# CVEs published 2022-09-16

258 CVEs were published on September 16, 2022: 9 critical, 54 high. Days are UTC.

- [CVE-2022-39217](https://cve.now/CVE-2022-39217.md): Improper Neutralization of Formula Elements in a CSV File in ghas-to-csv (CVSS 5.8, some-natalie ghas-to-csv)
- [CVE-2022-39212](https://cve.now/CVE-2022-39212.md): Last video frame is still sent after video is disabled in a call in Nextcloud Talk (CVSS 4.3, nextcloud security-advisories)
- [CVE-2022-39210](https://cve.now/CVE-2022-39210.md): Access to internal files of the Nextcloud Android app (CVSS 3.2, nextcloud security-advisories)
- [CVE-2022-39211](https://cve.now/CVE-2022-39211.md): Server-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Server (CVSS 3.0, nextcloud security-advisories)
- [CVE-2022-36015](https://cve.now/CVE-2022-36015.md): Integer overflow in math ops in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36012](https://cve.now/CVE-2022-36012.md): Assertion fail on MLIR empty edge names in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35996](https://cve.now/CVE-2022-35996.md): Floating point exception in \`Conv2D\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-36027](https://cve.now/CVE-2022-36027.md): Segfault TFLite converter on per-channel quantized transposed convolutions in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36017](https://cve.now/CVE-2022-36017.md): Segfault in \`Requantize\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-40300](https://cve.now/CVE-2022-40300.md): Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304… (no CVSS)
- [CVE-2022-36014](https://cve.now/CVE-2022-36014.md): Null-dereference in \`mlir::tfg::TFOp::nameAttr\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36000](https://cve.now/CVE-2022-36000.md): Null dereference on MLIR on empty function attributes in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36011](https://cve.now/CVE-2022-36011.md): Null dereference on MLIR on empty function attributes in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36013](https://cve.now/CVE-2022-36013.md): Null-dereference in \`mlir::tfg::GraphDefImporter::ConvertNodeDef\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35994](https://cve.now/CVE-2022-35994.md): \`CHECK\` fail in \`CollectiveGather\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35993](https://cve.now/CVE-2022-35993.md): \`CHECK\` fail in \`SetSize\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35992](https://cve.now/CVE-2022-35992.md): \`CHECK\` fail in \`TensorListFromTensor\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35991](https://cve.now/CVE-2022-35991.md): \`CHECK\` fail in \`TensorListScatter\` and \`TensorListScatterV2\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35999](https://cve.now/CVE-2022-35999.md): \`CHECK\` fail in \`Conv2DBackpropInput\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35998](https://cve.now/CVE-2022-35998.md): \`CHECK\` fail in \`EmptyTensorList\` in TensorFlow (CVSS 5.9, tensorflow)
- [CVE-2022-35997](https://cve.now/CVE-2022-35997.md): \`CHECK\` fail in \`tf.sparse.cross\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35995](https://cve.now/CVE-2022-35995.md): \`CHECK\` fail in \`AudioSummaryV2\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36016](https://cve.now/CVE-2022-36016.md): \`CHECK\`-fail in \`tensorflow::full\_type::SubstituteFromAttrs\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-36005](https://cve.now/CVE-2022-36005.md): \`CHECK\` fail in \`FakeQuantWithMinMaxVarsGradient\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36004](https://cve.now/CVE-2022-36004.md): \`CHECK\` fail in \`tf.random.gamma\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-36003](https://cve.now/CVE-2022-36003.md): \`CHECK\` fail in \`RandomPoissonV2\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36002](https://cve.now/CVE-2022-36002.md): \`CHECK\` fail in \`Unbatch\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36001](https://cve.now/CVE-2022-36001.md): \`CHECK\` fail in \`DrawBoundingBoxes\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-36026](https://cve.now/CVE-2022-36026.md): \`CHECK\` fail in \`QuantizeAndDequantizeV3\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-36018](https://cve.now/CVE-2022-36018.md): \`CHECK\` fail in \`RaggedTensorToVariant\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36019](https://cve.now/CVE-2022-36019.md): \`CHECK\` fail in \`FakeQuantWithMinMaxVarsPerChannel\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35990](https://cve.now/CVE-2022-35990.md): \`CHECK\` fail in \`FakeQuantWithMinMaxVarsPerChannelGradient\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35986](https://cve.now/CVE-2022-35986.md): Segfault in \`RaggedBincount\` in TensorFlow (CVSS 5.9, tensorflow)
