CVEs published October 14, 2022
186 CVEs were published on October 14, 2022: 21 critical, 72 high. Browse them by severity, product and exploitation status.
- Published
- 186
- Critical
- 21
- High
- 72
- Medium
- 72
- Low
- 13
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 21
Most affected products
- Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- 38
- Huawei HarmonyOS · Huawei EMUI
- 30
- Adobe ColdFusion
- 13
- Adobe Dimension
- 9
- Adobe Acrobat Reader
- 6
- gocd
- 4
- Huawei HarmonyOS
- 4
- OpenHarmony
- 4
- Android
- 3
- FBX SDK
- 3
Critical 21
- CVE-2022-35698Adobe Commerce Stored XSS Arbitrary code executionAdobe Magento Commerce · magento/community-edition +1
- CVE-2022-35711Adobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe ColdFusion
- CVE-2022-35690Adobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution VulnerabilityAdobe ColdFusion
- CVE-2022-35712Adobe ColdFusion ODBC Agent Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe ColdFusion
- CVE-2022-35710Adobe ColdFusion ODBC Server Stack-based Buffer Overflow Remote Code Execution VulnerabilityAdobe ColdFusion
- CVE-2022-38418Adobe ColdFusion Application Server Directory Traversal Remote Code Execution VulnerabilityAdobe ColdFusion
- CVE-2022-32177Gin-vue-admin - Unrestricted File Uploadgin-vue-admin
- CVE-2021-46839The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause…Huawei HarmonyOS · Huawei EMUI
- CVE-2021-46840The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-37602Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js.grunt-karma
- CVE-2022-38980The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of…Huawei HarmonyOS
- CVE-2022-38982The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked.Huawei HarmonyOS
- CVE-2022-38983The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38986The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-39311Compromised agents may be able to execute remote code on GoCD Servergocd
- CVE-2022-41436An issue in OXHOO TP50 OXH1.50 allows unauthenticated attackers to access the administrative panel via browsing to the URL…
- CVE-2022-41477A security issue was discovered in WeBid <=1.2.2.
- CVE-2022-41578The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41580The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41581The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-42064Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell.
High 72
- CVE-2022-38448Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-38444Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-38446Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-38442Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-38445Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-38447Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-38441Adobe Dimension GLB File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-38440Adobe Dimension SKP File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-42339Adobe Acrobat Reader DC XFA Parsing Stack Overflow Remote Code ExecutionAdobe Acrobat Reader
- CVE-2022-38450Adobe Acrobat Reader DC XFA Parsing Stack Overflow Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-42341Adobe ColdFusion Improper Restriction of XML External Entity Reference Arbitrary file system readAdobe ColdFusion
- CVE-2022-38424Adobe ColdFusion Application Server Directory Traversal Arbitrary file system writeAdobe ColdFusion
- CVE-2022-42340Adobe ColdFusion Improper Input Validation Arbitrary file system readAdobe ColdFusion
- CVE-2022-38422Adobe ColdFusion Application Server Directory Traversal Information Disclosure VulnerabilityAdobe ColdFusion
- CVE-2022-38421Adobe ColdFusion Application Server Directory Traversal Remote Code Execution VulnerabilityAdobe ColdFusion
- CVE-2022-38419Adobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system readAdobe ColdFusion
- CVE-2022-38420Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-serviceAdobe ColdFusion
- CVE-2022-41623WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerabilityVillatheme ALD - AliExpress Dropshipping and Fulfillment fo…
- CVE-2022-28759Zoom On-Premise Deployments: Improper Access ControlZoom Video Communications Zoom On-Premise Meeting Connector…
- CVE-2022-28762Debugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOSZoom Video Communications Zoom Client for Meetings for MacOS
- CVE-2022-42463Softbus_server in communication subsystem has a authenication bypass vulnerability in a callback handler function. Attackers can launch…OpenHarmony
- CVE-2022-42488Startup subsystem missed permission validation in param service. An malicious application installed on the device could elevate its…OpenHarmony
- CVE-2022-36803The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role…Atlassian Jira Align
- CVE-2021-0699In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2021-27406PerFact OpenVPN-ClientPerFact OpenVPN-Client
Show all 72 entriesShow fewer entries
- CVE-2022-20397In SitRilClient_OnResponse of SitRilSe.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-2780In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to initiate an SMB…Octopus Deploy Octopus Server
- CVE-2022-2963A vulnerability found in jasper.jasper
- CVE-2022-2985In music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-32149Denial of service via crafted Accept-Language header in golang.org/x/text/languagegolang.org/x/text/language · golang.org/x/text
- CVE-2022-3495SourceCodester Simple Online Public Access Catalog Admin Login sql injectionSourceCodester Simple Online Public Access Catalog
- CVE-2022-37603A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils…loader-utils
- CVE-2022-38669In soundrecorder service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38670In soundrecorder service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38698In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38977The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes…Huawei HarmonyOS
- CVE-2022-38981The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage.Huawei HarmonyOS
- CVE-2022-38984The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38985The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38998The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-39011The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-39064An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e.Ikea TRÅDFRI smart lighting system
- CVE-2022-39080In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39107In Soundrecorder service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39108In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39109In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39110In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39111In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39117In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-41302An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK version 2020.FBX SDK
- CVE-2022-41303A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FBX SDK 2020 version…FBX SDK
- CVE-2022-41304An Out-Of-Bounds Write Vulnerability in Autodesk FBX SDK 2020 version and prior may lead to code execution through maliciously crafted FBX…FBX SDK
- CVE-2022-41305A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by…Subassembly Composer
- CVE-2022-41306A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write…Autodesk® Design Review
- CVE-2022-41307A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by…Subassembly Composer
- CVE-2022-41308A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by…Subassembly Composer
- CVE-2022-41416Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at…
- CVE-2022-41535Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at…
- CVE-2022-41536Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at…
- CVE-2022-41538Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component…
- CVE-2022-41539Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/users_add.php.
