# CVEs published 2022-08-05

169 CVEs were published on August 5, 2022: 34 critical, 24 high. Days are UTC.

- [CVE-2022-32543](https://cve.now/CVE-2022-32543.md): An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. (CVSS 7.3, ESTsoft Alyac)
- [CVE-2022-29886](https://cve.now/CVE-2022-29886.md): An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. (CVSS 7.3, ESTsoft Alyac)
- [CVE-2022-29465](https://cve.now/CVE-2022-29465.md): An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0. (CVSS 8.1, Accusoft ImageGear)
- [CVE-2022-28665](https://cve.now/CVE-2022-28665.md): A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. (CVSS 5.3, FreshTomato)
- [CVE-2022-28664](https://cve.now/CVE-2022-28664.md): A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. (CVSS 5.3, FreshTomato)
- [CVE-2022-27660](https://cve.now/CVE-2022-27660.md): A denial of service vulnerability exists in the confctl\_set\_guest\_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.3, TCL LinkHub Mesh Wifi)
- [CVE-2022-27633](https://cve.now/CVE-2022-27633.md): An information disclosure vulnerability exists in the confctl\_get\_guest\_wlan functionality of TCL LinkHub Mesh Wifi MS1G\_00\_01.00\_14. (CVSS 6.5, TCL LinkHub Mesh Wifi)
- [CVE-2022-27631](https://cve.now/CVE-2022-27631.md): A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. (CVSS 5.3, DD-WRT)
- [CVE-2022-27630](https://cve.now/CVE-2022-27630.md): An information disclosure vulnerability exists in the confctl\_get\_master\_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 6.5, TCL LinkHub Mesh Wifi)
- [CVE-2022-27185](https://cve.now/CVE-2022-27185.md): A denial of service vulnerability exists in the confctl\_set\_master\_wlan functionality of TCL LinkHub Mesh Wifi MS1G\_00\_01.00\_14. (CVSS 9.3, TCL LinkHub Mesh Wifi)
- [CVE-2022-27178](https://cve.now/CVE-2022-27178.md): A denial of service vulnerability exists in the confctl\_set\_wan\_cfg functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-26376](https://cve.now/CVE-2022-26376.md): A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386\_48706 and Asuswrt-Merlin New… (CVSS 5.3, Asuswrt-Merlin New Gen)
- [CVE-2022-26346](https://cve.now/CVE-2022-26346.md): A denial of service vulnerability exists in the ucloud\_del\_node functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-26342](https://cve.now/CVE-2022-26342.md): A buffer overflow vulnerability exists in the confsrv ucloud\_set\_node\_location functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-26009](https://cve.now/CVE-2022-26009.md): A stack-based buffer overflow vulnerability exists in the confsrv ucloud\_set\_node\_location functionality of TCL LinkHub Mesh Wi-Fi… (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-25996](https://cve.now/CVE-2022-25996.md): A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-24029](https://cve.now/CVE-2022-24029.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24028](https://cve.now/CVE-2022-24028.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24027](https://cve.now/CVE-2022-24027.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24026](https://cve.now/CVE-2022-24026.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24025](https://cve.now/CVE-2022-24025.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24024](https://cve.now/CVE-2022-24024.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24023](https://cve.now/CVE-2022-24023.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24022](https://cve.now/CVE-2022-24022.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24021](https://cve.now/CVE-2022-24021.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24020](https://cve.now/CVE-2022-24020.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24019](https://cve.now/CVE-2022-24019.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24018](https://cve.now/CVE-2022-24018.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24017](https://cve.now/CVE-2022-24017.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24016](https://cve.now/CVE-2022-24016.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24015](https://cve.now/CVE-2022-24015.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24014](https://cve.now/CVE-2022-24014.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24013](https://cve.now/CVE-2022-24013.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24012](https://cve.now/CVE-2022-24012.