2022 CVEs (page 90)
Page 90 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4028 | Medium | 6.4 | 2022-11-29 | The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during the profile-save action when… |
CVE-2022-4027 | High | 7.2 | 2022-11-29 | The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipulated during a forum response in versions… |
CVE-2022-3995 | Medium | 4.3 | 2022-11-29 | The TeraWallet plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 1.4.3. This is due to insufficient vali… |
CVE-2022-3991 | Medium | 6.4 | 2022-11-29 | The Photospace Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters saved via the update() function in version… |
CVE-2022-3898 | High | 8.8 | 2022-11-29 | The WP Affiliate Platform plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.3.9. This is due to missing or i… |
CVE-2022-3897 | Medium | 5.5 | 2022-11-29 | The WP Affiliate Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 6.3.9 due… |
CVE-2022-3896 | Medium | 6.1 | 2022-11-29 | The WP Affiliate Platform plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_SERVER["REQUEST_URI"] in versions up to, and including, 6… |
CVE-2022-3751 | Critical | 9.8 | 2022-11-29 | SQL Injection in GitHub repository owncast/owncast prior to 0.0.13. |
CVE-2022-3747 | High | 8.8 | 2022-11-29 | The Becustom plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.5.2. This is due to missing nonce validatio… |
CVE-2022-3384 | High | 7.2 | 2022-11-29 | The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0 via the populate_dropdown_options funct… |
CVE-2022-3383 | High | 7.2 | 2022-11-29 | The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0 via the get_option_value_from_callback… |
CVE-2022-3361 | Medium | 4.3 | 2022-11-29 | The Ultimate Member plugin for WordPress is vulnerable to directory traversal in versions up to, and including 2.5.0 due to insufficient input validation on th… |
CVE-2022-36964 | High | 8.8 | 2022-11-29 | SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web… |
CVE-2022-36962 | High | 7.2 | 2022-11-29 | SolarWinds Platform was susceptible to Command Injection. This vulnerability allows a remote adversary with complete control over the SolarWinds database to ex… |
CVE-2022-36960 | High | 8.8 | 2022-11-29 | SolarWinds Platform was susceptible to Improper Input Validation. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to e… |
CVE-2022-44279 | Medium | 6.1 | 2022-11-29 | Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.php. |
CVE-2022-4172 | Medium | 6.5 | 2022-11-29 | An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and writ… |
CVE-2022-4144 | Medium | 6.5 | 2022-11-29 | An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not check the size of the structure pointed… |
CVE-2022-46150 | Medium | 4.3 | 2022-11-29 | Discourse is an open-source discussion platform. Prior to version 2.8.13 of the `stable` branch and version 2.9.0.beta14 of the `beta` and `tests-passed` branc… |
CVE-2022-46152 | High | 8.2 | 2022-11-29 | OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validatio… |
CVE-2022-46148 | High | 7.1 | 2022-11-29 | Discourse is an open-source messaging platform. In versions 2.8.10 and prior on the `stable` branch and versions 2.9.0.beta11 and prior on the `beta` and `test… |
CVE-2022-44356 | High | 7.5 | 2022-11-29 | WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allows unauthenticated a… |
CVE-2022-44355 | Medium | 6.1 | 2022-11-29 | SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php. |
CVE-2022-44354 | Critical | 9.8 | 2022-11-29 | SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file. |
CVE-2022-25848 | High | 7.5 | 2022-11-29 | This affects all versions of package static-dev-server. This is because when paths from users to the root directory are joined, the assets for the path accesse… |
CVE-2022-21126 | High | 7.3 | 2022-11-29 | The package com.github.samtools:htsjdk before 3.0.1 are vulnerable to Creation of Temporary File in Directory with Insecure Permissions due to the createTempDi… |
CVE-2022-45343 | High | 7.8 | 2022-11-29 | GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the Q_IsTypeOn function at /gpac/src/bifs/unquantize.c. |
CVE-2022-44635 | High | 8.8 | 2022-11-29 | Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability in a file upload component of Apache Finer… |
CVE-2022-46146 | Medium | 6.2 | 2022-11-29 | Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and… |
CVE-2022-36433 | Medium | 6.1 | 2022-11-29 | The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the short_content and full_conte… |
CVE-2022-4202 | Medium | 6.3 | 2022-11-29 | A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsr_translate_coords of the… |
CVE-2022-45329 | High | 7.5 | 2022-11-29 | AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter. This vulnerability allows attackers to access database informa… |
CVE-2022-43326 | High | 7.5 | 2022-11-29 | An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*] allows attackers to arbi… |
