2022 CVEs (page 81)
Page 81 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-45484 | Low | 3.3 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-45044 | Medium | 5.3 | 2022-12-13 | A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.50), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All… |
CVE-2022-44731 | Medium | 5.4 | 2022-12-13 | A vulnerability has been identified in SIMATIC WinCC OA V3.15 (All versions < V3.15 P038), SIMATIC WinCC OA V3.16 (All versions < V3.16 P035), SIMATIC WinCC OA… |
CVE-2022-44575 | Medium | 6.1 | 2022-12-13 | A vulnerability has been identified in PLM Help Server V4.2 (All versions). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of… |
CVE-2022-43724 | Critical | 9.8 | 2022-12-13 | A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software transmits the database credentials for the inbuilt SQL server in… |
CVE-2022-43723 | High | 7.5 | 2022-12-13 | A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0), SICAM PAS/PQS (All versions >= 7.0 < V8.06). Affected software does not properly va… |
CVE-2022-43722 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This… |
CVE-2022-43517 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in Simcenter STAR-CCM+ (All versions < V2306). The affected application improperly assigns file permissions to installation… |
CVE-2022-41288 | Low | 3.3 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-41287 | Low | 3.3 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-41286 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-41285 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-41284 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-41283 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-41282 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-41281 | High | 7.8 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-41280 | Low | 3.3 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-41279 | Low | 3.3 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-41278 | Low | 3.3 | 2022-12-13 | A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V… |
CVE-2022-3996 | High | 7.5 | 2022-12-13 | If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some op… |
CVE-2022-33268 | High | 8.2 | 2022-12-13 | Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer… |
CVE-2022-33238 | High | 7.5 | 2022-12-13 | Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon C… |
CVE-2022-33235 | High | 8.2 | 2022-12-13 | Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2022-31699 | Low | 3.3 | 2022-12-13 | VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achie… |
CVE-2022-31698 | Medium | 5.3 | 2022-12-13 | The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Serv… |
CVE-2022-31697 | Medium | 5.5 | 2022-12-13 | The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a workstat… |
CVE-2022-31696 | High | 8.8 | 2022-12-13 | VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may expl… |
CVE-2022-27581 | Medium | 6.5 | 2022-12-13 | Use of a Broken or Risky Cryptographic Algorithm in SICK RFU61x firmware version <v2.25 allows a low-privileged remote attacker to decrypt the encrypted data i… |
CVE-2022-25712 | Medium | 6.7 | 2022-12-13 | Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobil… |
CVE-2022-25711 | Medium | 6.7 | 2022-12-13 | Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IO… |
CVE-2022-25702 | High | 7.5 | 2022-12-13 | Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IO… |
CVE-2022-25698 | High | 8.4 | 2022-12-13 | Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables |
CVE-2022-25697 | High | 8.4 | 2022-12-13 | Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables |
CVE-2022-25695 | High | 8.4 | 2022-12-13 | Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdrago… |
CVE-2022-25692 | High | 7.5 | 2022-12-13 | Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industria… |
CVE-2022-25691 | High | 7.5 | 2022-12-13 | Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile |
CVE-2022-25689 | High | 7.5 | 2022-12-13 | Denial of service in Modem due to reachable assertion in Snapdragon Mobile |
CVE-2022-25685 | High | 7.5 | 2022-12-13 | Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdrago… |
CVE-2022-25682 | High | 8.4 | 2022-12-13 | Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2022-25681 | High | 8.4 | 2022-12-13 | Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon… |
CVE-2022-25677 | Medium | 6.7 | 2022-12-13 | Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industr… |
CVE-2022-25675 | Medium | 5.5 | 2022-12-13 | Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdragon Compute, Snapdragon Industrial IOT, Sn… |
CVE-2022-25673 | High | 7.5 | 2022-12-13 | Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile |
CVE-2022-25672 | High | 7.5 | 2022-12-13 | Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile |
CVE-2022-20611 | High | 7.8 | 2022-12-13 | In deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass carrier restrictions due to a permissions bypass. This could l… |
CVE-2022-20502 | Medium | 5.5 | 2022-12-13 | In GetResolvedMethod of entrypoint_utils-inl.h, there is a possible use after free due to a stale cache. This could lead to local information disclosure with n… |
CVE-2022-20501 | High | 7.3 | 2022-12-13 | In onCreate of EnableAccountPreferenceActivity.java, there is a possible way to mislead the user into enabling a malicious phone account due to a tapjacking/ov… |
CVE-2022-20500 | Medium | 5.5 | 2022-12-13 | In loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead to local denial of service with no addi… |
CVE-2022-20498 | Medium | 4.4 | 2022-12-13 | In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosur… |
CVE-2022-20497 | Medium | 4.6 | 2022-12-13 | In updatePublicMode of NotificationLockscreenUserManagerImpl.java, there is a possible way to reveal sensitive notifications on the lockscreen due to an incorr… |
CVE-2022-20496 | Medium | 5.5 | 2022-12-13 | In setDataSource of initMediaExtractor.cpp, there is a possibility of arbitrary code execution due to a use after free. This could lead to local information di… |