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24011](https://cve.now/CVE-2022-24011.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24010](https://cve.now/CVE-2022-24010.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24009](https://cve.now/CVE-2022-24009.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24008](https://cve.now/CVE-2022-24008.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24007](https://cve.now/CVE-2022-24007.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24006](https://cve.now/CVE-2022-24006.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24005](https://cve.now/CVE-2022-24005.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-23919](https://cve.now/CVE-2022-23919.md): A stack-based buffer overflow vulnerability exists in the confsrv set\_mf\_rule functionality of TCL LinkHub Mesh Wifi MS1G\_00\_01.00\_14. (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-23918](https://cve.now/CVE-2022-23918.md): A stack-based buffer overflow vulnerability exists in the confsrv set\_mf\_rule functionality of TCL LinkHub Mesh Wifi MS1G\_00\_01.00\_14. (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-23399](https://cve.now/CVE-2022-23399.md): A stack-based buffer overflow vulnerability exists in the confsrv set\_port\_fwd\_rule functionality of TCL LinkHub Mesh Wifi MS1G\_00\_01.00\_14. (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-23103](https://cve.now/CVE-2022-23103.md): A stack-based buffer overflow vulnerability exists in the confsrv confctl\_set\_app\_language functionality of TCL LinkHub Mesh Wi-Fi… (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-22144](https://cve.now/CVE-2022-22144.md): A hard-coded password vulnerability exists in the libcommonprod.so prod\_change\_root\_passwd functionality of TCL LinkHub Mesh Wi-Fi… (CVSS 7.5, TCL LinkHub Mesh Wifi)
- [CVE-2022-22140](https://cve.now/CVE-2022-22140.md): An os command injection vulnerability exists in the confsrv ucloud\_add\_node functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-21201](https://cve.now/CVE-2022-21201.md): A stack-based buffer overflow vulnerability exists in the confers ucloud\_add\_node\_new functionality of TCL LinkHub Mesh Wi-Fi… (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-21178](https://cve.now/CVE-2022-21178.md): An os command injection vulnerability exists in the confsrv ucloud\_add\_new\_node functionality of TCL LinkHub Mesh Wifi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-31618](https://cve.now/CVE-2022-31618.md): NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null pointer, which may… (CVSS 5.5, NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming)
- [CVE-2022-37450](https://cve.now/CVE-2022-37450.md): Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a… (no CVSS, github.com/ethereum/go-ethereum)
- [CVE-2022-31614](https://cve.now/CVE-2022-31614.md): NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources. (CVSS 7.0, NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming)
- [CVE-2022-31609](https://cve.now/CVE-2022-31609.md): NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to allocate resources… (CVSS 7.8, NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming)
- [CVE-2022-2685](https://cve.now/CVE-2022-2685.md): SourceCodester Interview Management System addQuestion.php cross site scripting (CVSS 3.5, SourceCodester Interview Management System)
- [CVE-2022-2684](https://cve.now/CVE-2022-2684.md): SourceCodester Apartment Visitor Management System manage-apartment.php cross site scripting (CVSS 3.5, SourceCodester Apartment Visitor Management System)
- [CVE-2022-2683](https://cve.now/CVE-2022-2683.md): SourceCodester Simple Food Ordering System login.php cross site scripting (CVSS 3.5, SourceCodester Simple Food Ordering System)
- [CVE-2022-2682](https://cve.now/CVE-2022-2682.md): SourceCodester Alphaware Simple E-Commerce System stockin.php cross site scripting (CVSS 3.5, SourceCodester Alphaware Simple E-Commerce System)
- [CVE-2022-2681](https://cve.now/CVE-2022-2681.md): SourceCodester Online Student Admission System Student User Page edit-profile.php cross site scripting (CVSS 3.5, SourceCodester Online Student Admission System)
- [CVE-2022-2680](https://cve.now/CVE-2022-2680.md): SourceCodester Church Management System login.php sql injection (CVSS 6.3, SourceCodester Church Management System)