- [CVE-2022-35987](https://cve.now/CVE-2022-35987.md): \`CHECK\` fail in \`DenseBincount\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35985](https://cve.now/CVE-2022-35985.md): \`CHECK\` fail in \`LRNGrad\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35984](https://cve.now/CVE-2022-35984.md): \`CHECK\` fail in \`ParameterizedTruncatedNormal\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35983](https://cve.now/CVE-2022-35983.md): \`CHECK\` fail in \`Save\` and \`SaveSlices\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-40757](https://cve.now/CVE-2022-40757.md): A Buffer Access with Incorrect Length Value vulnerablity in the TEE\_MACComputeFinal function in Samsung mTower through 0.3.0 allows a… (no CVSS)
- [CVE-2022-40758](https://cve.now/CVE-2022-40758.md): A Buffer Access with Incorrect Length Value vulnerablity in the TEE\_CipherUpdate function in Samsung mTower through 0.3.0 allows a trusted… (no CVSS)
- [CVE-2022-40759](https://cve.now/CVE-2022-40759.md): A NULL pointer dereference issue in the TEE\_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to… (no CVSS)
- [CVE-2022-40760](https://cve.now/CVE-2022-40760.md): A Buffer Access with Incorrect Length Value vulnerablity in the TEE\_MACUpdate function in Samsung mTower through 0.3.0 allows a trusted… (no CVSS)
- [CVE-2022-40761](https://cve.now/CVE-2022-40761.md): The function tee\_obj\_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking… (no CVSS)
- [CVE-2022-40762](https://cve.now/CVE-2022-40762.md): A Memory Allocation with Excessive Size Value vulnerablity in the TEE\_Realloc function in Samsung mTower through 0.3.0 allows a trusted… (no CVSS)
- [CVE-2022-35989](https://cve.now/CVE-2022-35989.md): \`CHECK\` fail in \`MaxPool\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35988](https://cve.now/CVE-2022-35988.md): \`CHECK\` fail in \`tf.linalg.matrix\_rank\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35982](https://cve.now/CVE-2022-35982.md): Segfault in \`SparseBincount\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35981](https://cve.now/CVE-2022-35981.md): \`CHECK\` fail in \`FractionalMaxPoolGrad\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35979](https://cve.now/CVE-2022-35979.md): Segfault in \`QuantizedRelu\` and \`QuantizedRelu6\` (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35974](https://cve.now/CVE-2022-35974.md): Segfault in \`QuantizeDownAndShrinkRange\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35972](https://cve.now/CVE-2022-35972.md): Segfault in \`QuantizedBiasAdd\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35973](https://cve.now/CVE-2022-35973.md): Segfault in \`QuantizedMatMul\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-37258](https://cve.now/CVE-2022-37258.md): Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in… (no CVSS, steal)
- [CVE-2022-37251](https://cve.now/CVE-2022-37251.md): Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts. (no CVSS, craftcms/cms)
- [CVE-2022-35971](https://cve.now/CVE-2022-35971.md): \`CHECK\` fail in \`FakeQuantWithMinMaxVars\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35969](https://cve.now/CVE-2022-35969.md): \`CHECK\` fail in \`Conv2DBackpropInput\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35970](https://cve.now/CVE-2022-35970.md): Segfault in \`QuantizedInstanceNorm\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-37709](https://cve.now/CVE-2022-37709.md): Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. (no CVSS)
- [CVE-2022-35968](https://cve.now/CVE-2022-35968.md): \`CHECK\` fail in \`AvgPoolGrad\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35966](https://cve.now/CVE-2022-35966.md): Segfault in \`QuantizedAvgPool\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35967](https://cve.now/CVE-2022-35967.md): Segfault in \`QuantizedAdd\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35194](https://cve.now/CVE-2022-35194.md): TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventoryView.php. (no CVSS)
- [CVE-2022-37247](https://cve.now/CVE-2022-37247.md): Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page. (no CVSS, craftcms/cms)
