CVEs published June 14, 2022
198 CVEs were published on June 14, 2022: 11 critical, 53 high. 1 is now in CISA KEV.
- Published
- 198
- Critical
- 11
- High
- 53
- Medium
- 37
- Low
- 0
- Unrated
- 97
- Now in CISA KEV
- 1
- Fix available
- 33
Most affected products
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 44
- Siemens SINEMA Remote Connect Server
- 15
- SAP SE SAP 3D Visual Enterprise Viewer
- 9
- Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- 5
- typo3 · typo3/cms-core +1
- 5
- FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT
- 4
- Siemens SICAM GridEdge
- 4
- Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- 3
- Qualcomm Snapdragon Connectivity, Snapdragon Mobile
- 3
- Qualcomm Snapdragon Industrial IOT, Snapdragon Mobile, Snap…
- 3
Critical 11
- CVE-2021-35104Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, SnapdrQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35081Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in SnapdragQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30347Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30343Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in SnapdrQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30342Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in SnapdrQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30341Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30339Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IQualcomm Snapdragon Connectivity, Snapdragon Industrial IOT…
- CVE-2021-35090Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, SQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35082Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has beeQualcomm Snapdragon Industrial IOT
- CVE-2022-25651Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOTQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2022-30230A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6).Siemens SICAM GridEdge
High 53
- CVE-2022-32230SMBv3 FileNormalizedNameInformation NULL Pointer DereferenceMicrosoft Windows
- CVE-2022-29241Known or guessable hidden files may be accessed in Jupyter Serverjupyter-server jupyter_server · jupyter-server
- CVE-2021-35130Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon IndustriQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2021-35129Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2021-35126Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectivQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35123Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Qualcomm Snapdragon Connectivity, Snapdragon Industrial IOT
- CVE-2021-35112A user with user level permission can access graphics protected region due to improper access control in register configuration in SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35100Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, SnapdraQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35095Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register Qualcomm Snapdragon Connectivity, Snapdragon Mobile
- CVE-2021-35091Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connectivity, Snapdragon MQualcomm Snapdragon Connectivity, Snapdragon Mobile
- CVE-2021-30350Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon CQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30349Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, SnapdragQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30344Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, SnapdQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30340Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, SnapdragQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30338Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon ComputeQualcomm Snapdragon Compute
- CVE-2021-30334Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, SQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30327Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, SnapdragoQualcomm Snapdragon Mobile, Snapdragon Compute, Snapdragon…
- CVE-2021-30281Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configurationQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22072Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22071Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon AQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22068kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, SnapdrQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22065Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22064Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectiviQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35116APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, SQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35096Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35094Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, SQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35087Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, SnapdragQualcomm Snapdragon Industrial IOT, Snapdragon Mobile
- CVE-2021-35086Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, SnapdraQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35078Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, SnapdQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35076Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon ComputQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35073Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnaQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35072Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon ConQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2022-22103Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon AutoQualcomm Snapdragon Auto
- CVE-2022-22090Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2022-22087memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, SnapdraQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22086Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, SnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22085Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectivityQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22084Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22083Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22082Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon CompuQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35114Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon AutoQualcomm Snapdragon Auto
