CVEs published June 15, 2022
256 CVEs were published on June 15, 2022: 4 critical, 79 high.
- Published
- 256
- Critical
- 4
- High
- 79
- Medium
- 49
- Low
- 4
- Unrated
- 120
- Now in CISA KEV
- 0
- Fix available
- 71
Most affected products
- Android
- 77
- Microsoft Windows
- 26
- Adobe Bridge
- 12
- Adobe Illustrator
- 7
- Intel(R) Processors
- 6
- ABB Drive Composer entry · ABB Drive Composer pro +2
- 4
- Microsoft HEVC Video Extension · Microsoft HEVC Video Exten…
- 4
- Splunk Enterprise · Splunk Cloud Platform
- 4
- Adobe InDesign
- 3
- Image Slider by NextCode – Photo & Video SLider
- 3
Critical 4
- CVE-2022-30136Windows Network File System Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-20825Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilityCisco Small Business RV Series Router Firmware
- CVE-2022-20798Cisco Email Security Appliance and Cisco Secure Email and Web Manager External Authentication Bypass VulnerabilityCisco Email Security Appliance
- CVE-2022-32158Splunk Enterprise deployment servers allow client publishing of forwarder bundlesSplunk Enterprise
High 79
- CVE-2022-30193AV1 Video Extension Remote Code Execution VulnerabilityMicrosoft AV1 Video Extension
- CVE-2022-30188HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2022-30180Azure RTOS GUIX Studio Information Disclosure VulnerabilityMicrosoft Azure RTOS GUIX Studio
- CVE-2022-30179Azure RTOS GUIX Studio Remote Code Execution VulnerabilityMicrosoft Azure RTOS GUIX Studio
- CVE-2022-30178Azure RTOS GUIX Studio Remote Code Execution VulnerabilityMicrosoft Azure Real Time Operating System
- CVE-2022-30177Azure RTOS GUIX Studio Remote Code Execution VulnerabilityMicrosoft Azure RTOS GUIX Studio
- CVE-2022-30174Microsoft Office Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2022-30173Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Excel · Microsoft Office Web Apps Server 2013 Ser…
- CVE-2022-30168Microsoft Photos App Remote Code Execution VulnerabilityMicrosoft Photos
- CVE-2022-30167AV1 Video Extension Remote Code Execution VulnerabilityMicrosoft AV1 Video Extension
- CVE-2022-30166Local Security Authority Subsystem Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-30165Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-30164Kerberos AppContainer Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-30163Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-30161Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-30160Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-30158Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2022-30157Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2022-30153Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-30152Windows Network Address Translation (NAT) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-30151Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-30150Windows Defender Remote Credential Guard Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-30149Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-30147Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-30146Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-30145Windows Encrypting File System (EFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-30143Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-30142Windows File History Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-30141Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-30140Windows iSCSI Discovery Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-30139Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-30135Windows Media Center Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-30132Windows Container Manager Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-30131Windows Container Isolation FS Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-29149Open Management Infrastructure (OMI) Elevation of Privilege VulnerabilityMicrosoft Azure Automation State Configuration, DSC Exte… +8
- CVE-2022-29143Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server
- CVE-2022-29119HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2022-29111HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2022-22021Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2022-22018HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2022-30649Adobe Illustrator Out-of-bounds Write could lead to Arbitrary code executionAdobe Illustrator
- CVE-2022-30648Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2022-30647Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2022-24946Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi EleMitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubish…
- CVE-2022-21938Metasys MUI Graphics XSSJohnson Controls Metasys ADS/ADX/OAS server
- CVE-2022-22788DLL injection in Zoom Opener installer for Zoom and Zoom Rooms clientsZoom Video Communications Zoom Client for Meetings · Zoom V…
- CVE-2022-21935Metasys password guessingJohnson Controls Metasys ADS/ADX/OAS server