- [CVE-2022-2679](https://cve.now/CVE-2022-2679.md): SourceCodester Interview Management System viewReport.php sql injection (CVSS 6.3, SourceCodester Interview Management System)
- [CVE-2022-2678](https://cve.now/CVE-2022-2678.md): SourceCodester Alphaware Simple E-Commerce System Background Management Page admin\_feature.php unrestricted upload (CVSS 6.3, SourceCodester Alphaware Simple E-Commerce System)
- [CVE-2022-2677](https://cve.now/CVE-2022-2677.md): SourceCodester Apartment Visitor Management System index.php sql injection (CVSS 6.3, SourceCodester Apartment Visitor Management System)
- [CVE-2022-2676](https://cve.now/CVE-2022-2676.md): SourceCodester Electronic Medical Records System POST Request sql injection (CVSS 6.3, SourceCodester Electronic Medical Records System)
- [CVE-2022-35163](https://cve.now/CVE-2022-35163.md): Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the U\_NAME parameter at… (no CVSS)
- [CVE-2022-35162](https://cve.now/CVE-2022-35162.md): Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the CATEGORY parameter at… (no CVSS)
- [CVE-2022-2675](https://cve.now/CVE-2022-2675.md): Unitree Go 1 "Robot Dog" Unauthenticated Remote Power Down (no CVSS, Unitree Go)
- [CVE-2022-27535](https://cve.now/CVE-2022-27535.md): Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All… (no CVSS, Kaspersky VPN Secure Connection for Windows)
- [CVE-2021-28511](https://cve.now/CVE-2021-28511.md): This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this… (CVSS 5.8, Arista Networks EOS)
- [CVE-2022-29071](https://cve.now/CVE-2022-29071.md): This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where… (CVSS 4.0, Arista Networks CloudVision Portal)
- [CVE-2022-28880](https://cve.now/CVE-2022-28880.md): Denial-of-Service (DoS) Vulnerability (CVSS 4.3, All F-Secure and WithSecure Endpoint Protection products fo…)
- [CVE-2022-2668](https://cve.now/CVE-2022-2668.md): An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the… (no CVSS, keycloak · org.keycloak:keycloak-parent)
- [CVE-2022-37398](https://cve.now/CVE-2022-37398.md): A stack-based buffer overflow vulnerability was found on ADM (CVSS 7.1, ASUSTOR ADM)
- [CVE-2021-46678](https://cve.now/CVE-2021-46678.md): Vulnerability XSS in service form name field (CVSS 4.0, Artica PFMS Pandora FMS)
- [CVE-2021-46680](https://cve.now/CVE-2021-46680.md): Vulnerability XSS in module form name field (CVSS 4.0, Artica PFMS Pandora FMS)
- [CVE-2021-46677](https://cve.now/CVE-2021-46677.md): Vulnerability XSS in Event filter name field (CVSS 4.0, Artica PFMS Pandora FMS)
- [CVE-2021-46676](https://cve.now/CVE-2021-46676.md): Vulnerability XSS in Transaction Map name field (CVSS 4.0, Artica PFMS Pandora FMS)
- [CVE-2021-46679](https://cve.now/CVE-2021-46679.md): Vulnerability XSS in service elements (CVSS 4.0, Artica PFMS Pandora FMS)
- [CVE-2021-46681](https://cve.now/CVE-2021-46681.md): Vulnerability XSS in module mass operation name field (CVSS 4.0, Artica PFMS Pandora FMS)
- [CVE-2022-1704](https://cve.now/CVE-2022-1704.md): Inductive Automation Ignition (CVSS 7.6, Inductive Automation Ignition)
- [CVE-2022-34769](https://cve.now/CVE-2022-34769.md): Michlol - rashim web interface Insecure direct object references (IDOR) (CVSS 6.3, Michlol - rashim web)
- [CVE-2022-34768](https://cve.now/CVE-2022-34768.md): Synel - eHarmony Stored XSS (CVSS 6.5, Synel eHarmony)
- [CVE-2021-27798](https://cve.now/CVE-2021-27798.md): privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.x (no CVSS, Brocade Fabric OS)
- [CVE-2022-2053](https://cve.now/CVE-2022-2053.md): When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit… (no CVSS, Undertow · io.undertow:undertow-core)
- [CVE-2022-22299](https://cve.now/CVE-2022-22299.md): A format string vulnerability \[CWE-134\] in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0… (CVSS 7.8, Fortinet FortiADC, FortiProxy, FortiMail, FortiOS)
- [CVE-2016-3098](https://cve.now/CVE-2016-3098.md): Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth… (no CVSS, administrate)
- [CVE-2020-1754](https://cve.now/CVE-2020-1754.md): In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were… (CVSS 4.3, Moodle)
- [CVE-2020-1691](https://cve.now/CVE-2020-1691.md): In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site… (no CVSS, Moodle · moodle/moodle)
- [CVE-2022-33720](https://cve.now/CVE-2022-33720.md): Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chrome locked by… (CVSS 2.4, Samsung Mobile Devices)