- CVE-2021-35111Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon MobilQualcomm Snapdragon Connectivity, Snapdragon Mobile
- CVE-2021-35102Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, SnapdrQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35101Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto, Snapdragon Compute, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Mo…
- CVE-2021-35083Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon CoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-32262A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).Siemens SINEMA Remote Connect Server
- CVE-2022-32251A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).Siemens SINEMA Remote Connect Server
- CVE-2022-31465A vulnerability has been identified in Xpedition Designer VX.2.10 (All versions < VX.2.10 Update 13), Xpedition Designer VX.2.11 (All versioSiemens Xpedition Designer VX.2.10 · Siemens Xpedition D… +2
- CVE-2022-30229A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6).Siemens SICAM GridEdge
- CVE-2022-30228A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6).Siemens SICAM GridEdge
- CVE-2022-2079Cross-site Scripting (XSS) - Stored in nocodb/nocodbnocodb/nocodb · nocodb
- CVE-2022-22057Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously inQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-32156Splunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validationSplunk Enterprise · Splunk Universal Forwarder
Medium, low and unrated 134
- CVE-2022-32243When a user opens manipulated Scalable Vector Graphics (.svg, svg.x3d) files received from untrusted sources in SAP 3D Visual Enterprise VieSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-32242When a user opens manipulated Radiance Picture (.hdr, hdr.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, theSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-32241When a user opens manipulated Portable Document Format (.pdf, PDFView.x3d) files received from untrusted sources in SAP 3D Visual EnterpriseSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-32240When a user opens manipulated Jupiter Tesselation (.jt, JTReader.x3d) files received from untrusted sources in SAP 3D Visual Enterprise ViewSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-31066Configuration API in EdgeXFoundry exposes message bus credentials to local unauthenticated usersedgexfoundry edgex-go · github.com/edgexfoundry/app-func… +3
- CVE-2022-31050Insufficient Session Expiration in TYPO3 Admin Tooltypo3 · typo3/cms-core +1
- CVE-2022-31048Cross-Site Scripting in Form Frameworktypo3 · typo3/cms-core +1
- CVE-2022-31049Cross-Site Scripting in Frontend Login Mailertypo3 · typo3/cms-core +1
- CVE-2022-31046Information Disclosure via Export Module in TYPO3 CMStypo3 · typo3/cms-core +1
- CVE-2022-31047Insertion of Sensitive Information into Log File in typo3/cms-coretypo3 · typo3/cms-core +1
- CVE-2022-32353Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/manage_field_order.php?id=.
- CVE-2022-32354Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=user/manage_user&id=.
- CVE-2022-32355Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/view_product&id=.
- CVE-2022-32358Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_inquiry.
- CVE-2022-32359Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=delete_category.
- CVE-2022-31060Banner topic data is exposed on login-required Discourse sitesdiscourse
- CVE-2022-32362Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/manage_category.php?id=.
- CVE-2022-32363Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/categories/view_category.php?id=.
- CVE-2022-31059Discourse Calendar Event names susceptible to Cross-site Scriptingdiscourse-calendar
- CVE-2022-32239When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the appliSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-32238When a user opens manipulated Encapsulated Post Script (.eps, ai.x3d) files received from untrusted sources in SAP 3D Visual Enterprise ViewSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-32237When a user opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) files received from untrusted sources in SAP 3D Visual EnterpriSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-32236When a user opens manipulated Windows Bitmap (.bmp, 2d.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the apSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-32235When a user opens manipulated AutoCAD (.dwg, TeighaTranslator.exe) files received from untrusted sources in SAP 3D Visual Enterprise Viewer,SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-31595SAP Financial Consolidation - version 1010,�does not perform necessary authorization checks for an authenticated user, resulting in escalatiSAP SE SAP Financial Consolidation
- CVE-2022-31594A highly privileged user can exploit SUID-root program to escalate his privileges to root on a local Unix system.SAP SE SAP Adaptive Server Enterprise
- CVE-2022-31590SAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local access, with the ability to work around system’SAP SE SAP PowerDesigner Proxy
- CVE-2022-31589Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more SAP SE SAP ERP, localization for CEE countries. · SAP SE… +1
- CVE-2022-29618Due to insufficient input validation, SAP NetWeaver Development Infrastructure (Design Time Repository) - versions 7.30, 7.31, 7.40, 7.50, aSAP SE SAP NetWeaver Development Infrastructure
- CVE-2022-29615SAP NetWeaver Developer Studio (NWDS) - version 7.50, is based on Eclipse, which contains the logging framework log4j in version 1.x.SAP SE SAP NetWeaver Developer Studio
- CVE-2022-29614SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database - versions KERNEL 7.22SAP SE SAP NetWeaver AS ABAP, AS Java, ABAP Platform and HA…
- CVE-2022-29238Forced Browsing in Jupyter Notebookjupyter notebook · notebook
- CVE-2022-21504The code in UEK6 U3 was missing an appropiate file descriptor count to be missing.Oracle Linux
- CVE-2022-32364Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/manage_product&id=.