- CVE-2022-41576The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41577The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41582The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41583The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41584The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41585The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41586The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41588The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41589The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-42070Online Birth Certificate Management System version 1.0 is vulnerable to Cross Site Request Forgery (CSRF).
- CVE-2022-42234There is a file inclusion vulnerability in the template management module in UCMS 1.6
Medium, low and unrated 93
- CVE-2022-38443Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Dimension
- CVE-2022-35689Adobe Commerce Improper Access Control Security feature bypassAdobe Magento Commerce · magento/community-edition +1
- CVE-2022-38437Adobe Acrobat Reader Use After Free Memory leakAdobe Acrobat Reader
- CVE-2022-38449Adobe Acrobat Reader DC JP2 File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-35691Adobe Acrobat Reader NULL Pointer Dereference Application denial-of-serviceAdobe Acrobat Reader
- CVE-2022-42342Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-38423Adobe ColdFusion Application Server Directory Traversal Information Disclosure VulnerabilityAdobe ColdFusion
- CVE-2022-28761Zoom On-Premise Deployments: Improper Access ControlZoom Video Communications Zoom On-Premise Meeting Connector…
- CVE-2022-28760Zoom On-Premise Deployments: Improper Access ControlZoom Video Communications Zoom On-Premise Meeting Connector…
- CVE-2022-42464Kernel memory pool override in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged…OpenHarmony
- CVE-2022-41686Out-of-bound memory read and write in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The…OpenHarmony
- CVE-2022-36802The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access…Atlassian Jira Align
- CVE-2021-22685Cassia Networks Access Controller Path TraversalCassia Networks Access Controller
- CVE-2022-20464In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code.Android
- CVE-2022-2850A flaw was found In 389-ds-base.389-ds-base
- CVE-2022-2879Unbounded memory consumption when reading headers in archive/tarGo standard library archive/tar · stdlib
- CVE-2022-2880Incorrect sanitization of forwarded query parameters in net/http/httputilGo standard library net/http/httputil · stdlib
- CVE-2022-2984In jpg driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-3439Allocation of Resources Without Limits or Throttling in ikus060/rdiffwebikus060/rdiffweb · rdiffweb
- CVE-2022-3479A vulnerability found in nss.nss
- CVE-2022-3496SourceCodester Human Resource Management System Admin Panel employeeadd.php access controlSourceCodester Human Resource Management System
- CVE-2022-3497SourceCodester Human Resource Management System Master List cross site scriptingSourceCodester Human Resource Management System
- CVE-2022-3502Human Resource Management System Leave cross site scriptingHuman Resource Management System
- CVE-2022-3503SourceCodester Purchase Order Management System Supplier cross site scriptingSourceCodester Purchase Order Management System
- CVE-2022-3504SourceCodester Sanitization Management System sql injectionSourceCodester Sanitization Management System
Show all 93 entriesShow fewer entries
- CVE-2022-35040OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b5567.
- CVE-2022-35041OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b558f.
- CVE-2022-35042OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adb11.
- CVE-2022-35043OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6.
- CVE-2022-35044OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x617087.
- CVE-2022-35045OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0d63.
- CVE-2022-35046OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0466.
- CVE-2022-35047OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05aa.
- CVE-2022-35048OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0b2c.
- CVE-2022-35049OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b03b5.
- CVE-2022-3505SourceCodester Sanitization Management System cross site scriptingSourceCodester Sanitization Management System
- CVE-2022-35050OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b04de.
- CVE-2022-35051OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b55af.
- CVE-2022-35052OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b84b1.
- CVE-2022-35053OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x61731f.
- CVE-2022-35054OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6171b2.
- CVE-2022-35055OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0473.
- CVE-2022-35056OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0478.
- CVE-2022-35058OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05ce.
- CVE-2022-35059OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0414.
- CVE-2022-3506Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wpbarrykooij/related-posts-for-wp
- CVE-2022-38671In camera driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38672In face detect driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38673In face detect driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38676In gpu driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38677In cell service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38679In music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38687In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38688In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38689In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38690In camera driver, there is a possible memory corruption due to improper locking.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38697In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39065A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled…Ikea TRÅDFRI gateway system
- CVE-2022-39103In Gallery service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39105In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39112In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39113In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39114In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39115In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39120In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39121In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39122In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39123In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39124In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39125In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39126In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39127In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39128In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39308GoCD API authentication of user access tokens subject to timing attack during comparisongocd
- CVE-2022-39309GoCD server secret encryption/decryption key leaked to agents during material serializationgocd
- CVE-2022-39310Malicious agent may be able to impersonate another agent in GoCDgocd
- CVE-2022-41587Uncaptured exceptions in the home screen module.EMUI
- CVE-2022-41592The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41593The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41594The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41595The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41597The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41598The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41600The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41601The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41602The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41603The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application…Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41715Memory exhaustion when compiling regular expressions in regexp/syntaxGo standard library regexp/syntax · stdlib
- CVE-2022-42066Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php.
- CVE-2022-42067Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference (IDOR) vulnerability
- CVE-2022-42069Online Birth Certificate Management System version 1.0 suffers from a persistent Cross Site Scripting (XSS) vulnerability.
- CVE-2022-42071Online Birth Certificate Management System version 1.0 suffers from a Cross Site Scripting (XSS) Vulnerability.
- CVE-2022-42232Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=delete_storage.