- CVE-2021-43755Adobe After Effects Memory Corruption could lead to Arbitrary Code ExecutionAdobe After Effects
- CVE-2021-42735Adobe Photoshop Memory Corruption could lead to Arbitrary code executionAdobe Photoshop
- CVE-2022-21937Metasys CSSJohnson Controls Metasys ADS/ADX/OAS server
- CVE-2022-28846Adobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2022-28849Adobe Bridge Font Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2022-28848Adobe Bridge PCX Out-of-bounds Write Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2022-28847Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2022-28845Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2022-28844Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2022-28843Adobe Bridge Font Out-of-bounds Write Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2022-28842Adobe Bridge Font Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2022-28841Adobe Bridge Font Out-of-bounds Write Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2022-28840Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2022-28839Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2022-31044Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automationrundeck · org.rundeck:rundeck
- CVE-2022-31219Drive Composer Link Following Local Privilege Escalation VulnerabilityABB Drive Composer entry · ABB Drive Composer pro +2
- CVE-2022-31218Drive Composer Link Following Local Privilege Escalation VulnerabilityABB Drive Composer entry · ABB Drive Composer pro +2
- CVE-2022-31217Drive Composer Link Following Local Privilege Escalation VulnerabilityABB Drive Composer entry · ABB Drive Composer pro +2
- CVE-2022-31216Drive Composer Link Following Local Privilege Escalation VulnerabilityABB Drive Composer entry · ABB Drive Composer pro +2
- CVE-2021-43756Adobe Media Encoder Memory Corruption Vulnerability could lead to Remote Code ExecutionAdobe Media Encoder
- CVE-2021-43754Adobe Prelude Corruption could lead to Arbitrary code executionAdobe Prelude
- CVE-2016-6556OpenNMS Stored XSS via SNMP Agent DataOpenNMS
- CVE-2016-6555OpenNMS Stored XSS via SNMP Trap AlertsOpenNMS
- CVE-2022-20817Cisco IP Phone Duplicate Key VulnerabilityCisco IP Phones with Multiplatform Firmware
- CVE-2022-20664Cisco Email Security Appliance and Cisco Secure Email and Web Manager Information Disclosure VulnerabilityCisco Email Security Appliance
- CVE-2021-42732Adobe InDesign crashes when parsing the GIF fileAdobe InDesign
- CVE-2021-40727Adobe InDesign crashes when parsing the TIF fileAdobe InDesign
- CVE-2021-39820Adobe InDesign Memory Corruption Vulnerability Could Lead to Arbitrary Code ExecutionAdobe InDesign
- CVE-2022-32157Splunk Enterprise deployment servers allow unauthenticated forwarder bundle downloadsSplunk Enterprise
- CVE-2022-32153Splunk Enterprise lacked TLS host name validationSplunk Enterprise · Splunk Cloud Platform
- CVE-2022-32152Splunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by defaultSplunk Enterprise · Splunk Cloud Platform
- CVE-2022-32151Splunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by defaultSplunk Enterprise · Splunk Cloud Platform
Medium, low and unrated 173
- CVE-2022-31071Octopoller gem published with world-writable filesoctokit octopoller.rb · octopoller
- CVE-2022-31072Octokit gem published with world-writable filesoctokit.rb · octokit
- CVE-2022-30189Windows Autopilot Device Management and Enrollment Client Spoofing VulnerabilityMicrosoft Windows
- CVE-2022-30184.NET and Visual Studio Information Disclosure VulnerabilityMicrosoft .NET · Microsoft Visual Studio +4
- CVE-2022-30172Microsoft Office Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2022-30171Microsoft Office Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2022-30162Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-30159Microsoft Office Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2022-30155Windows Kernel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-30154Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2022-30148Windows Desired State Configuration (DSC) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-30137Azure Service Fabric Container Elevation of Privilege VulnerabilityMicrosoft Service Fabric
- CVE-2022-20203In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files.Android
- CVE-2021-41403flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities.
- CVE-2022-30669Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory LeakAdobe Illustrator
- CVE-2022-30668Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory LeakAdobe Illustrator
- CVE-2022-30667Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory LeakAdobe Illustrator
- CVE-2022-30666Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory LeakAdobe Illustrator
- CVE-2022-32370itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_classroom.php?id=.
- CVE-2022-32371itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_teacher.php?id=.
- CVE-2022-32372itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_subject.php?id=.