- [CVE-2022-35964](https://cve.now/CVE-2022-35964.md): Segfault in \`BlockLSTMGradV2\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35965](https://cve.now/CVE-2022-35965.md): Segfault in \`LowerBound\` and \`UpperBound\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29489](https://cve.now/CVE-2022-29489.md): WordPress Sucuri Security plugin \<= 1.8.33 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Sucuri Security)
- [CVE-2022-2332](https://cve.now/CVE-2022-2332.md): Honeywell SoftMaster Incorrect Permission Assignment for Critical Resource (CVSS 6.2, Honeywell SoftMaster)
- [CVE-2022-2333](https://cve.now/CVE-2022-2333.md): Honeywell SoftMaster Uncontrolled Search Path Element (CVSS 8.8, Honeywell SoftMaster)
- [CVE-2022-40755](https://cve.now/CVE-2022-40755.md): JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas\_image.c. (no CVSS)
- [CVE-2022-3217](https://cve.now/CVE-2022-3217.md): When logging in to a VBASE runtime project via Web-Remote, the product uses XOR with a static initial key to obfuscate login messages. (no CVSS, VISAM VBASE)
- [CVE-2022-28758](https://cve.now/CVE-2022-28758.md): Zoom On-Premise Deployments: Improper Access Control (CVSS 8.2, Zoom Video Communications Zoom On-Premise Meeting Connector…)
- [CVE-2022-35963](https://cve.now/CVE-2022-35963.md): \`CHECK\` failures in \`FractionalAvgPoolGrad\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35960](https://cve.now/CVE-2022-35960.md): \`CHECK\` failure in \`TensorListReserve\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35959](https://cve.now/CVE-2022-35959.md): \`CHECK\` failures in \`AvgPool3DGrad\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35952](https://cve.now/CVE-2022-35952.md): \`CHECK\` failures in \`UnbatchGradOp\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35940](https://cve.now/CVE-2022-35940.md): Int overflow in \`RaggedRangeOp\` in Tensoflow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35941](https://cve.now/CVE-2022-35941.md): \`CHECK\` failure in \`AvgPoolOp\` in Tensorflow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35937](https://cve.now/CVE-2022-35937.md): OOB read in \`Gather\_nd\` op in TensorFlow Lite (CVSS 7.0, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35939](https://cve.now/CVE-2022-35939.md): Out of bounds write in \`scatter\_nd\` op in TensorFlow Lite (CVSS 7.0, tensorflow · tensorflow-cpu +1)
- [CVE-2020-25491](https://cve.now/CVE-2020-25491.md): 6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting (XSS) via the /rpc/membership/setProfile DisplayName field, which is mishandled… (no CVSS)
- [CVE-2022-35935](https://cve.now/CVE-2022-35935.md): \`CHECK\` failure in \`SobolSample\` via missing validation in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35938](https://cve.now/CVE-2022-35938.md): OOB read in \`Gather\_nd\` op in TensorFlow Lite Micro (CVSS 7.0, tensorflow)
- [CVE-2022-35934](https://cve.now/CVE-2022-35934.md): \`CHECK\` failure in tf.reshape in Tensorflow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-38611](https://cve.now/CVE-2022-38611.md): Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via… (no CVSS)
- [CVE-2022-38621](https://cve.now/CVE-2022-38621.md): Doufox v0.0.4 was discovered to contain a remote code execution (RCE) vulnerability via the edit file page. (no CVSS)
- [CVE-2022-3214](https://cve.now/CVE-2022-3214.md): Delta Electronics DIAEnergy Use of Hard-coded Credentials (CVSS 9.8, Delta Electronics DIAEnergy)
- [CVE-2022-39063](https://cve.now/CVE-2022-39063.md): When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment… (no CVSS, Open5GS)
- [CVE-2020-36601](https://cve.now/CVE-2020-36601.md): Out-of-bounds write vulnerability in the kernel modules. (no CVSS, Huawei EMUI · Huawei Magic UI)
- [CVE-2020-36600](https://cve.now/CVE-2020-36600.md): Out-of-bounds write vulnerability in the power consumption module. (no CVSS, Huawei EMUI · Huawei Magic UI)
- [CVE-2022-39003](https://cve.now/CVE-2022-39003.md): Buffer overflow vulnerability in the video framework. (no CVSS, Huawei EMUI · Huawei Magic UI)
- [CVE-2021-40019](https://cve.now/CVE-2021-40019.md): Out-of-bounds heap read vulnerability in the HW\_KEYMASTER module. (no CVSS, Huawei EMUI)
- [CVE-2021-40023](https://cve.now/CVE-2021-40023.md): Configuration defects in the secure OS module. (no CVSS, Huawei EMUI)