- CVE-2022-32365Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/manage_field.php?id=.
- CVE-2022-32366Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/view_field.php?id=.
- CVE-2022-32367Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=inquiries/view_inquiry&id=.
- CVE-2022-30903Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42" is vulnerable to Cross-Site Script
- CVE-2022-29612SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22SAP SE SAP NetWeaver, ABAP Platform and SAP Host Agent
- CVE-2022-27668Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to executeSAP SE SAP NetWeaver and ABAP Platform
- CVE-2022-32559An issue was discovered in Couchbase Server before 7.0.4.
- CVE-2022-32557An issue was discovered in Couchbase Server before 7.0.4.
- CVE-2022-32561An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4.
- CVE-2021-42675Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory.
- CVE-2022-31403ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/pages/ajax.render.php.
- CVE-2022-30930Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery (CSRF).
- CVE-2022-32337Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/patients/manage_patient.php?id=.
- CVE-2022-32338Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/doctors/manage_doctor.php?id=.
- CVE-2022-32339Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/doctors/view_doctor.php?id=.
- CVE-2022-32340Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=patients/view_patient&id=.
- CVE-2022-32341Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/?page=user/manage_user&id=.
- CVE-2022-32342Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/room_types/view_room_type.php?id=.
- CVE-2022-32343Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via hprms/admin/room_types/manage_room_type.php?id=.
- CVE-2022-32344Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient.
- CVE-2022-32345Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/rooms/manage_room.php?id=.
- CVE-2022-32346Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/rooms/view_room.php?id=.
- CVE-2022-30931Employee Leaves Management System (ELMS) V 2.1 is vulnerable to Cross Site Request Forgery (CSRF) via /myprofile.php.
- CVE-2022-32347Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_room.
- CVE-2022-32348Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_doctor.
- CVE-2022-32349Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient_history.
- CVE-2022-32350Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_room_type.
- CVE-2022-32351Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_message.
- CVE-2022-32352Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient_admission.
- CVE-2022-32335Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/manage_menu.php?id=.
- CVE-2022-32334Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/manage_category.php?id=.
- CVE-2022-32333Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/sales/receipt.php?id=.
- CVE-2022-32332Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=delete_category.
- CVE-2022-32331Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/view_category.php?id=.
- CVE-2022-32330Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/classes/Master.php?f=delete_menu.
- CVE-2022-32328Fast Food Ordering System v1.0 is vulnerable to Delete any file.
- CVE-2022-27889The Foundry Multipass service contains code paths that could be abused to cause a denial of service for authentication and authorization operations.Palantir Foundry Multipass
- CVE-2021-40660An issue was discovered in Delight Nashorn Sandbox 0.2.0.org.javadelight:delight-nashorn-sandbox
- CVE-2022-31847A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router informat
- CVE-2022-31846A vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execut
- CVE-2022-31845A vulnerability in live_check.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via exec
- CVE-2022-31311An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request.
- CVE-2022-31308A vulnerability in live_mfg.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.191012 allows attackers to obtain sensitive router information via e
- CVE-2022-31309A vulnerability in live_check.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to obtain sensitive router information via
- CVE-2022-32336Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/view_menu.php?id=.
- CVE-2021-40678In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batch_manager&mode=unit
- CVE-2022-31273An issue in TopIDP3000 Topsec Operating System tos_3.3.005.665b.15_smpidp allows attackers to perform a brute-force attack via a crafted ses
- CVE-2021-40658Textpattern 4.8.7 is affected by a HTML injection vulnerability through “Content>Write>Body”.
