CVEs published May 10, 2022
196 CVEs were published on May 10, 2022: 7 critical, 60 high. 2 are now in CISA KEV.
- Published
- 196
- Critical
- 7
- High
- 60
- Medium
- 34
- Low
- 1
- Unrated
- 94
- Now in CISA KEV
- 2
- Fix available
- 96
Most affected products
- Microsoft Windows
- 44
- Android
- 21
- Microsoft Windows Server
- 14
- Siemens SICAM T
- 10
- Siemens Desigo DXR2 · Siemens Desigo PXC3 +2
- 7
- Siemens JT2Go · Siemens Teamcenter Visualization
- 6
- 3rd Gen AMD EPYC™
- 3
- AMD Ryzen™ Series · AMD Athlon™ Series
- 2
- ArubaOS-Switch Devices
- 2
- davidfcarr RSVPMaker
- 2
Critical 7
- CVE-2022-29130Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-26937Windows Network File System Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-22012Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-1505RSVPMaker <= 9.2.6 - Unauthenticated SQL Injectiondavidfcarr RSVPMaker
- CVE-2022-1453RSVPMaker <= 9.2.5 - Unauthenticated SQL Injectiondavidfcarr RSVPMaker
- CVE-2022-0947Arctic Wireless Gateway Firewall vulnerabilityABB ARG600 Wireless Gateway series
- CVE-2022-29873A vulnerability has been identified in SICAM T (All versions < V3.0).Siemens SICAM T
High 60
- CVE-2022-30129Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2022-29151Windows Cluster Shared Volume (CSV) Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2022-29150Windows Cluster Shared Volume (CSV) Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2022-29148Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2022-29145.NET and Visual Studio Denial of Service VulnerabilityMicrosoft .NET · Microsoft Visual Studio +11
- CVE-2022-29142Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-29141Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-29139Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-29138Windows Clustered Shared Volume Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2022-29137Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-29135Windows Cluster Shared Volume (CSV) Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2022-29133Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-29132Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-29131Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-29129Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-29128Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-29126Tablet Windows User Interface Application Core Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-29125Windows Push Notifications Apps Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-29117.NET and Visual Studio Denial of Service VulnerabilityMicrosoft .NET · Microsoft Visual Studio +14
- CVE-2022-29115Windows Fax Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-29113Windows Digital Media Receiver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-29110Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Excel · Microsoft Office Web Apps Server 2013 Ser…
- CVE-2022-29109Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2022-29108Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2022-29106Windows Hyper-V Shared Virtual Disk Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2022-29105Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-29104Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-29103Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26939Storage Spaces Direct Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2022-26938Storage Spaces Direct Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2022-26932Storage Spaces Direct Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2022-26931Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26927Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-26926Windows Address Book Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-26925Windows LSA Spoofing VulnerabilityMicrosoft Windows
- CVE-2022-26923Active Directory Domain Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26913Windows Authentication Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-23279Windows ALPC Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-23270Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-23267.NET and Visual Studio Denial of Service VulnerabilityMicrosoft .NET Core · Microsoft .NET +14
- CVE-2022-22019Remote Procedure Call Runtime Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-22017Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Remote Desktop client for Windows Desktop · Mi… +1
- CVE-2022-22016Windows PlayToManager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-22014Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-22013Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-21978Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2022-21972Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-27167Arbitrary File Deletion in ESET products for WindowsESET, spol. s r.o. ESET NOD32 Antivirus · ESET, spol. s… +8
- CVE-2022-1463Booking Calendar <= 9.1 - PHP Object Injection via Shortcodewpdevelop Booking Calendar
- CVE-2022-1442Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosureroxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
- CVE-2022-22774TIBCO Managed File Transfer Command Center XXE VulnerabilityTIBCO Software TIBCO Managed File Transfer Command Center ·…
- CVE-2022-1397API Privilege Escalation in alextselegidis/easyappointmentsalextselegidis/easyappointments
- CVE-2022-1649Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in radareorg/radare2radareorg/radare2
- CVE-2022-29882A vulnerability has been identified in SICAM T (All versions < V3.0).Siemens SICAM T
- CVE-2022-29878A vulnerability has been identified in SICAM T (All versions < V3.0).Siemens SICAM T
- CVE-2022-29876A vulnerability has been identified in SICAM T (All versions < V3.0).Siemens SICAM T
- CVE-2022-29874A vulnerability has been identified in SICAM T (All versions < V3.0).Siemens SICAM T
- CVE-2022-29872A vulnerability has been identified in SICAM T (All versions < V3.0).Siemens SICAM T
- CVE-2022-24287A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 VSiemens SIMATIC PCS 7 · Siemens SIMATIC WinCC Runtime Pr… +2
- CVE-2022-1537file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in gruntjs/gruntgruntjs/grunt · grunt
Medium, low and unrated 129
- CVE-2022-28601A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite
- CVE-2022-30130.NET Framework Denial of Service VulnerabilityMicrosoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 · Microsoft…
- CVE-2022-29140Windows Print Spooler Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-29134Windows Clustered Shared Volume Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2022-29127BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-29123Windows Clustered Shared Volume Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2022-29122Windows Clustered Shared Volume Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2022-29121Windows WLAN AutoConfig Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-29120Windows Clustered Shared Volume Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2022-29116Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-29114Windows Print Spooler Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-29112Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-29107Microsoft Office Security Feature Bypass VulnerabilityMicrosoft Office LTSC · Microsoft Office +3
- CVE-2022-29102Windows Failover Cluster Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2022-26940Remote Desktop Protocol Client Information Disclosure VulnerabilityMicrosoft Remote Desktop client for Windows Desktop · Mi… +1
