CVEs published September 16, 2022
258 CVEs were published on September 16, 2022: 9 critical, 54 high. Browse them by severity, product and exploitation status.
- Published
- 258
- Critical
- 9
- High
- 54
- Medium
- 99
- Low
- 2
- Unrated
- 94
- Now in CISA KEV
- 0
- Fix available
- 89
Most affected products
- tensorflow · tensorflow-cpu +1
- 36
- tensorflow · tensorflow-gpu +1
- 20
- Adobe InDesign
- 17
- Huawei HarmonyOS · Huawei EMUI
- 17
- Adobe Experience Manager
- 11
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 11
- Adobe Photoshop
- 10
- Huawei HarmonyOS · Huawei EMUI +1
- 8
- Adobe InCopy
- 7
- Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- 5
Critical 9
- CVE-2022-3214Delta Electronics DIAEnergy Use of Hard-coded CredentialsDelta Electronics DIAEnergy
- CVE-2022-39009The WLAN module has a vulnerability in permission verification.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-39007The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-39008The NFC module has bundle serialization/deserialization vulnerabilities.Huawei HarmonyOS · Huawei EMUI
- CVE-2021-42949The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing…
- CVE-2022-25708Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon MobileQualcomm Snapdragon Connectivity, Snapdragon Mobile
- CVE-2022-25652Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and NetworkingQualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2022-22105Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT…Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2022-26959There are two full (read/write) Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application.
High 54
- CVE-2022-2333Honeywell SoftMaster Uncontrolled Search Path ElementHoneywell SoftMaster
- CVE-2022-28758Zoom On-Premise Deployments: Improper Access ControlZoom Video Communications Zoom On-Premise Meeting Connector…
- CVE-2022-35937OOB read in `Gather_nd` op in TensorFlow Litetensorflow · tensorflow-cpu +1
- CVE-2022-35939Out of bounds write in `scatter_nd` op in TensorFlow Litetensorflow · tensorflow-cpu +1
- CVE-2022-35938OOB read in `Gather_nd` op in TensorFlow Lite Microtensorflow
- CVE-2022-39001The number identification module has a path traversal vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-38417Adobe InDesign SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2022-38416Adobe InDesign SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2022-38413Adobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2022-38415Adobe InDesign PCX File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2022-38414Adobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2022-28852Adobe InDesign 2022 Out-of-Bound Write Arbitrary code executionAdobe InDesign
- CVE-2022-28853Adobe InDesign 2022 Out-of-Bound Write Arbitrary code executionAdobe InDesign
- CVE-2022-38434Adobe Photoshop SVG File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38432Adobe Photoshop SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38433Adobe Photoshop SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38426Adobe Photoshop U3D File Parsing Uninitialized Variable Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38429Adobe Photoshop SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38431Adobe Photoshop SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-35713Adobe Photoshop U3D File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38427Adobe Photoshop U3D File Parsing Uninitialized Variable Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38430Adobe Photoshop MP4 File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38401Adobe InCopy PCX File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-38405Adobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-38404Adobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InCopy
Show all 54 entriesShow fewer entries
- CVE-2022-38402Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-38403Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-38408Adobe Illustrator Improper Input Validation Arbitrary code executionAdobe Illustrator
- CVE-2022-38411Adobe Animate SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe Animate
- CVE-2022-38412Adobe Animate SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Animate
- CVE-2022-3225Improper Control of Dynamically-Managed Code Resources in budibase/budibasebudibase/budibase · @budibase/worker +2
- CVE-2022-38877Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductImage.php?id=1.
- CVE-2022-38878School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/event/index.php?view=edit&id=.