CVE-2022-41568 | High | 7.5 | 2022-11-29 | LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat. |
CVE-2022-40799 | High | 8.8 | 2022-11-29 | Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device. |
CVE-2022-45204 | Medium | 5.5 | 2022-11-29 | GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a memory leak via the function dimC_box_read at isomedia/box_code_3gpp.c. |
CVE-2022-45202 | High | 7.8 | 2022-11-29 | GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC_box_read at isomedia/box_code_3gpp.c. |
CVE-2022-44038 | Critical | 9.8 | 2022-11-29 | Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component. |
CVE-2022-44037 | High | 8.8 | 2022-11-29 | An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to acce… |
CVE-2022-42109 | Critical | 9.8 | 2022-11-29 | Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php. |
CVE-2022-42100 | Medium | 5.4 | 2022-11-29 | KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form. |
CVE-2022-42099 | Medium | 5.4 | 2022-11-29 | KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location Forum Subject input. |
CVE-2022-41676 | Medium | 5.4 | 2022-11-29 | Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the w… |
CVE-2022-41675 | High | 8.0 | 2022-11-29 | A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form conten… |
CVE-2022-36137 | Medium | 4.8 | 2022-11-29 | ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader. |
CVE-2022-36136 | Medium | 4.8 | 2022-11-29 | ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment. |
CVE-2022-32967 | Low | 2.1 | 2022-11-29 | RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reb… |
CVE-2022-32966 | Medium | 6.5 | 2022-11-29 | RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service por… |
CVE-2022-45307 | Medium | 4.3 | 2022-11-29 | Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\tools\… |
CVE-2022-45306 | Medium | 4.3 | 2022-11-29 | Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all users in the Authenticated Users group write privileges for the… |
CVE-2022-45305 | Medium | 4.3 | 2022-11-29 | Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\Py… |
CVE-2022-45304 | Medium | 4.3 | 2022-11-29 | Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in the Authenticated Users group write privileges for the path C:\tools\Cmd… |
CVE-2022-45301 | Medium | 4.3 | 2022-11-29 | Insecure permissions in Chocolatey Ruby package v3.1.2.1 and below grants all users in the Authenticated Users group write privileges for the path C:\tools\rub… |
CVE-2022-4129 | Medium | 5.5 | 2022-11-28 | A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL point… |
CVE-2022-4128 | Medium | 5.5 | 2022-11-28 | A NULL pointer dereference issue was discovered in the Linux kernel in the MPTCP protocol when traversing the subflow list at disconnect time. A local user cou… |
CVE-2022-4127 | Medium | 5.5 | 2022-11-28 | A NULL pointer dereference issue was discovered in the Linux kernel in io_files_update_with_index_alloc. A local user could use this flaw to potentially crash… |
CVE-2022-45224 | Medium | 4.8 | 2022-11-28 | Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in Admin/add-admin.php. This vulnerability allows… |
CVE-2022-45223 | Medium | 4.8 | 2022-11-28 | Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /Admin/add-student.php. This vulnerability allo… |
CVE-2022-45221 | Medium | 4.8 | 2022-11-28 | Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in changepassword.php. This vulnerability allows a… |
CVE-2022-45214 | Medium | 6.1 | 2022-11-28 | A cross-site scripting (XSS) vulnerability in Sanitization Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted pay… |
CVE-2022-3088 | High | 7.8 | 2022-11-28 | UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100… |
CVE-2022-38753 | Medium | 6.3 | 2022-11-28 | This update resolves a multi-factor authentication bypass attack |
CVE-2022-24190 | High | 7.5 | 2022-11-28 | The /device/acceptBind end-point for Ourphoto App version 1.4.1 does not require authentication or authorization. The user_token header is not implemented or p… |
CVE-2022-24189 | Medium | 6.5 | 2022-11-28 | The user_token authorization header on the Ourphoto App version 1.4.1 /apiv1/* end-points is not implemented properly. Removing the value causes all requests t… |
CVE-2022-24188 | High | 7.5 | 2022-11-28 | The /device/signin end-point for the Ourphoto App version 1.4.1 discloses clear-text password information for functionality within the picture frame devices. T… |
CVE-2022-24187 | High | 7.5 | 2022-11-28 | The user_id and device_id on the Ourphoto App version 1.4.1 /device/* end-points both suffer from insecure direct object reference vulnerabilities. Other end-u… |
CVE-2022-46147 | High | 8.4 | 2022-11-28 | Drag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to drag items to zones on a target image. Versions prior to 3.0.0 are vul… |
CVE-2022-45921 | High | 7.5 | 2022-11-28 | FusionAuth before 1.41.3 allows a file outside of the application root to be viewed or retrieved using an HTTP request. To be specific, an attacker may be able… |