- [CVE-2022-33730](https://cve.now/CVE-2022-33730.md): Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical… (CVSS 6.8, Samsung Mobile Devices)
- [CVE-2022-33719](https://cve.now/CVE-2022-33719.md): Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow. (CVSS 8.6, Samsung Mobile Devices)
- [CVE-2022-33724](https://cve.now/CVE-2022-33724.md): Exposure of Sensitive Information in Samsung Dialer application?prior to SMR Aug-2022 Release 1 allows local attackers to access ICCID via… (CVSS 3.3, Samsung Mobile Devices)
- [CVE-2022-36833](https://cve.now/CVE-2022-36833.md): Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android… (CVSS 7.3, Samsung Mobile Game Optimizing Service)
- [CVE-2022-33726](https://cve.now/CVE-2022-33726.md): Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity. (CVSS 3.3, Samsung Mobile Devices)
- [CVE-2022-33722](https://cve.now/CVE-2022-33722.md): Implicit Intent hijacking vulnerability in Smart View prior to SMR Aug-2022 Release 1 allows attacker to access connected device MAC… (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-36839](https://cve.now/CVE-2022-36839.md): SQL injection vulnerability via IAPService in Samsung Checkout prior to version 5.0.53.1 allows attackers to access IAP information. (CVSS 5.9, Samsung Mobile Samsung Checkout)
- [CVE-2022-33721](https://cve.now/CVE-2022-33721.md): A vulnerability using PendingIntent in DeX for PC prior to SMR Aug-2022 Release 1 allows attackers to access files with system privilege. (CVSS 4.4, Samsung Mobile Devices)
- [CVE-2022-33732](https://cve.now/CVE-2022-33732.md): Improper access control vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows local attackers to scan and connect to… (CVSS 6.2, Samsung Mobile Devices)
- [CVE-2022-36832](https://cve.now/CVE-2022-36832.md): Improper access control vulnerability in WebApp in Cameralyzer prior to versions 3.2.22, 3.3.22, 3.4.22 and 3.5.51 allows attackers to… (CVSS 4.0, Samsung Mobile Cameralyzer)
- [CVE-2022-33731](https://cve.now/CVE-2022-33731.md): Improper access control vulnerability in DesktopSystemUI prior to SMR Aug-2022 Release 1 allows attackers to enable and disable arbitrary… (CVSS 5.1, Samsung Mobile Devices)
- [CVE-2022-36840](https://cve.now/CVE-2022-36840.md): DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to execute arbitrary code. (CVSS 4.5, Samsung Mobile Samsung Update Setup)
- [CVE-2022-36834](https://cve.now/CVE-2022-36834.md): Exposure of Sensitive Information vulnerability in Game Launcher prior to version 6.0.07 allows local attacker to access app data with… (CVSS 3.3, Samsung Mobile Game Launcher)
- [CVE-2022-33714](https://cve.now/CVE-2022-33714.md): Improper access control vulnerability in SemWifiApBroadcastReceiver prior to SMR Aug-2022 Release 1 allows attacker to reset a setting… (CVSS 6.2, Samsung Mobile Devices)
- [CVE-2022-33718](https://cve.now/CVE-2022-33718.md): An improper access control vulnerability in Wi-Fi Service prior to SMR AUG-2022 Release 1 allows untrusted applications to manipulate the… (CVSS 6.2, Samsung Mobile Devices)
- [CVE-2022-33715](https://cve.now/CVE-2022-33715.md): Improper access control and path traversal vulnerability in LauncherProvider prior to SMR Aug-2022 Release 1 allow local attacker to… (CVSS 5.3, Samsung Mobile Devices)
- [CVE-2022-36836](https://cve.now/CVE-2022-36836.md): Unprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to read connection state without permission. (CVSS 6.2, Samsung Mobile Charm by Samsung)
- [CVE-2022-36830](https://cve.now/CVE-2022-36830.md): PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access… (CVSS 6.2, Samsung Mobile Charm by Samsung)
- [CVE-2022-36829](https://cve.now/CVE-2022-36829.md): PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files… (CVSS 6.2, Samsung Mobile Charm by Samsung)
- [CVE-2022-33734](https://cve.now/CVE-2022-33734.md): Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth… (CVSS 6.2, Samsung Mobile Charm by Samsung)
- [CVE-2022-33733](https://cve.now/CVE-2022-33733.md): Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth… (CVSS 6.2, Samsung Mobile Charm by Samsung)
- [CVE-2022-36837](https://cve.now/CVE-2022-36837.md): Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to get sensitive… (CVSS 6.2, Samsung Mobile Samsung email)
- [CVE-2022-36838](https://cve.now/CVE-2022-36838.md): Implicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows attacker to get sensitive information. (CVSS 4.0, Samsung Mobile Galaxy Wearable)