- CVE-2022-28749Insufficient Authorization Check During Meeting JoinZoom Video Communications On-Premise Meeting Connectors
- CVE-2022-24436Observable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to potentially enable infoIntel(R) Processors
- CVE-2022-21180Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local acIntel(R) Processors
- CVE-2022-21166Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentiallyIntel(R) Processors
- CVE-2022-21127Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially Intel(R) Processors
- CVE-2022-21125Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable infoIntel(R) Processors
- CVE-2021-41415Subscription-Manager v1.0 /main.js has a cross-site scripting (XSS) vulnerability in the machineDetail parameter.
- CVE-2022-21123Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable informatiIntel(R) Processors
- CVE-2022-32280WordPress XO Slider plugin <= 3.3.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityXakuro XO Slider
- CVE-2022-29452WordPress Export All URLs plugin <= 4.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityAtlas Gondal Export All URLs
- CVE-2022-32373itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_exam.php?id=.
- CVE-2022-32368itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_grade.php?id=.
- CVE-2022-32374itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_subject_routing.php?id=.
- CVE-2021-41418AriaNg v0.1.0~v1.2.2 is affected by an incorrect access control vulnerability through not authenticating visitors' access rights.
- CVE-2022-28612WordPress Custom Popup Builder plugin <= 1.3.1 - Improper Access Control vulnerability leading to multiple Authenticated Stored XSSMuneeb Custom Popup Builder
- CVE-2022-28850Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Bridge
- CVE-2021-36891WordPress Photo Gallery by Supsystic plugin <= 1.15.5 - Cross-Site Request Forgery (CSRF) leading to Plugin Settings ChangePhoto Gallery by Supsystic
- CVE-2022-23823A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to pAMD Processors
- CVE-2022-28225Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitaryYandex Browser
- CVE-2022-28226Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low privileged, attacker to execute arbitaryYandex Browser
- CVE-2021-25261Local privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local, low privileged, attacker to execute arbitaryYandex Browser
- CVE-2022-31070Potential Sensitive Cookie Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxyfinastra-nodejs-libs · @finastra/nestjs-proxy
- CVE-2022-31069Potential Authorization Header Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxyfinastra-nodejs-libs · @finastra/nestjs-proxy
- CVE-2022-29443WordPress Hotel Booking plugin <= 3.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiesNicdark Hotel Booking
- CVE-2022-29450WordPress Admin Management Xtended plugin <= 2.4.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesOliver Schlöbe Admin Management Xtended
- CVE-2022-26057Mint WorkBench Link Following Local Privilege Escalation VulnerabilityABB Mint WorkBench
- CVE-2022-32375itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_timetable.php?id=.
- CVE-2022-32376itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_events.php?event_id=.
- CVE-2022-32377itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_exam_timetable.php?id=.
- CVE-2022-32378itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_teacher_profile.php?my_index=.
- CVE-2022-32379itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_parents_profile.php?my_index=.
- CVE-2022-32380itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_student_subject.php?index=.
- CVE-2022-32381itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_admin_profile.php?my_index=.
- CVE-2021-40776Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation VulnerabilityAdobe Lightroom Classic
- CVE-2022-32433itsourcecode Advanced School Management System v1.0 is vulnerable to Arbitrary code execution via ip/school/view/all_teacher.php.
- CVE-2022-24127A Stored Cross-Site Scripting (XSS) vulnerability was discovered in ProjectGeneral/edit_project_settings.php in REDCap 12.0.11.
- CVE-2022-24004A Stored Cross-Site Scripting (XSS) vulnerability was discovered in Messenger/messenger_ajax.php in REDCap 12.0.11.
- CVE-2022-32550An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to t
- CVE-2022-20819Cisco Identity Services Engine Sensitive Information Disclosure VulnerabilityCisco Identity Services Engine Software
- CVE-2022-20736Cisco AppDynamics Controller Authorization Bypass VulnerabilityCisco AppDynamics
- CVE-2022-20733Cisco Identity Services Engine Authentication Bypass VulnerabilityCisco Identity Services Engine Software
- CVE-2017-20049A vulnerability, was found in legacy Axis devices such as P3225 and M3005.AXIS OS
- CVE-2022-32155Universal Forwarder management services allows remote login by defaultSplunk Universal Forwarder
- CVE-2022-32154Risky commands warnings in Splunk Enterprise DashboardsSplunk Enterprise · Splunk Cloud Platform
- CVE-2021-40940Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability.