- CVE-2022-26936Windows Server Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-26935Windows WLAN AutoConfig Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-26934Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows · Microsoft Office 2019 for Mac +2
- CVE-2022-26933Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-26930Windows Remote Access Connection Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-24466Windows Hyper-V Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-22713Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-22015Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMicrosoft Windows · Microsoft Remote Desktop client for Win…
- CVE-2022-22011Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-1417Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting from 14.9 before 14.9GitLab
- CVE-2022-1431An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9GitLab
- CVE-2022-0866This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an EJB that is configurWildfly
- CVE-2022-20121In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check.Android
- CVE-2022-20120Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/AAndroid
- CVE-2022-20119In private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to uninitialized data.Android
- CVE-2022-20118In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition.Android
- CVE-2022-20117In (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to improperly used crypto.Android
- CVE-2021-39738In CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing permission check.Android
- CVE-2022-20116In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection.Android
- CVE-2022-20115In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permisAndroid
- CVE-2022-20114In placeCall of TelecomManager.java, there is a possible way for an application to keep itself running with foreground service importance duAndroid
- CVE-2022-20113In mPreference of DefaultUsbConfigurationPreferenceController.java, there is a possible way to enable file transfer mode due to a logic erroAndroid
- CVE-2022-20112In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change private DNS settings dueAndroid
- CVE-2022-20011In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to missing check.Android
- CVE-2022-20010In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2022-20009In various functions of the USB gadget subsystem, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20008In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data.Android
- CVE-2022-20007In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's stiAndroid
- CVE-2022-20006In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen Android
- CVE-2022-20005In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code and a parsed APK .Android
- CVE-2022-20004In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input validation.Android
- CVE-2021-39700In the policies of adbd.te, there was a logic error which caused the CTS Listening Ports Test to report invalid results.Android
- CVE-2021-39670In setStream of WallpaperManager.java, there is a possible way to cause a permanent DoS due to improper input validation.Android
- CVE-2022-29398TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the File parameter in the function FUN_0041309c.
- CVE-2022-29399TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN_00415bf0.
- CVE-2022-29397TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004196c8.
- CVE-2022-29395TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the apcliKey parameter in the function FUN_0041bac4.
- CVE-2022-29396TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418f10.
- CVE-2022-29394TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN_0041b448.
- CVE-2022-29393TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004192cc.
- CVE-2022-29391TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004200c8.
- CVE-2022-29392TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418c24.
- CVE-2022-30278A vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an unauthenticated remote attacker to conduct a crSynopsys Black Duck Hub
- CVE-2022-1567WP JS <= 2.0.6 - Reflected Cross-Site Scriptinghalmat WP JS
- CVE-2022-1209Ultimate Member <= 2.3.1 - Arbitrary Redirectultimatemember Ultimate Member – User Profile, Registration…
- CVE-2022-1476All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hostsservmask All-in-One WP Migration and Backup
- CVE-2022-28986LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references (IDOR) vulnerabili
- CVE-2021-26353Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state AMD 3rd Gen EPYC
- CVE-2021-46771Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by 3rd Gen AMD EPYC™
- CVE-2021-43010In Safedog Apache v4.0.30255, attackers can bypass this product for SQL injection.
- CVE-2021-26324A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.3rd Gen AMD EPYC™
- CVE-2021-26332Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability.3rd Gen AMD EPYC™
- CVE-2021-26352Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space thaAMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26370Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may all2nd Gen AMD EPYC™ · 3rd Gen AMD EPYC™
- CVE-2021-26390A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity oAMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26408Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in l1st Gen AMD EPYC™ · 2nd Gen AMD EPYC™
- CVE-2022-23677A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versiArubaOS-Switch Devices
- CVE-2022-23676A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versiArubaOS-Switch Devices
- CVE-2022-22454IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending aIBM InfoSphere Information Server
- CVE-2021-39024IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting.IBM Guardium Data Encryption
- CVE-2022-26988TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MntAte` fu
- CVE-2022-26987TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MmtAtePras
- CVE-2022-28896A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1_FW130B06 allows attackers to esc
- CVE-2022-28895A command injection vulnerability in the component /setnetworksettings/IPAddress of D-Link DIR882 DIR882A1_FW130B06 allows attackers to esca
- CVE-2022-28901A command injection vulnerability in the component /SetTriggerLEDBlink/Blink of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate
- CVE-2022-28912TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUp
- CVE-2022-28913TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUp
- CVE-2022-28910TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the devicename parameter in /setting/set
- CVE-2022-28911TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/Cloud
- CVE-2022-28909TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/set
- CVE-2022-28907TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the hosttime function in /setting/NTPSyn
- CVE-2022-28908TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the ipdoamin parameter in /setting/setDi
- CVE-2022-28905TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setD
- CVE-2022-28906TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLa
- CVE-2022-28915D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/s
- CVE-2022-29327D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel.