- [CVE-2022-39010](https://cve.now/CVE-2022-39010.md): The HwChrService module has a vulnerability in permission control. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-39009](https://cve.now/CVE-2022-39009.md): The WLAN module has a vulnerability in permission verification. (CVSS 9.8, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-39001](https://cve.now/CVE-2022-39001.md): The number identification module has a path traversal vulnerability. (CVSS 7.5, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-39007](https://cve.now/CVE-2022-39007.md): The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause… (CVSS 9.8, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38999](https://cve.now/CVE-2022-38999.md): The AOD module has the improper update of reference count vulnerability. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38997](https://cve.now/CVE-2022-38997.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-38996](https://cve.now/CVE-2022-38996.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38995](https://cve.now/CVE-2022-38995.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38994](https://cve.now/CVE-2022-38994.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38992](https://cve.now/CVE-2022-38992.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38991](https://cve.now/CVE-2022-38991.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38979](https://cve.now/CVE-2022-38979.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-38978](https://cve.now/CVE-2022-38978.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-38989](https://cve.now/CVE-2022-38989.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38988](https://cve.now/CVE-2022-38988.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-39005](https://cve.now/CVE-2022-39005.md): The MPTCP module has the memory leak vulnerability. (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-39004](https://cve.now/CVE-2022-39004.md): The MPTCP module has the memory leak vulnerability. (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-38987](https://cve.now/CVE-2022-38987.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-39006](https://cve.now/CVE-2022-39006.md): The MPTCP module has the race condition vulnerability. (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-38993](https://cve.now/CVE-2022-38993.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38990](https://cve.now/CVE-2022-38990.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-39000](https://cve.now/CVE-2022-39000.md): The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps… (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2021-46836](https://cve.now/CVE-2021-46836.md): Implementation of the WLAN module interfaces has the information disclosure vulnerability. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2021-40024](https://cve.now/CVE-2021-40024.md): Implementation of the WLAN module interfaces has the information disclosure vulnerability. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-39008](https://cve.now/CVE-2022-39008.md): The NFC module has bundle serialization/deserialization vulnerabilities. (CVSS 9.1, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-35664](https://cve.now/CVE-2022-35664.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30681](https://cve.now/CVE-2022-30681.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30684](https://cve.now/CVE-2022-30684.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-34218](https://cve.now/CVE-2022-34218.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30686](https://cve.now/CVE-2022-30686.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30682](https://cve.now/CVE-2022-30682.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30680](https://cve.now/CVE-2022-30680.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30685](https://cve.now/CVE-2022-30685.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30678](https://cve.now/CVE-2022-30678.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30683](https://cve.now/CVE-2022-30683.md): AEM Violation of Secure Design Principles Security feature bypass (CVSS 5.3, Adobe Experience Manager)