- CVE-2021-40633A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or den
- CVE-2021-35071Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service iQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35070RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon IndQualcomm Snapdragon Industrial IOT, Snapdragon Mobile
- CVE-2021-30346RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, SnapdraQualcomm Snapdragon Industrial IOT, Snapdragon Mobile, Snap…
- CVE-2021-30345RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, SnapdraQualcomm Snapdragon Industrial IOT, Snapdragon Mobile, Snap…
- CVE-2021-40616thinkcmf v5.1.7 has an unauthorized vulnerability.thinkcmf/thinkcmf
- CVE-2021-35098Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon CoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35092Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto,Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35085Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, SnapQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35084Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon CoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35080Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, SnapdrQualcomm Snapdragon Industrial IOT, Snapdragon Mobile, Snap…
- CVE-2021-35079Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in SnapdraQualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2021-35121An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon CQualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2021-35120Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, SnapQualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2021-35119Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, SnapdraQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-35118An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon ConQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-40650In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set.
- CVE-2021-40649In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.
- CVE-2022-32286A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compaSiemens Mendix SAML Module
- CVE-2022-32285A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.16.6), Mendix SAML Module (Mendix 8 compaSiemens Mendix SAML Module
- CVE-2022-32261A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).Siemens SINEMA Remote Connect Server
- CVE-2022-32260A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).Siemens SINEMA Remote Connect Server
- CVE-2022-32259A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).Siemens SINEMA Remote Connect Server
- CVE-2022-32258A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).Siemens SINEMA Remote Connect Server
- CVE-2022-32256A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).Siemens SINEMA Remote Connect Server
- CVE-2022-32255A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).Siemens SINEMA Remote Connect Server
- CVE-2022-32254A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).Siemens SINEMA Remote Connect Server
- CVE-2022-32253A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).Siemens SINEMA Remote Connect Server
- CVE-2022-32252A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).Siemens SINEMA Remote Connect Server
- CVE-2022-32145A vulnerability has been identified in Teamcenter Active Workspace V5.2 (All versions < V5.2.9), Teamcenter Active Workspace V6.0 (All versiSiemens Teamcenter Active Workspace
- CVE-2022-31619A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), TeamcenterSiemens Teamcenter
- CVE-2022-30937A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All versSiemens EN100 Ethernet module DNP3 IP variant · Siemens… +3
- CVE-2022-30231A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6).Siemens SICAM GridEdge
- CVE-2022-29034A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).Siemens SINEMA Remote Connect Server
- CVE-2022-27221A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).Siemens SINEMA Remote Connect Server
- CVE-2022-27220A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).Siemens SINEMA Remote Connect Server
- CVE-2022-27219A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0 SP2).Siemens SINEMA Remote Connect Server
- CVE-2022-26476A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), SSiemens Spectrum Power
- CVE-2021-37182A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE Siemens SCALANCE XM408-4C · Siemens SCALANCE XM408-8C +7
- CVE-2022-25167Apache Flume vulnerable to a JNDI RCE in JMSSourceApache Software Foundation Apache Flume · org.apache.flume.…
- CVE-2022-29925Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.FUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT
- CVE-2022-29524Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacFUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-Server an…
- CVE-2022-29522Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may alFUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT
- CVE-2022-29509Directory traversal vulnerability in T&D Data Server (Japanese Edition) Ver.2.22 and earlier, T&D Data Server (English Edition) Ver.2.30 andT&D Data Server and THERMO RECORDER DATA SERVER
- CVE-2022-29506Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allowFUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT
- CVE-2022-29485Cross-site scripting vulnerability in SHIRASAGI v1.0.0 to v1.14.2, and v1.15.0 allows a remote attacker to inject an arbitrary script via unSHIRASAGI Project SHIRASAGI
- CVE-2022-29482'Mobaoku-Auction&Flea Market' App for iOS versions prior to 5.5.16 improperly verifies server certificates, which may allow an attacker to eDeNA Co. Mobaoku-Auction & Flea Market App for iOS
- CVE-2022-27176Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using 'File Sanitization Library' 1.043 and prior versions, J’s Communication Co. RevoWorks SCVX, RevoWorks Browser, an…
- CVE-2022-26302Heap-based buffer overflow exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may alloFUJI ELECTRIC CO., LTD. / Hakko Electronics Co. V-SFT
- CVE-2022-31447An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafte
- CVE-2022-31446Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter
- CVE-2022-31415Online Fire Reporting System v1.0 was discovered to contain a SQL injection vulnerability via the GET parameter in /report/list.php.