- CVE-2022-29322D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip.
- CVE-2022-29321D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan.
- CVE-2022-29323D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment.
- CVE-2022-29324D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd.
- CVE-2022-29325D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addurlfilter parameter in /goform/websURLFilter.
- CVE-2022-29326D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parameter in /goform/websHostFilter.
- CVE-2022-29328D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a stack overflow via the function checkvalidupgrade.
- CVE-2022-29329D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a heap overflow via the devicename parameter in /goform/setDeviceSettings.
- CVE-2022-28110Hotel Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at the login page.
- CVE-2022-29591Tenda TX9 Pro 22.03.02.10 devices have a SetNetControlList buffer overflow.
- CVE-2021-43094An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition <=2.11 and Platform Standalone Edition <=2.4.0 via
- CVE-2021-42645CMSimple_XH 1.7.4 is affected by a remote code execution (RCE) vulnerability.
- CVE-2021-42581Prototype poisoning in function mapObjIndexed in Ramda 0.27.0 and earlier allows attackers to compromise integrity or availability of applic
- CVE-2022-29883A vulnerability has been identified in SICAM T (All versions < V3.0).Siemens SICAM T
- CVE-2022-29881A vulnerability has been identified in SICAM T (All versions < V3.0).Siemens SICAM T
- CVE-2022-29880A vulnerability has been identified in SICAM T (All versions < V3.0).Siemens SICAM T
- CVE-2022-29879A vulnerability has been identified in SICAM T (All versions < V3.0).Siemens SICAM T
- CVE-2022-29877A vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.00), SICAM P850 (All versions < V3.0Siemens SICAM P850 · Siemens SICAM P855
- CVE-2022-29801A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9).Siemens Teamcenter
- CVE-2022-29033A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), TeamcentSiemens JT2Go · Siemens Teamcenter Visualization
- CVE-2022-29032A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), TeamcentSiemens JT2Go · Siemens Teamcenter Visualization
- CVE-2022-29031A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), TeamcentSiemens JT2Go · Siemens Teamcenter Visualization
- CVE-2022-29030A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), TeamcentSiemens JT2Go · Siemens Teamcenter Visualization
- CVE-2022-29029A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), TeamcentSiemens JT2Go · Siemens Teamcenter Visualization
- CVE-2022-29028A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), TeamcentSiemens JT2Go · Siemens Teamcenter Visualization
- CVE-2022-27653A vulnerability has been identified in Simcenter Femap (All versions < V2022.2).Siemens Simcenter Femap
- CVE-2022-27640A vulnerability has been identified in SIMATIC CP 442-1 RNA (All versions < V1.5.18), SIMATIC CP 443-1 RNA (All versions < V1.5.18).Siemens SIMATIC CP 442-1 RNA · Siemens SIMATIC CP 443-1 RNA
- CVE-2022-27242A vulnerability has been identified in OpenV2G (V0.9.4).Siemens OpenV2G
- CVE-2022-24290A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), TeamcenterSiemens Teamcenter
- CVE-2022-24045A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXSiemens Desigo DXR2 · Siemens Desigo PXC3 +2
- CVE-2022-24044A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXSiemens Desigo DXR2 · Siemens Desigo PXC3 +2
- CVE-2022-24043A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXSiemens Desigo DXR2 · Siemens Desigo PXC3 +2
- CVE-2022-24042A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXSiemens Desigo DXR2 · Siemens Desigo PXC3 +2
- CVE-2022-24041A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXSiemens Desigo DXR2 · Siemens Desigo PXC3 +2
- CVE-2022-24040A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXSiemens Desigo DXR2 · Siemens Desigo PXC3 +2
- CVE-2022-24039A vulnerability has been identified in Desigo PXC4 (All versions < V02.20.142.10-10884), Desigo PXC5 (All versions < V02.20.142.10-10884).Siemens Desigo PXC4 · Siemens Desigo PXC5
- CVE-2021-41545A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 (All versions < V01.21.142.4-18), Desigo PXSiemens Desigo DXR2 · Siemens Desigo PXC3 +2
- CVE-2022-1629Buffer Over-read in function find_next_quote in vim/vimvim/vim