- [CVE-2022-30677](https://cve.now/CVE-2022-30677.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-38417](https://cve.now/CVE-2022-38417.md): Adobe InDesign SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2022-38416](https://cve.now/CVE-2022-38416.md): Adobe InDesign SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2022-30676](https://cve.now/CVE-2022-30676.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-38413](https://cve.now/CVE-2022-38413.md): Adobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2022-38415](https://cve.now/CVE-2022-38415.md): Adobe InDesign PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2022-30675](https://cve.now/CVE-2022-30675.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-38414](https://cve.now/CVE-2022-38414.md): Adobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2022-30673](https://cve.now/CVE-2022-30673.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-30674](https://cve.now/CVE-2022-30674.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-30672](https://cve.now/CVE-2022-30672.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-28855](https://cve.now/CVE-2022-28855.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-28857](https://cve.now/CVE-2022-28857.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-30671](https://cve.now/CVE-2022-30671.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-28854](https://cve.now/CVE-2022-28854.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-28856](https://cve.now/CVE-2022-28856.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-28852](https://cve.now/CVE-2022-28852.md): Adobe InDesign 2022 Out-of-Bound Write Arbitrary code execution (CVSS 7.8, Adobe InDesign)
- [CVE-2022-28853](https://cve.now/CVE-2022-28853.md): Adobe InDesign 2022 Out-of-Bound Write Arbitrary code execution (CVSS 7.8, Adobe InDesign)
- [CVE-2022-38434](https://cve.now/CVE-2022-38434.md): Adobe Photoshop SVG File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38432](https://cve.now/CVE-2022-38432.md): Adobe Photoshop SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38433](https://cve.now/CVE-2022-38433.md): Adobe Photoshop SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38426](https://cve.now/CVE-2022-38426.md): Adobe Photoshop U3D File Parsing Uninitialized Variable Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38428](https://cve.now/CVE-2022-38428.md): Adobe Photoshop DCM File Parsing Use-After-Free Information Disclosure Vulnerability (CVSS 5.5, Adobe Photoshop)
- [CVE-2022-38429](https://cve.now/CVE-2022-38429.md): Adobe Photoshop SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38431](https://cve.now/CVE-2022-38431.md): Adobe Photoshop SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-35713](https://cve.now/CVE-2022-35713.md): Adobe Photoshop U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38427](https://cve.now/CVE-2022-38427.md): Adobe Photoshop U3D File Parsing Uninitialized Variable Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38430](https://cve.now/CVE-2022-38430.md): Adobe Photoshop MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38401](https://cve.now/CVE-2022-38401.md): Adobe InCopy PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2022-38407](https://cve.now/CVE-2022-38407.md): Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe InCopy)
- [CVE-2022-38405](https://cve.now/CVE-2022-38405.md): Adobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2022-38406](https://cve.now/CVE-2022-38406.md): Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe InCopy)
- [CVE-2022-38404](https://cve.now/CVE-2022-38404.md): Adobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2022-38402](https://cve.now/CVE-2022-38402.md): Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2022-38403](https://cve.now/CVE-2022-38403.md): Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2022-38410](https://cve.now/CVE-2022-38410.md): Adobe Illustrator EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Illustrator)
- [CVE-2022-38408](https://cve.now/CVE-2022-38408.md): Adobe Illustrator Improper Input Validation Arbitrary code execution (CVSS 7.8, Adobe Illustrator)
- [CVE-2022-38409](https://cve.now/CVE-2022-38409.md): Adobe Illustrator EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Illustrator)
- [CVE-2022-38411](https://cve.now/CVE-2022-38411.md): Adobe Animate SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Animate)
- [CVE-2022-38412](https://cve.now/CVE-2022-38412.md): Adobe Animate SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Animate)
- [CVE-2021-42597](https://cve.now/CVE-2021-42597.md): A Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Storage Unit Rental Management System PHP 8.0.10 , Apache 2.4.14… (no CVSS)
- [CVE-2022-3225](https://cve.now/CVE-2022-3225.md): Improper Control of Dynamically-Managed Code Resources in budibase/budibase (CVSS 8.8, budibase/budibase · @budibase/worker +2)
