CVEs published June 7, 2022
64 CVEs were published on June 7, 2022: 2 critical, 7 high.
- Published
- 64
- Critical
- 2
- High
- 7
- Medium
- 31
- Low
- 12
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 45
Most affected products
- Samsung Mobile Devices
- 21
- Samsung Mobile Samsung Account
- 8
- SourceCodester Prison Management System
- 4
- Hitachi Energy TXpert Hub CoreTec 4 version
- 3
- Samsung Mobile Smart Things
- 3
- Samsung Mobile Find My Mobile
- 2
- Samsung Mobile Samsung Internet
- 2
- CRI-O · github.com/cri-o/cri-o
- 1
- HCL Software HCL OneTest Server
- 1
- neorazorx/facturascripts · facturascripts/facturascripts
- 1
Critical 2
High 7
- CVE-2022-30746Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript intSamsung Mobile Smart Things
- CVE-2022-30713Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.Samsung Mobile Devices
- CVE-2022-30712Improper validation vulnerability in KfaOptions prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.Samsung Mobile Devices
- CVE-2022-30711Improper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.Samsung Mobile Devices
- CVE-2022-30710Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.Samsung Mobile Devices
- CVE-2022-2019SourceCodester Prison Management System New User Creation improper authorizationSourceCodester Prison Management System
- CVE-2022-2000Out-of-bounds Write in vim/vimvim/vim
Medium, low and unrated 55
- CVE-2021-35530User authentication bypass in TXpert Hub CoreTec 4Hitachi Energy TXpert Hub CoreTec 4 version
- CVE-2022-30466joyebike Joy ebike Wolf Manufacturing year 2022 is vulnerable to Authentication Bypass by Capture-replay.
- CVE-2022-29620FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does n
- CVE-2021-35531Remote Code Execution in TXpert Hub CoreTec 4Hitachi Energy TXpert Hub CoreTec 4 version
- CVE-2021-35532Firmware upload verification bypass in TXpert Hub CoreTec 4Hitachi Energy TXpert Hub CoreTec 4 version
- CVE-2022-30749Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing Samsung Mobile Smart Things
- CVE-2022-30748Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity.Samsung Mobile Samsung Members
- CVE-2022-30747PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via impliSamsung Mobile Smart Things
- CVE-2022-30745Improper access control vulnerability in Quick Share prior to version 13.1.2.4 allows attacker to access internal files in Quick Share.Samsung Mobile Quick Share
- CVE-2022-30744DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.22043_1 allows attacker to execute arbitrary code.Samsung Mobile Samsung Kies
- CVE-2022-30743Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery wiSamsung Mobile Samsung Account
- CVE-2022-30742Sensitive information exposure vulnerability in FmmExtraOperation of Find My Mobile prior to 7.2.24.12 allows local attackers with log accesSamsung Mobile Find My Mobile
- CVE-2022-30741Sensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7.2.24.12 allows local attackers with log acSamsung Mobile Find My Mobile
- CVE-2022-30740Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers.Samsung Mobile Samsung Internet
- CVE-2022-30739Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get an user email or phone number withSamsung Mobile Samsung Account
- CVE-2022-30738Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script.Samsung Mobile Samsung Internet
- CVE-2022-30737Implicit Intent hijacking vulnerability in Samsung Account prior to version 13.2.00.6 allows attackers to get email ID.Samsung Mobile Samsung Account
- CVE-2022-30736Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery wiSamsung Mobile Samsung Account
- CVE-2022-30735Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the access_token without permissioSamsung Mobile Samsung Account
- CVE-2022-30734Sensitive information exposure in Sign-out log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone Samsung Mobile Samsung Account
- CVE-2022-30733Sensitive information exposure in Sign-in log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone nSamsung Mobile Samsung Account
- CVE-2022-30732Exposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6 allows attacker to access sensitive informatioSamsung Mobile Samsung Account
- CVE-2022-30731Improper access control vulnerability in My Files prior to version 13.1.00.193 allows attackers to access arbitrary private files in My FileSamsung Mobile My Files
- CVE-2022-30730Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication.Samsung Mobile Samsung Pass
- CVE-2022-30728Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.Samsung Mobile Devices
- CVE-2022-30727Improper handling of insufficient permissions vulnerability in addAppPackageNameToAllowList in PersonaManagerService prior to SMR Jun-2022 RSamsung Mobile Devices
- CVE-2022-30726Unprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior to SMR Jun-2022 Release 1 allows local attackSamsung Mobile Devices
- CVE-2022-30725Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionError function of BluetSamsung Mobile Devices
- CVE-2022-30724Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionCompleted function of BSamsung Mobile Devices
- CVE-2022-30723Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in activateVoiceRecognitionWithDevice functSamsung Mobile Devices
- CVE-2022-30722Implicit Intent hijacking vulnerability in Samsung Account prior to SMR Jun-2022 Release 1 allows attackers to bypass user confirmation of SSamsung Mobile Devices
- CVE-2022-30729Implicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows attackers to get Wi-Fi SSID and password via a maSamsung Mobile Devices
- CVE-2022-30721Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash.Samsung Mobile Devices
- CVE-2022-30720Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash.Samsung Mobile Devices
- CVE-2022-30719Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash.Samsung Mobile Devices
- CVE-2019-9972PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands
- CVE-2019-9971PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo wi
- CVE-2022-30717Improper caller check in AR Emoji prior to SMR Jun-2022 Release 1 allows untrusted applications to use some camera functions via deeplink.Samsung Mobile Devices
- CVE-2022-30716Unprotected broadcast in sendIntentForToastDumpLog in DisplayToast prior to SMR Jun-2022 Release 1 allows untrusted applications to access tSamsung Mobile Devices
- CVE-2022-30715Improper access control vulnerability in DofViewer prior to SMR Jun-2022 Release 1 allows attackers to control floating system alert window.Samsung Mobile Devices
- CVE-2022-30714Information exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.Samsung Mobile Devices
- CVE-2022-30709Improper input validation check logic vulnerability in SECRIL prior to SMR Jun-2022 Release 1 allows attackers to trigger crash.Samsung Mobile Devices
- CVE-2022-28794Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card informatiSamsung Mobile Devices
- CVE-2021-27786HCL OneTest Server is vulnerable to Cross Origin Resource Sharing: Arbitrary Origin TrustedHCL Software HCL OneTest Server
- CVE-2022-1708A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API.CRI-O · github.com/cri-o/cri-o
- CVE-2022-31495LibreHealth EHR Base 2.0.0 allows gacl/admin/acl_admin.php return_page XSS.
- CVE-2021-37589Virtua Cobranca before 12R allows SQL Injection on the login page.
- CVE-2022-25361WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories o
- CVE-2022-29564Jamf Private Access before 2022-05-16 has Incorrect Access Control, in which an unauthorized user can reach a system in the internal infrast
- CVE-2022-2020SourceCodester Prison Management System System Name cross site scriptingSourceCodester Prison Management System
- CVE-2022-2018SourceCodester Prison Management System Inmate sql injectionSourceCodester Prison Management System
- CVE-2022-2017SourceCodester Prison Management System Visit view_visit.php sql injectionSourceCodester Prison Management System
- CVE-2022-2016Cross-site Scripting (XSS) - Reflected in neorazorx/facturascriptsneorazorx/facturascripts · facturascripts/facturascripts
- CVE-2022-0823An improper control of interaction frequency vulnerability in Zyxel GS1200 series switches could allow a local attacker to guess the passworZyxel GS1200 series firmware
- CVE-2022-31470An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 1