- [CVE-2022-33725](https://cve.now/CVE-2022-33725.md): A vulnerability using PendingIntent in Knox VPN prior to SMR Aug-2022 Release 1 allows attackers to access content providers with system… (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-33717](https://cve.now/CVE-2022-33717.md): A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read out of bound memory. (CVSS 4.4, Samsung Mobile Devices)
- [CVE-2022-33716](https://cve.now/CVE-2022-33716.md): An absence of variable initialization in ICCC TA prior to SMR Aug-2022 Release 1 allows local attacker to read uninitialized memory. (CVSS 2.3, Samsung Mobile Devices)
- [CVE-2022-36831](https://cve.now/CVE-2022-36831.md): Path traversal vulnerability in UriFileUtils of Samsung Notes prior to version 4.3.14.39 allows attacker to access some file as Samsung… (CVSS 6.2, Samsung Mobile Samsung notes)
- [CVE-2022-33728](https://cve.now/CVE-2022-33728.md): Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress… (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-33729](https://cve.now/CVE-2022-33729.md): Improper restriction of broadcasting Intent in ConfirmConnectActivity of?NFC prior to SMR Aug-2022 Release 1 leaks MAC address of the… (CVSS 5.9, Samsung Mobile Devices)
- [CVE-2022-33727](https://cve.now/CVE-2022-33727.md): A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an… (CVSS 4.8, Samsung Mobile Devices)
- [CVE-2022-33723](https://cve.now/CVE-2022-33723.md): A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an… (CVSS 4.8, Samsung Mobile Devices)
- [CVE-2022-36835](https://cve.now/CVE-2022-36835.md): Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files. (CVSS 3.3, Samsung Mobile Samsung Internet Browser)
- [CVE-2022-2095](https://cve.now/CVE-2022-2095.md): An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions starting from 15.1… (CVSS 4.3, GitLab)
- [CVE-2022-2459](https://cve.now/CVE-2022-2459.md): An issue has been discovered in GitLab EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all… (CVSS 2.7, GitLab)
- [CVE-2022-2500](https://cve.now/CVE-2022-2500.md): A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2… (CVSS 4.4, GitLab)
- [CVE-2022-2501](https://cve.now/CVE-2022-2501.md): An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to… (CVSS 5.9, GitLab)
- [CVE-2022-2534](https://cve.now/CVE-2022-2534.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1… (CVSS 2.2, GitLab)
- [CVE-2022-2303](https://cve.now/CVE-2022-2303.md): An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all… (CVSS 4.3, GitLab)
- [CVE-2022-2326](https://cve.now/CVE-2022-2326.md): An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all… (CVSS 6.4, GitLab)
- [CVE-2022-2307](https://cve.now/CVE-2022-2307.md): A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1… (CVSS 3.5, GitLab)
- [CVE-2022-2498](https://cve.now/CVE-2022-2498.md): An issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to… (CVSS 6.4, GitLab)
- [CVE-2022-2456](https://cve.now/CVE-2022-2456.md): An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all… (CVSS 4.9, GitLab)
- [CVE-2022-2417](https://cve.now/CVE-2022-2417.md): Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1… (CVSS 6.2, GitLab)
- [CVE-2022-2539](https://cve.now/CVE-2022-2539.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2… (CVSS 5.3, GitLab)
- [CVE-2022-2512](https://cve.now/CVE-2022-2512.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions starting from 15.1… (CVSS 6.5, GitLab)
- [CVE-2022-2499](https://cve.now/CVE-2022-2499.md): An issue has been discovered in GitLab EE affecting all versions starting from 13.10 before 15.0.5, all versions starting from 15.1 before… (CVSS 3.5, GitLab)
- [CVE-2022-2497](https://cve.now/CVE-2022-2497.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions starting from 15.1… (CVSS 8.5, GitLab)
- [CVE-2022-2531](https://cve.now/CVE-2022-2531.md): An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before… (CVSS 5.3, GitLab)
- [CVE-2022-36284](https://cve.now/CVE-2022-36284.md): WordPress Affiliate For WooCommerce premium plugin \<= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change (CVSS 6.4, StoreApps Affiliate For WooCommerce)
- [CVE-2021-36861](https://cve.now/CVE-2021-36861.md): WordPress Rich Reviews by Starfish plugin \<= 1.9.14 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Starfish Reviews Rich Reviews by Starfish)