- [CVE-2021-41731](https://cve.now/CVE-2021-41731.md): Cross Site Scripting (XSS vulnerability exists in )Sourcecodester News247 News Magazine (CMS) PHP 5.6 or higher and MySQL 5.7 or higher… (no CVSS)
- [CVE-2022-37775](https://cve.now/CVE-2022-37775.md): Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History… (no CVSS)
- [CVE-2022-36402](https://cve.now/CVE-2022-36402.md): There is an int overflow vulnerability in vmwgfx driver (CVSS 6.3, Linux kernel)
- [CVE-2022-35193](https://cve.now/CVE-2022-35193.md): TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php. (no CVSS)
- [CVE-2022-35195](https://cve.now/CVE-2022-35195.md): TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php (no CVSS)
- [CVE-2022-40337](https://cve.now/CVE-2022-40337.md): OASES (aka Open Aviation Strategic Engineering System) 8.8.0.2 allows attackers to execute arbitrary code via the Open Print Folder menu. (no CVSS)
- [CVE-2021-42948](https://cve.now/CVE-2021-42948.md): HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters… (no CVSS)
- [CVE-2022-37248](https://cve.now/CVE-2022-37248.md): Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via src/helpers/Cp.php. (no CVSS, craftcms/cms)
- [CVE-2022-38877](https://cve.now/CVE-2022-38877.md): Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php\_action/editProductImage.php?id=1. (CVSS 7.2)
- [CVE-2022-38878](https://cve.now/CVE-2022-38878.md): School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/event/index.php?view=edit&id=. (CVSS 7.2)
- [CVE-2022-37250](https://cve.now/CVE-2022-37250.md): Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting (XSS) in /admin/myaccount. (CVSS 5.4, craftcms/cms)
- [CVE-2022-38832](https://cve.now/CVE-2022-38832.md): School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via… (CVSS 7.2)
- [CVE-2022-38833](https://cve.now/CVE-2022-38833.md): School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via… (CVSS 7.2)
- [CVE-2021-42949](https://cve.now/CVE-2021-42949.md): The component controlla\_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing… (CVSS 9.8)
- [CVE-2022-38829](https://cve.now/CVE-2022-38829.md): Tenda RX9\_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg. (no CVSS)
- [CVE-2022-38830](https://cve.now/CVE-2022-38830.md): Tenda RX9\_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setIPv6Status. (no CVSS)
- [CVE-2022-38831](https://cve.now/CVE-2022-38831.md): Tenda RX9\_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/SetNetControlList (no CVSS)
- [CVE-2022-38823](https://cve.now/CVE-2022-38823.md): In TOTOLINK T6 V4.1.5cu.709\_B20210518, there is a hard coded password for root in /etc/shadow.sample. (no CVSS)
- [CVE-2022-38826](https://cve.now/CVE-2022-38826.md): In TOTOLINK T6 V4.1.5cu.709\_B20210518, there is an execute arbitrary command in cstecgi.cgi. (no CVSS)
- [CVE-2022-38827](https://cve.now/CVE-2022-38827.md): TOTOLINK T6 V4.1.5cu.709\_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi (no CVSS)
- [CVE-2022-38828](https://cve.now/CVE-2022-38828.md): TOTOLINK T6 V4.1.5cu.709\_B20210518 is vulnerable to command injection via cstecgi.cgi (no CVSS)
- [CVE-2022-3176](https://cve.now/CVE-2022-3176.md): Use-after-free in io\_uring in Linux Kernel (CVSS 7.8, Linux Kernel)
- [CVE-2022-38808](https://cve.now/CVE-2022-38808.md): ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface. (no CVSS)
- [CVE-2022-38843](https://cve.now/CVE-2022-38843.md): EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the… (no CVSS)
- [CVE-2022-38844](https://cve.now/CVE-2022-38844.md): CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating contacts with… (no CVSS)
- [CVE-2022-38845](https://cve.now/CVE-2022-38845.md): Cross Site Scripting in Import feature in EspoCRM 7.1.8 allows remote users to run malicious JavaScript in victim s browser via sending… (no CVSS)
- [CVE-2022-38846](https://cve.now/CVE-2022-38846.md): EspoCRM version 7.1.8 is vulnerable to Missing Secure Flag allowing the browser to send plain text cookies over an insecure channel (HTTP). (no CVSS)
- [CVE-2022-3223](https://cve.now/CVE-2022-3223.md): Cross-site Scripting (XSS) - Stored in jgraph/drawio (CVSS 4.3, jgraph/drawio)
- [CVE-2022-40152](https://cve.now/CVE-2022-40152.md): Stack Buffer Overflow in Woodstox (CVSS 6.5, xstream Woodstox · com.fasterxml.woodstox:woodstox-core)
- [CVE-2022-40151](https://cve.now/CVE-2022-40151.md): Stack Buffer Overflow in xstream (CVSS 6.5, xstream · com.thoughtworks.xstream:xstream)