- CVE-2022-32992Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/op
- CVE-2022-32302Theme Park Ticketing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edit_ticket.php.
- CVE-2022-32991Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the eid parameter at welcome.php.
- CVE-2022-32300YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.c
- CVE-2022-32301YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.class.p
- CVE-2022-32101kkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid parameter at /template/wapian/vlist.php.
- CVE-2022-32299YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id parameter at /App/Lib/Action/Admin/SiteAction.class.php
- CVE-2022-1342A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data.Devolutions Remote Desktop Manager
- CVE-2022-22444IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user to exploit a vulnerability in the lpd daemon to cause a denial of service.IBM AIX · IBM VIOS
- CVE-2019-4575IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection.IBM Financial Transaction Manager
- CVE-2022-29442Private Messages For WordPress <= 2.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityRilwis Private Messages For WordPress
- CVE-2021-40910There is a reflective cross-site scripting (XSS) vulnerability in the PHPCMS V9.6.3 management side.
- CVE-2022-29441WordPress Private Messages For WordPress plugin <= 2.1.10 - Sending Messages via Cross-Site Request Forgery (CSRF) vulnerabilityRilwis Private Messages For WordPress
- CVE-2022-29440WordPress Promotion Slider plugin <= 3.3.4 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiesMicah Wood Promotion Slider
- CVE-2022-29439WordPress Image Slider by NextCode plugin <= 1.1.2 - Slider Deletion via Cross-Site Request Forgery (CSRF) vulnerabilityImage Slider by NextCode – Photo & Video SLider
- CVE-2022-29453WordPress API KEY for Google Maps plugin <= 1.2.1 - CSRF vulnerability leading to Google Maps API key updateAyeCode API KEY for Google Maps
- CVE-2022-29438WordPress Image Slider by NextCode plugin <= 1.1.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilityImage Slider by NextCode – Photo & Video SLider
- CVE-2021-41672PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php.
- CVE-2022-29437WordPress Image Slider by NextCode plugin <= 1.1.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesImage Slider by NextCode – Photo & Video SLider
- CVE-2022-33140Improper Neutralization of Command Elements in Shell User Group ProviderApache Software Foundation Apache NiFi · org.apache.nifi… +1
- CVE-2021-33036Apache Hadoop Privilege escalation vulnerabilityApache Software Foundation Apache Hadoop · org.apache.hadoo…
- CVE-2022-20233In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect bounAndroid
- CVE-2022-20209In hme_add_new_node_to_a_sorted_array of hme_utils.c, there is a possible out of bounds read due to a heap buffer overflow.Android
- CVE-2022-20208In parseRecursively of cppbor_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2022-20207In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value.Android
- CVE-2022-20206In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check.Android
- CVE-2022-20205In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input validation.Android
- CVE-2022-20204In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missAndroid
- CVE-2022-20202In ih264_resi_trans_quant_4x4_sse42 of ih264_resi_trans_quant_sse42.c, there is a possible out of bounds read due to a heap buffer overflow.Android
- CVE-2022-20201In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20200In updateApState of SoftApManager.java, there is a possible leak of hotspot state due to a missing permission check.Android
- CVE-2022-20198In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20197In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions bypass.Android
- CVE-2022-20196In gallery3d and photos, there is a possible permission bypass due to a confused deputy.Android
- CVE-2022-20195In the keystore library, there is a possible prevention of access to system Settings due to unsafe deserialization.Android
- CVE-2022-20194In onCreate of ChooseLockGeneric.java, there is a possible permission bypass.Android
- CVE-2022-20193In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to a logic error in theAndroid
- CVE-2022-20192In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedded hierarchy due to aAndroid
- CVE-2022-20191Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/AAndroid
- CVE-2022-20190Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/AAndroid
- CVE-2022-20188Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/AAndroid
- CVE-2022-20185In TBD of TBD, there is a possible use after free bug.Android
- CVE-2022-20184Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/AAndroid
- CVE-2022-20183In hypx_create_blob_dmabuf of faceauth_hypx.c, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20182In handle_ramdump of pixel_loader.c, there is a possible way to create a ramdump of non-secure memory due to a missing permission check.Android
- CVE-2022-20181Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/AAndroid
- CVE-2022-20179Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/AAndroid
- CVE-2022-20178In ioctl_dpm_qos_update and ioctl_event_control_set of (TBD), there is a possible out of bounds write due to an integer overflow.Android
- CVE-2022-20177Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/AAndroid