- [CVE-2022-33201](https://cve.now/CVE-2022-33201.md): WordPress MailerLite – Signup forms (official) plugin \<= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 6.3, MailerLite)
- [CVE-2022-36296](https://cve.now/CVE-2022-36296.md): WordPress ActiveDEMAND plugin \<= 0.2.27 - Broken Authentication vulnerability (CVSS 6.5, JumpDEMAND ActiveDEMAND)
- [CVE-2022-25649](https://cve.now/CVE-2022-25649.md): WordPress Affiliate For WooCommerce premium plugin \<= 4.7.0 - Multiple Improper Access Control vulnerabilities (CVSS 5.0, StoreApps Affiliate For WooCommerce)
- [CVE-2022-31657](https://cve.now/CVE-2022-31657.md): VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31656](https://cve.now/CVE-2022-31656.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local… (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31658](https://cve.now/CVE-2022-31658.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31661](https://cve.now/CVE-2022-31661.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31659](https://cve.now/CVE-2022-31659.md): VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31663](https://cve.now/CVE-2022-31663.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31664](https://cve.now/CVE-2022-31664.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31665](https://cve.now/CVE-2022-31665.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31660](https://cve.now/CVE-2022-31660.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31662](https://cve.now/CVE-2022-31662.md): VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. (no CVSS, VMware Workspace ONE Access, Access Connector, Identity Man…)
- [CVE-2022-35936](https://cve.now/CVE-2022-35936.md): Ethermint DoS through Unintended Contract Selfdestruct (CVSS 8.2, evmos ethermint · github.com/evmos/ethermint +9)
- [CVE-2022-2674](https://cve.now/CVE-2022-2674.md): SourceCodester Best Fee Management System admin\_class.php login sql injection (CVSS 7.3, SourceCodester Best Fee Management System)
- [CVE-2022-2673](https://cve.now/CVE-2022-2673.md): Rigatur Online Booking and Hotel Management System POST Request login.php sql injection (CVSS 6.3, Rigatur Online Booking and Hotel Management System)
- [CVE-2022-2672](https://cve.now/CVE-2022-2672.md): SourceCodester Garage Management System createUser.php sql injection (CVSS 6.3, SourceCodester Garage Management System)
- [CVE-2022-2671](https://cve.now/CVE-2022-2671.md): SourceCodester Garage Management System removeUser.php sql injection (CVSS 6.3, SourceCodester Garage Management System)
- [CVE-2022-2667](https://cve.now/CVE-2022-2667.md): SourceCodester Loan Management System delete\_lplan.php sql injection (CVSS 6.3, SourceCodester Loan Management System)
- [CVE-2022-2665](https://cve.now/CVE-2022-2665.md): SourceCodester Simple E-Learning System classroom.php sql injection (CVSS 6.3, SourceCodester Simple E-Learning System)
- [CVE-2022-2664](https://cve.now/CVE-2022-2664.md): Private Cloud Management Platform POST Request global\_config\_query improper authentication (CVSS 7.3, Private Cloud Management Platform)
- [CVE-2022-2636](https://cve.now/CVE-2022-2636.md): Code Injection in hestiacp/hestiacp (CVSS 8.5, hestiacp/hestiacp)
- [CVE-2022-2626](https://cve.now/CVE-2022-2626.md): Incorrect Privilege Assignment in hestiacp/hestiacp (CVSS 9.1, hestiacp/hestiacp)
- [CVE-2022-37431](https://cve.now/CVE-2022-37431.md): A Reflected Cross-site scripting (XSS) issue was discovered in dotCMS Core through 22.06. (no CVSS)
- [CVE-2022-21186](https://cve.now/CVE-2022-21186.md): Arbitrary Command Injection (CVSS 9.8, @acrontum/filesystem-template)
- [CVE-2022-37416](https://cve.now/CVE-2022-37416.md): Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2\_mc\_fullx\_fully\_8x8. (no CVSS)
- [CVE-2022-37415](https://cve.now/CVE-2022-37415.md): The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008. (no CVSS)
- [CVE-2022-1012](https://cve.now/CVE-2022-1012.md): A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. (no CVSS, Kernel)
- [CVE-2022-1158](https://cve.now/CVE-2022-1158.md): A flaw was found in KVM. (no CVSS, kernel)
- [CVE-2022-1973](https://cve.now/CVE-2022-1973.md): A use-after-free flaw was found in the Linux kernel in log\_replay in fs/ntfs3/fslog.c in the NTFS journal. (no CVSS, kernel)
- [CVE-2022-37434](https://cve.now/CVE-2022-37434.md): zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2022-08-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.