CVE-2022-45442 | High | 8.8 | 2022-11-28 | Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An appli… |
CVE-2022-44937 | Medium | 6.5 | 2022-11-28 | Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Add function under the Administrator List module. |
CVE-2022-41965 | Medium | 5.7 | 2022-11-28 | Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 12.5, Opencast's Paella authentica… |
CVE-2022-38140 | High | 7.6 | 2022-11-28 | Auth. (contributor+) Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin <= 12.1.10 on WordPress. |
CVE-2022-34654 | Medium | 4.3 | 2022-11-28 | Cross-Site Request Forgery (CSRF) in Virgial Berveling's Manage Notification E-mails plugin <= 1.8.2 on WordPress. |
CVE-2022-4104 | Medium | 5.5 | 2022-11-28 | A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting in a denial-of-servic… |
CVE-2022-4169 | Medium | 6.5 | 2022-11-28 | The Theme and plugin translation for Polylang is vulnerable to authorization bypass in versions up to, and including, 3.2.16 due to missing capability checks i… |
CVE-2022-41732 | Medium | 6.2 | 2022-11-28 | IBM Maximo Mobile 8.7 and 8.8 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 237407. |
CVE-2022-44399 | Critical | 9.8 | 2022-11-28 | Poultry Farm Management System v1.0 contains a SQL injection vulnerability via the del parameter at /Redcock-Farm/farm/category.php. |
CVE-2022-44401 | Critical | 9.8 | 2022-11-28 | Online Tours & Travels Management System v1.0 contains an arbitrary file upload vulnerability via /tour/admin/file.php. |
CVE-2022-44400 | Critical | 9.8 | 2022-11-28 | Purchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order/admin/?page=system_info. |
CVE-2022-44284 | Medium | 5.4 | 2022-11-28 | Dinstar FXO Analog VoIP Gateway DAG2000-16O is vulnerable to Cross Site Scripting (XSS). |
CVE-2022-44283 | Critical | 9.8 | 2022-11-28 | AVS Audio Converter 10.3 is vulnerable to Buffer Overflow. |
CVE-2022-41957 | High | 7.5 | 2022-11-28 | Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. The package muhammara before 2.6.2 and from 3.0.0 and before… |
CVE-2022-41944 | Low | 3.5 | 2022-11-28 | Discourse is an open-source discussion platform. In stable versions prior to 2.8.12 and beta or tests-passed versions prior to 2.9.0.beta.13, under certain con… |
CVE-2022-41921 | Low | 3.5 | 2022-11-28 | Discourse is an open-source discussion platform. Prior to version 2.9.0.beta13, users can post chat messages of an unlimited length, which can cause a denial o… |
CVE-2022-41912 | Critical | 9.1 | 2022-11-28 | The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion eleme… |
CVE-2022-31877 | High | 8.8 | 2022-11-28 | An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to escalate privileges via a crafted TCP packet. |
CVE-2022-3865 | High | 8.8 | 2022-11-28 | The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injecti… |
CVE-2022-3850 | Medium | 4.3 | 2022-11-28 | The Find and Replace All WordPress plugin before 1.3 does not have CSRF check when replacing string, which could allow attackers to make a logged admin replace… |
CVE-2022-3849 | High | 8.8 | 2022-11-28 | The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injecti… |
CVE-2022-3848 | High | 8.8 | 2022-11-28 | The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injecti… |
CVE-2022-3847 | Medium | 6.1 | 2022-11-28 | The Showing URL in QR Code WordPress plugin through 0.0.1 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping… |
CVE-2022-3839 | Medium | 4.8 | 2022-11-28 | The Analytics for WP WordPress plugin through 1.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to… |
CVE-2022-3834 | Medium | 4.8 | 2022-11-28 | The Google Forms WordPress plugin through 0.95 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfo… |
CVE-2022-3833 | Medium | 4.8 | 2022-11-28 | The Fancier Author Box by ThematoSoup WordPress plugin through 1.4 does not sanitise and escape some of its settings, which could allow high privilege users su… |
CVE-2022-3831 | Medium | 4.8 | 2022-11-28 | The reCAPTCHA WordPress plugin through 1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform S… |
CVE-2022-3828 | Medium | 4.8 | 2022-11-28 | The Video Thumbnails WordPress plugin through 2.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to… |
CVE-2022-3824 | Medium | 4.8 | 2022-11-28 | The WP Admin UI Customize WordPress plugin before 1.5.13 does not sanitise and escape some of its settings, which could allow high privilege users such as admi… |
CVE-2022-3823 | Medium | 4.8 | 2022-11-28 | The Beautiful Cookie Consent Banner WordPress plugin before 2.9.1 does not sanitise and escape some of its settings, which could allow high privilege users suc… |
CVE-2022-3822 | Medium | 4.8 | 2022-11-28 | The Donations via PayPal WordPress plugin before 1.9.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin… |
CVE-2022-3769 | High | 8.8 | 2022-11-28 | The OWM Weather WordPress plugin before 5.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection… |