- CVE-2022-38832School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via…
- CVE-2022-38833School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via…
- CVE-2022-3176Use-after-free in io_uring in Linux KernelLinux Kernel
- CVE-2022-25706Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-25696Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-25693Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon MobileQualcomm Snapdragon Connectivity, Snapdragon Mobile
- CVE-2022-25690Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-25686Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-25688Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-25670Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-25669Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-25656Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22095Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock…Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2022-22094memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity…Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2022-22093Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs…Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2022-22092Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT…Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2022-22091Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22081Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon…Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2022-22089Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon…Qualcomm Snapdragon Connectivity, Snapdragon Mobile, Snapdr…
- CVE-2022-22074Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22066Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute…Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
Medium, low and unrated 195
- CVE-2022-39217Improper Neutralization of Formula Elements in a CSV File in ghas-to-csvsome-natalie ghas-to-csv
- CVE-2022-39212Last video frame is still sent after video is disabled in a call in Nextcloud Talknextcloud security-advisories
- CVE-2022-39210Access to internal files of the Nextcloud Android appnextcloud security-advisories
- CVE-2022-39211Server-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Servernextcloud security-advisories
- CVE-2022-36015Integer overflow in math ops in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36012Assertion fail on MLIR empty edge names in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35996Floating point exception in `Conv2D` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-36027Segfault TFLite converter on per-channel quantized transposed convolutions in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36017Segfault in `Requantize` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-40300Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304…
- CVE-2022-36014Null-dereference in `mlir::tfg::TFOp::nameAttr` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36000Null dereference on MLIR on empty function attributes in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36011Null dereference on MLIR on empty function attributes in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36013Null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35994`CHECK` fail in `CollectiveGather` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35993`CHECK` fail in `SetSize` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35992`CHECK` fail in `TensorListFromTensor` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35991`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35999`CHECK` fail in `Conv2DBackpropInput` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35998`CHECK` fail in `EmptyTensorList` in TensorFlowtensorflow
- CVE-2022-35997`CHECK` fail in `tf.sparse.cross` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35995`CHECK` fail in `AudioSummaryV2` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36016`CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-36005`CHECK` fail in `FakeQuantWithMinMaxVarsGradient` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36004`CHECK` fail in `tf.random.gamma` in TensorFlowtensorflow · tensorflow-gpu +1
Show all 195 entriesShow fewer entries
- CVE-2022-36003`CHECK` fail in `RandomPoissonV2` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36002`CHECK` fail in `Unbatch` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36001`CHECK` fail in `DrawBoundingBoxes` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-36026`CHECK` fail in `QuantizeAndDequantizeV3` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-36018`CHECK` fail in `RaggedTensorToVariant` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36019`CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35990`CHECK` fail in `FakeQuantWithMinMaxVarsPerChannelGradient` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35986Segfault in `RaggedBincount` in TensorFlowtensorflow
- CVE-2022-35987`CHECK` fail in `DenseBincount` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35985`CHECK` fail in `LRNGrad` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35984`CHECK` fail in `ParameterizedTruncatedNormal` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35983`CHECK` fail in `Save` and `SaveSlices` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-40757A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACComputeFinal function in Samsung mTower through 0.3.0 allows a…
- CVE-2022-40758A Buffer Access with Incorrect Length Value vulnerablity in the TEE_CipherUpdate function in Samsung mTower through 0.3.0 allows a trusted…
- CVE-2022-40759A NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to…
- CVE-2022-40760A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACUpdate function in Samsung mTower through 0.3.0 allows a trusted…
- CVE-2022-40761The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking…
- CVE-2022-40762A Memory Allocation with Excessive Size Value vulnerablity in the TEE_Realloc function in Samsung mTower through 0.3.0 allows a trusted…
- CVE-2022-35989`CHECK` fail in `MaxPool` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35988`CHECK` fail in `tf.linalg.matrix_rank` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35982Segfault in `SparseBincount` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35981`CHECK` fail in `FractionalMaxPoolGrad` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35979Segfault in `QuantizedRelu` and `QuantizedRelu6`tensorflow · tensorflow-gpu +1
- CVE-2022-35974Segfault in `QuantizeDownAndShrinkRange` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35972Segfault in `QuantizedBiasAdd` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35973Segfault in `QuantizedMatMul` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-37258Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in…steal
- CVE-2022-37251Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts.craftcms/cms
- CVE-2022-35971`CHECK` fail in `FakeQuantWithMinMaxVars` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35969`CHECK` fail in `Conv2DBackpropInput` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35970Segfault in `QuantizedInstanceNorm` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-37709Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing.
- CVE-2022-35968`CHECK` fail in `AvgPoolGrad` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35966Segfault in `QuantizedAvgPool` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35967Segfault in `QuantizedAdd` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35194TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventoryView.php.
- CVE-2022-37247Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page.craftcms/cms
- CVE-2022-35964Segfault in `BlockLSTMGradV2` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35965Segfault in `LowerBound` and `UpperBound` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-29489WordPress Sucuri Security plugin <= 1.8.33 - Cross-Site Request Forgery (CSRF) vulnerabilitySucuri Security
- CVE-2022-2332Honeywell SoftMaster Incorrect Permission Assignment for Critical ResourceHoneywell SoftMaster
- CVE-2022-40755JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c.