- [CVE-2022-2913](https://cve.now/CVE-2022-2913.md): Login No Captcha reCAPTCHA \< 1.7 - IP Check Bypass (CVSS 4.3, Login No Captcha reCAPTCHA)
- [CVE-2022-2912](https://cve.now/CVE-2022-2912.md): Craw Data \<= 1.0.0 - Server Side Request Forgery (CVSS 4.3, Craw Data)
- [CVE-2022-2877](https://cve.now/CVE-2022-2877.md): Titan Anti-spam & Security \< 7.3.1 - Protection Bypass due to IP Spoofing (no CVSS, Titan Anti-spam & Security)
- [CVE-2022-2887](https://cve.now/CVE-2022-2887.md): WP Server Health Stats \< 1.7.0 - Admin+ Stored Cross-Site Scripting (no CVSS, WP Server Health Stats)
- [CVE-2022-2799](https://cve.now/CVE-2022-2799.md): Affiliates Manager \< 2.9.14 - Admin+ Stored Cross-Site Scripting (no CVSS, Affiliates Manager)
- [CVE-2022-2798](https://cve.now/CVE-2022-2798.md): Affiliates Manager \< 2.9.14 - Affiliate CSV Injection (no CVSS, Affiliates Manager)
- [CVE-2022-2737](https://cve.now/CVE-2022-2737.md): WP STAGING \< 2.9.18 - Admin+ Stored Cross-Site Scripting (no CVSS, WP STAGING – Backup Duplicator & Migration)
- [CVE-2022-2669](https://cve.now/CVE-2022-2669.md): WP Taxonomy Import \<= 1.0.4 - Reflected Cross-Site Scripting (CVSS 6.1, WP Taxonomy Import)
- [CVE-2022-2654](https://cve.now/CVE-2022-2654.md): Classima \< 2.1.11 - Reflected Cross-Site Scripting (CVSS 6.1, Classified Listing – Classified ads & Business Directory… +3)
- [CVE-2022-2655](https://cve.now/CVE-2022-2655.md): Classified Listing Pro \< 2.0.20 - Reflected Cross-Site Scripting (no CVSS, Classified Listing Pro - Classified ads & Business Director…)
- [CVE-2022-2635](https://cve.now/CVE-2022-2635.md): Autoptimize \< 3.1.1 - Admin+ Stored Cross Site Scripting (no CVSS, Autoptimize)
- [CVE-2022-2575](https://cve.now/CVE-2022-2575.md): WBW Currency Switcher for WooCommerce \< 1.6.6 - Admin+ Stored XSS (no CVSS, WBW Currency Switcher for WooCommerce)
- [CVE-2022-2351](https://cve.now/CVE-2022-2351.md): Post SMTP \< 2.1.4 - Admin+ Stored Cross-Site Scripting (no CVSS, Post SMTP Mailer/Email Log)
- [CVE-2022-1194](https://cve.now/CVE-2022-1194.md): Mobile Events Manager \< 1.4.8 - Admin+ CSV Injection (no CVSS, Mobile Events Manager)
- [CVE-2022-25708](https://cve.now/CVE-2022-25708.md): Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile (CVSS 9.8, Qualcomm Snapdragon Connectivity, Snapdragon Mobile)
- [CVE-2022-25706](https://cve.now/CVE-2022-25706.md): Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute… (CVSS 8.2, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25696](https://cve.now/CVE-2022-25696.md): Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute… (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25693](https://cve.now/CVE-2022-25693.md): Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile (CVSS 8.4, Qualcomm Snapdragon Connectivity, Snapdragon Mobile)
- [CVE-2022-25690](https://cve.now/CVE-2022-25690.md): Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto… (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25686](https://cve.now/CVE-2022-25686.md): Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon… (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25688](https://cve.now/CVE-2022-25688.md): Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon… (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25670](https://cve.now/CVE-2022-25670.md): Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon… (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25669](https://cve.now/CVE-2022-25669.md): Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25656](https://cve.now/CVE-2022-25656.md): Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the… (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25654](https://cve.now/CVE-2022-25654.md): Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity… (CVSS 6.7, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2022-25652](https://cve.now/CVE-2022-25652.md): Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking (CVSS 9.0, Qualcomm Snapdragon Wired Infrastructure and Networking)