- CVE-2022-20176In auth_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check.Android
- CVE-2022-20175Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/AAndroid
- CVE-2022-20174In exynos_secEnv_init of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2022-20173Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/AAndroid
- CVE-2022-20172In onbind of ShannonRcsService.java, there is a possible access to protect data due to a missing permission check.Android
- CVE-2022-20171Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/AAndroid
- CVE-2022-20170Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/AAndroid
- CVE-2022-20169Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/AAndroid
- CVE-2022-20168Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/AAndroid
- CVE-2022-20167Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/AAndroid
- CVE-2022-20166In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2022-20165In asn1_parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2022-20164Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/AAndroid
- CVE-2022-20162In asn1_p256_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2022-20160Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/AAndroid
- CVE-2022-20159In asn1_ec_pkey_parse of acropora/crypto/asn1_common.c, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2022-20156In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation.Android
- CVE-2022-20155In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition.Android
- CVE-2022-20154In lock_sock_nested of sock.c, there is a possible use after free due to a race condition.Android · :linux_kernel:
- CVE-2022-20153In rcu_cblist_dequeue of rcu_segcblist.c, there is a possible use-after-free due to improper locking.Android · :linux_kernel:
- CVE-2022-20152In the TitanM chip, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20151Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/AAndroid
- CVE-2022-20149Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/AAndroid
- CVE-2022-20148In TBD of TBD, there is a possible use-after-free due to a race condition.Android
- CVE-2022-20146In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy.Android
- CVE-2021-39806In closef of label_backends_android.c, there is a possible way to corrupt memory due to a double free.Android
- CVE-2022-29406WordPress Team Manager plugin <= 1.6.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiesDynamicWebLab WordPress Team Manager
- CVE-2022-27859WordPress Travel Management plugin <= 2.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiesNicdark d.o.o. Travel Management
- CVE-2022-2087SourceCodester Bank Management System cross site scriptingSourceCodester Bank Management System
- CVE-2022-2086SourceCodester Bank Management System login.php sql injectionSourceCodester Bank Management System
- CVE-2021-36901WordPress Age Gate plugin <= 2.17.0 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilityPhil Baker Age Gate
- CVE-2022-20210The UE and the EMM communicate with each other using NAS messages.Android
- CVE-2022-20147In nfa_dm_check_set_config of nfa_dm_main.cc, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20145In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack.Android
- CVE-2022-20143In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion.Android
- CVE-2022-20142In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch.Android
- CVE-2022-20141In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking.Android
- CVE-2022-20140In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2022-20138In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGED_PROFIAndroid
- CVE-2022-20137In onCreateContextMenu of NetworkProviderSettings.java, there is a possible way for non-owner users to change WiFi settings due to a missingAndroid
- CVE-2022-20135In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch.Android
- CVE-2022-20134In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due to improper input vAndroid
- CVE-2022-20133In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check.Android
- CVE-2022-20132In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validatiAndroid
- CVE-2022-20131In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20130In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2022-20129In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phone account due to impAndroid
- CVE-2022-20127In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free.Android
- CVE-2022-20126In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interaction due to a missing Android
- CVE-2022-20125In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape.Android
- CVE-2022-20123In phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2021-39691In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input.Android
- CVE-2021-41413ok-file-formats master 2021-9-12 is affected by a buffer overflow in ok_jpg_convert_data_unit_grayscale and ok_jpg_convert_YCbCr_to_RGB.
- CVE-2021-40212An exploitable out-of-bounds write vulnerability in PotPlayer 1.7.21523 build 210729 may lead to code execution, information disclosure, and
- CVE-2022-1958FileCloud NTFS access controlFileCloud
- CVE-2022-20124In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications for other users dueAndroid
- CVE-2022-20144In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content providers due to a confusAndroid
- CVE-2022-20186In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input validation.Android