- CVE-2022-3217When logging in to a VBASE runtime project via Web-Remote, the product uses XOR with a static initial key to obfuscate login messages.VISAM VBASE
- CVE-2022-35963`CHECK` failures in `FractionalAvgPoolGrad` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35960`CHECK` failure in `TensorListReserve` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35959`CHECK` failures in `AvgPool3DGrad` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35952`CHECK` failures in `UnbatchGradOp` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35940Int overflow in `RaggedRangeOp` in Tensoflowtensorflow · tensorflow-cpu +1
- CVE-2022-35941`CHECK` failure in `AvgPoolOp` in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2020-254916Kare Emakin 5.0.341.0 is affected by Cross Site Scripting (XSS) via the /rpc/membership/setProfile DisplayName field, which is mishandled…
- CVE-2022-35935`CHECK` failure in `SobolSample` via missing validation in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35934`CHECK` failure in tf.reshape in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-38611Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via…
- CVE-2022-38621Doufox v0.0.4 was discovered to contain a remote code execution (RCE) vulnerability via the edit file page.
- CVE-2022-39063When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment…Open5GS
- CVE-2020-36601Out-of-bounds write vulnerability in the kernel modules.Huawei EMUI · Huawei Magic UI
- CVE-2020-36600Out-of-bounds write vulnerability in the power consumption module.Huawei EMUI · Huawei Magic UI
- CVE-2022-39003Buffer overflow vulnerability in the video framework.Huawei EMUI · Huawei Magic UI
- CVE-2021-40019Out-of-bounds heap read vulnerability in the HW_KEYMASTER module.Huawei EMUI
- CVE-2021-40023Configuration defects in the secure OS module.Huawei EMUI
- CVE-2022-39010The HwChrService module has a vulnerability in permission control.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38999The AOD module has the improper update of reference count vulnerability.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38997The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-38996The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38995The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38994The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38992The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38991The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38979The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-38978The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-38989The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38988The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-39005The MPTCP module has the memory leak vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-39004The MPTCP module has the memory leak vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-38987The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-39006The MPTCP module has the race condition vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-38993The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38990The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-39000The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps…Huawei HarmonyOS · Huawei EMUI +1
- CVE-2021-46836Implementation of the WLAN module interfaces has the information disclosure vulnerability.Huawei HarmonyOS · Huawei EMUI
- CVE-2021-40024Implementation of the WLAN module interfaces has the information disclosure vulnerability.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-35664AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30681AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30684AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-34218AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30686AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30682AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30680AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30685AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30678AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30683AEM Violation of Secure Design Principles Security feature bypassAdobe Experience Manager
- CVE-2022-30677AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30676Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-30675Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-30673Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-30674Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-30672Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-28855Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-28857Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-30671Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-28854Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-28856Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-38428Adobe Photoshop DCM File Parsing Use-After-Free Information Disclosure VulnerabilityAdobe Photoshop
- CVE-2022-38407Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe InCopy
- CVE-2022-38406Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe InCopy
- CVE-2022-38410Adobe Illustrator EPS File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Illustrator
- CVE-2022-38409Adobe Illustrator EPS File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Illustrator
- CVE-2021-42597A Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Storage Unit Rental Management System PHP 8.0.10 , Apache 2.4.14…
- CVE-2021-41731Cross Site Scripting (XSS vulnerability exists in )Sourcecodester News247 News Magazine (CMS) PHP 5.6 or higher and MySQL 5.7 or higher…
- CVE-2022-37775Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History…
- CVE-2022-36402There is an int overflow vulnerability in vmwgfx driverLinux kernel
- CVE-2022-35193TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php.
- CVE-2022-35195TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php
- CVE-2022-40337OASES (aka Open Aviation Strategic Engineering System) 8.8.0.2 allows attackers to execute arbitrary code via the Open Print Folder menu.
- CVE-2021-42948HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters…
- CVE-2022-37248Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via src/helpers/Cp.php.craftcms/cms
- CVE-2022-37250Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting (XSS) in /admin/myaccount.craftcms/cms
- CVE-2022-38829Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg.
- CVE-2022-38830Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setIPv6Status.
- CVE-2022-38831Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/SetNetControlList
- CVE-2022-38823In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample.
- CVE-2022-38826In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi.
- CVE-2022-38827TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi
- CVE-2022-38828TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi
- CVE-2022-38808ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.