- [CVE-2022-25653](https://cve.now/CVE-2022-25653.md): Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity… (CVSS 6.8, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2022-22105](https://cve.now/CVE-2022-22105.md): Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT… (CVSS 9.4, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2022-22095](https://cve.now/CVE-2022-22095.md): Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock… (CVSS 8.4, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2022-22094](https://cve.now/CVE-2022-22094.md): memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity… (CVSS 7.8, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2022-22093](https://cve.now/CVE-2022-22093.md): Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs… (CVSS 7.8, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2022-22092](https://cve.now/CVE-2022-22092.md): Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT… (CVSS 7.8, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2022-22091](https://cve.now/CVE-2022-22091.md): Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute… (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-22081](https://cve.now/CVE-2022-22081.md): Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon… (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2022-22089](https://cve.now/CVE-2022-22089.md): Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon… (CVSS 8.4, Qualcomm Snapdragon Connectivity, Snapdragon Mobile, Snapdr…)
- [CVE-2022-22074](https://cve.now/CVE-2022-22074.md): Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-22066](https://cve.now/CVE-2022-22066.md): Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute… (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-23560](https://cve.now/CVE-2020-23560.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions\_W+0x000000000001bcab. (no CVSS)
- [CVE-2020-23559](https://cve.now/CVE-2020-23559.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions\_W+0x0000000000007d7f. (no CVSS)
- [CVE-2020-23558](https://cve.now/CVE-2020-23558.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions\_W+0x0000000000007f4b. (no CVSS)
- [CVE-2020-23557](https://cve.now/CVE-2020-23557.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions\_W+0x000000000000755d. (no CVSS)
- [CVE-2020-23556](https://cve.now/CVE-2020-23556.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28. (no CVSS)
- [CVE-2020-23555](https://cve.now/CVE-2020-23555.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e. (no CVSS)
- [CVE-2020-23554](https://cve.now/CVE-2020-23554.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20. (no CVSS)
- [CVE-2020-23553](https://cve.now/CVE-2020-23553.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33. (no CVSS)
- [CVE-2020-23552](https://cve.now/CVE-2020-23552.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e62. (no CVSS)
- [CVE-2020-23551](https://cve.now/CVE-2020-23551.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30. (no CVSS)
- [CVE-2020-23550](https://cve.now/CVE-2020-23550.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e82. (no CVSS)
- [CVE-2022-36536](https://cve.now/CVE-2022-36536.md): An issue in the component post\_applogin.php of Super Flexible Software GmbH & Co. (no CVSS)
- [CVE-2022-36533](https://cve.now/CVE-2022-36533.md): Super Flexible Software GmbH & Co. (no CVSS)
- [CVE-2022-36532](https://cve.now/CVE-2022-36532.md): Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE\_EDITOR privileges to upload… (no CVSS)
- [CVE-2022-35415](https://cve.now/CVE-2022-35415.md): An improper input validation in NI System Configuration Manager before 22.5 may allow a privileged user to potentially enable escalation… (no CVSS)
- [CVE-2022-34002](https://cve.now/CVE-2022-34002.md): The ‘document’ parameter of PDS Vista 7’s /application/documents/display.aspx page is vulnerable to a Local File Inclusion vulnerability… (no CVSS)
- [CVE-2022-26959](https://cve.now/CVE-2022-26959.md): There are two full (read/write) Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. (CVSS 10.0)
- [CVE-2021-40017](https://cve.now/CVE-2021-40017.md): The HW\_KEYMASTER module lacks the validity check of the key format. (no CVSS, HarmonyOS;EMUI)
- [CVE-2022-2863](https://cve.now/CVE-2022-2863.md): WPvivid Backup \< 0.9.76 - Admin+ Arbitrary File Read (no CVSS, Migration, Backup, Staging – WPvivid)
- [CVE-2022-36534](https://cve.now/CVE-2022-36534.md): Super Flexible Software GmbH & Co. (no CVSS)
- [CVE-2022-39002](https://cve.now/CVE-2022-39002.md): Double free vulnerability in the storage module. (no CVSS, HarmonyOS;EMUI;Magic UI)
- [CVE-2022-40149](https://cve.now/CVE-2022-40149.md): Stack Buffer Overflow in Jettison (CVSS 6.5, Jettison · org.codehaus.jettison:jettison)
- [CVE-2022-40150](https://cve.now/CVE-2022-40150.md): Stack Buffer Overflow in Jettison (CVSS 6.5, Jettison · org.codehaus.jettison:jettison)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2022-09-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.