CVE-2022-20495 | High | 7.8 | 2022-12-13 | In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility service due to a logic error in the code… |
CVE-2022-20491 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20488 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20487 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20486 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20485 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20484 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20483 | High | 7.5 | 2022-12-13 | In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer overflows. This could… |
CVE-2022-20482 | Medium | 5.5 | 2022-12-13 | In createNotificationChannel of NotificationManager.java, there is a possible way to make the device unusable and require factory reset due to resource exhaust… |
CVE-2022-20480 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20479 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20478 | High | 7.8 | 2022-12-13 | In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to… |
CVE-2022-20477 | High | 7.8 | 2022-12-13 | In shouldHideNotification of KeyguardNotificationVisibilityProvider.kt, there is a possible way to show hidden notifications due to a logic error in the code… |
CVE-2022-20476 | Medium | 5.5 | 2022-12-13 | In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead… |
CVE-2022-20475 | High | 7.8 | 2022-12-13 | In test of ResetTargetTaskHelper.java, there is a possible hijacking of any app which sets allowTaskReparenting="true" due to a confused deputy. This could lea… |
CVE-2022-20474 | High | 7.8 | 2022-12-13 | In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local… |
CVE-2022-20473 | Critical | 9.8 | 2022-12-13 | In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with… |
CVE-2022-20472 | Critical | 9.8 | 2022-12-13 | In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with… |
CVE-2022-20471 | Medium | 5.5 | 2022-12-13 | In SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis… |
CVE-2022-20470 | High | 7.8 | 2022-12-13 | In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation. This cou… |
CVE-2022-20469 | High | 8.8 | 2022-12-13 | In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privile… |
CVE-2022-20468 | Medium | 6.5 | 2022-12-13 | In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure ov… |
CVE-2022-20466 | Medium | 5.5 | 2022-12-13 | In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's password on a secondary display due to an in… |
CVE-2022-20449 | Medium | 4.4 | 2022-12-13 | In writeApplicationRestrictionsLAr of UserManagerService.java, there is a possible overwrite of system files due to a path traversal error. This could lead to… |
CVE-2022-20442 | High | 7.3 | 2022-12-13 | In onCreate of ReviewPermissionsActivity.java, there is a possible way to grant permissions for a separate app with API level < 23 due to a tapjacking/overlay… |
CVE-2022-20411 | High | 8.8 | 2022-12-13 | In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetoot… |
CVE-2022-20240 | Low | 2.3 | 2022-12-13 | In sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location information due to a missing permission check. This could lead t… |
CVE-2022-46363 | High | 7.5 | 2022-12-13 | A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration. The vulnerability… |
CVE-2022-46059 | Medium | 6.5 | 2022-12-13 | AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF). |
CVE-2022-45871 | Medium | 4.3 | 2022-12-13 | A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP re… |
CVE-2022-45693 | High | 7.5 | 2022-12-13 | Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS)… |
CVE-2022-45690 | High | 7.5 | 2022-12-13 | A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) v… |
CVE-2022-45689 | High | 7.5 | 2022-12-13 | hutool-json v5.8.10 was discovered to contain an out of memory error. |
CVE-2022-45688 | High | 7.5 | 2022-12-13 | A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data. |
CVE-2022-45685 | High | 7.5 | 2022-12-13 | A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data. |
CVE-2022-44636 | Medium | 4.6 | 2022-12-13 | The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote… |
CVE-2022-44303 | Medium | 6.1 | 2022-12-13 | Resque Scheduler version 1.27.4 is vulnerable to Cross-site scripting (XSS). A remote attacker could inject javascript code to the "{schedule_job}" or "args" p… |
CVE-2022-29580 | High | 8.9 | 2022-12-13 | There exists a path traversal vulnerability in the Android Google Search app. This is caused by the incorrect usage of uri.getLastPathSegment. A symbolic encod… |
CVE-2022-46061 | Medium | 6.1 | 2022-12-13 | AeroCMS v0.0.1 is vulnerable to ClickJacking. |
CVE-2022-46058 | Medium | 4.8 | 2022-12-13 | AeroCMS v0.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary… |
CVE-2022-46047 | Medium | 4.9 | 2022-12-13 | AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter. |
CVE-2022-38124 | Medium | 5.7 | 2022-12-13 | Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner. |
CVE-2022-4446 | Critical | 9.8 | 2022-12-13 | PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0. |
CVE-2022-4444 | Low | 3.5 | 2022-12-13 | A vulnerability was found in ipti br.tag. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation lea… |
CVE-2022-4098 | High | 8.0 | 2022-12-13 | Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the C… |
CVE-2022-23523 | Medium | 4.0 | 2022-12-13 | In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offse… |
CVE-2022-23505 | Medium | 5.3 | 2022-12-13 | Passport-wsfed-saml2 is a ws-federation protocol and SAML2 tokens authentication provider for Passport. In versions prior to 4.6.3, a remote attacker may be ab… |
CVE-2022-46160 | Medium | 4.3 | 2022-12-13 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14.2.99.104, project level authorizations… |
CVE-2022-41915 | Medium | 6.5 | 2022-12-13 | Netty project is an event-driven asynchronous network application framework. Starting in version 4.1.83.Final and prior to 4.1.86.Final, when calling `DefaultH… |