-16 | In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System ex… |
CVE-2022-42519 | Medium | 6.7 | 2022-12-16 | In CdmaBroadcastSmsConfigsRequestData::encode of cdmasmsdata.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escala… |
CVE-2022-42518 | Medium | 6.7 | 2022-12-16 | In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal… |
CVE-2022-42517 | Medium | 4.4 | 2022-12-16 | In MiscService::DoOemSetTcsFci of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information d… |
CVE-2022-42516 | Medium | 4.4 | 2022-12-16 | In ProtocolSimBuilderLegacy::BuildSimGetGbaAuth of protocolsimbuilderlegacy.cpp, there is a possible out of bounds read due to a missing bounds check. This cou… |
CVE-2022-42515 | Medium | 4.4 | 2022-12-16 | In MiscService::DoOemSetRtpPktlossThreshold of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local… |
CVE-2022-42514 | Medium | 4.4 | 2022-12-16 | In ProtocolImsBuilder::BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local… |
CVE-2022-42513 | Medium | 6.7 | 2022-12-16 | In ProtocolEmbmsBuilder::BuildSetSession of protocolembmsbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to… |
CVE-2022-42512 | Medium | 4.4 | 2022-12-16 | In VsimOperationDataExt::encode of vsimdata.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis… |
CVE-2022-42511 | Medium | 6.7 | 2022-12-16 | In EmbmsSessionData::encode of embmsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2022-42510 | Medium | 6.7 | 2022-12-16 | In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation… |
CVE-2022-42509 | Medium | 6.7 | 2022-12-16 | In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr… |
CVE-2022-42508 | Medium | 6.7 | 2022-12-16 | In ProtocolCallBuilder::BuildSendUssd of protocolcallbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to loc… |
CVE-2022-42507 | Medium | 6.7 | 2022-12-16 | In ProtocolSimBuilder::BuildSimUpdatePb3gEntry of protocolsimbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lea… |
CVE-2022-42506 | Medium | 6.7 | 2022-12-16 | In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privi… |
CVE-2022-42505 | Medium | 6.7 | 2022-12-16 | In ProtocolMiscBuilder::BuildSetSignalReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to an incorrect bounds check. This… |
CVE-2022-42504 | Medium | 6.7 | 2022-12-16 | In CallDialReqData::encodeCallNumber of callreqdata.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local esc… |
CVE-2022-42503 | Medium | 6.7 | 2022-12-16 | In ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This… |
CVE-2022-42502 | Medium | 6.7 | 2022-12-16 | In FacilityLock::Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege… |
CVE-2022-42501 | Medium | 6.7 | 2022-12-16 | In HexString2Value of util.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with Sy… |
CVE-2022-42367 | Medium | 5.4 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able… |
CVE-2022-42366 | Medium | 5.4 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able… |
CVE-2022-42360 | Medium | 5.4 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able… |
CVE-2022-42351 | Medium | 4.3 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A… |
CVE-2022-42343 | Medium | 6.5 | 2022-12-16 | Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitr… |
CVE-2022-38106 | Medium | 5.4 | 2022-12-16 | This vulnerability happens in the web client versions 15.3.0 to Serv-U 15.3.1. This vulnerability affects the directory creation function. |
CVE-2022-35696 | Medium | 5.4 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able… |
CVE-2022-35694 | Medium | 5.4 | 2022-12-16 | Adobe Experience Manager version 6.5.14 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able… |
CVE-2022-31708 | Medium | 4.9 | 2022-12-16 | vRealize Operations (vROps) contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity rang… |
CVE-2022-31707 | High | 7.2 | 2022-12-16 | vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity rang… |
CVE-2022-25628 | High | 8.8 | 2022-12-16 | An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4 |
CVE-2022-25627 | Medium | 6.7 | 2022-12-16 | An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Man… |
CVE-2022-25626 | Medium | 5.3 | 2022-12-16 | An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server sid… |
CVE-2022-20610 | High | 8.8 | 2022-12-16 | In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to remote code execution with LTE authenticat… |