- CVE-2022-38843EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the…
- CVE-2022-38844CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating contacts with…
- CVE-2022-38845Cross Site Scripting in Import feature in EspoCRM 7.1.8 allows remote users to run malicious JavaScript in victim s browser via sending…
- CVE-2022-38846EspoCRM version 7.1.8 is vulnerable to Missing Secure Flag allowing the browser to send plain text cookies over an insecure channel (HTTP).
- CVE-2022-3223Cross-site Scripting (XSS) - Stored in jgraph/drawiojgraph/drawio
- CVE-2022-40152Stack Buffer Overflow in Woodstoxxstream Woodstox · com.fasterxml.woodstox:woodstox-core
- CVE-2022-40151Stack Buffer Overflow in xstreamxstream · com.thoughtworks.xstream:xstream
- CVE-2022-2913Login No Captcha reCAPTCHA < 1.7 - IP Check BypassLogin No Captcha reCAPTCHA
- CVE-2022-2912Craw Data <= 1.0.0 - Server Side Request ForgeryCraw Data
- CVE-2022-2877Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP SpoofingTitan Anti-spam & Security
- CVE-2022-2887WP Server Health Stats < 1.7.0 - Admin+ Stored Cross-Site ScriptingWP Server Health Stats
- CVE-2022-2799Affiliates Manager < 2.9.14 - Admin+ Stored Cross-Site ScriptingAffiliates Manager
- CVE-2022-2798Affiliates Manager < 2.9.14 - Affiliate CSV InjectionAffiliates Manager
- CVE-2022-2737WP STAGING < 2.9.18 - Admin+ Stored Cross-Site ScriptingWP STAGING – Backup Duplicator & Migration
- CVE-2022-2669WP Taxonomy Import <= 1.0.4 - Reflected Cross-Site ScriptingWP Taxonomy Import
- CVE-2022-2654Classima < 2.1.11 - Reflected Cross-Site ScriptingClassified Listing – Classified ads & Business Directory… +3
- CVE-2022-2655Classified Listing Pro < 2.0.20 - Reflected Cross-Site ScriptingClassified Listing Pro - Classified ads & Business Director…
- CVE-2022-2635Autoptimize < 3.1.1 - Admin+ Stored Cross Site ScriptingAutoptimize
- CVE-2022-2575WBW Currency Switcher for WooCommerce < 1.6.6 - Admin+ Stored XSSWBW Currency Switcher for WooCommerce
- CVE-2022-2351Post SMTP < 2.1.4 - Admin+ Stored Cross-Site ScriptingPost SMTP Mailer/Email Log
- CVE-2022-1194Mobile Events Manager < 1.4.8 - Admin+ CSV InjectionMobile Events Manager
- CVE-2022-25654Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity…Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2022-25653Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity…Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2020-23560IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000001bcab.
- CVE-2020-23559IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007d7f.
- CVE-2020-23558IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007f4b.
- CVE-2020-23557IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000755d.
- CVE-2020-23556IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28.
- CVE-2020-23555IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e.
- CVE-2020-23554IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20.
- CVE-2020-23553IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33.
- CVE-2020-23552IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e62.
- CVE-2020-23551IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30.
- CVE-2020-23550IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e82.
- CVE-2022-36536An issue in the component post_applogin.php of Super Flexible Software GmbH & Co.
- CVE-2022-36533Super Flexible Software GmbH & Co.
- CVE-2022-36532Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR privileges to upload…
- CVE-2022-35415An improper input validation in NI System Configuration Manager before 22.5 may allow a privileged user to potentially enable escalation…
- CVE-2022-34002The ‘document’ parameter of PDS Vista 7’s /application/documents/display.aspx page is vulnerable to a Local File Inclusion vulnerability…
- CVE-2021-40017The HW_KEYMASTER module lacks the validity check of the key format.HarmonyOS;EMUI
- CVE-2022-2863WPvivid Backup < 0.9.76 - Admin+ Arbitrary File ReadMigration, Backup, Staging – WPvivid
- CVE-2022-36534Super Flexible Software GmbH & Co.
- CVE-2022-39002Double free vulnerability in the storage module.HarmonyOS;EMUI;Magic UI
- CVE-2022-40149Stack Buffer Overflow in JettisonJettison · org.codehaus.jettison:jettison
- CVE-2022-40150Stack Buffer Overflow in JettisonJettison · org.codehaus.jettison:jettison