# CVEs published 2022-06-15

256 CVEs were published on June 15, 2022: 4 critical, 79 high. Days are UTC.

- [CVE-2022-31071](https://cve.now/CVE-2022-31071.md): Octopoller gem published with world-writable files (CVSS 2.5, octokit octopoller.rb · octopoller)
- [CVE-2022-31072](https://cve.now/CVE-2022-31072.md): Octokit gem published with world-writable files (CVSS 2.5, octokit.rb · octokit)
- [CVE-2022-30193](https://cve.now/CVE-2022-30193.md): AV1 Video Extension Remote Code Execution Vulnerability (CVSS 7.8, Microsoft AV1 Video Extension)
- [CVE-2022-30189](https://cve.now/CVE-2022-30189.md): Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2022-30188](https://cve.now/CVE-2022-30188.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extension · Microsoft HEVC Video Exten…)
- [CVE-2022-30184](https://cve.now/CVE-2022-30184.md): .NET and Visual Studio Information Disclosure Vulnerability (CVSS 5.5, Microsoft .NET · Microsoft Visual Studio +4)
- [CVE-2022-30180](https://cve.now/CVE-2022-30180.md): Azure RTOS GUIX Studio Information Disclosure Vulnerability (CVSS 7.8, Microsoft Azure RTOS GUIX Studio)
- [CVE-2022-30179](https://cve.now/CVE-2022-30179.md): Azure RTOS GUIX Studio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Azure RTOS GUIX Studio)
- [CVE-2022-30178](https://cve.now/CVE-2022-30178.md): Azure RTOS GUIX Studio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Azure Real Time Operating System)
- [CVE-2022-30177](https://cve.now/CVE-2022-30177.md): Azure RTOS GUIX Studio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Azure RTOS GUIX Studio)
- [CVE-2022-30174](https://cve.now/CVE-2022-30174.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2022-30173](https://cve.now/CVE-2022-30173.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Excel · Microsoft Office Web Apps Server 2013 Ser…)
- [CVE-2022-30172](https://cve.now/CVE-2022-30172.md): Microsoft Office Information Disclosure Vulnerability (CVSS 5.5, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2022-30171](https://cve.now/CVE-2022-30171.md): Microsoft Office Information Disclosure Vulnerability (CVSS 5.5, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2022-30168](https://cve.now/CVE-2022-30168.md): Microsoft Photos App Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Photos)
- [CVE-2022-30167](https://cve.now/CVE-2022-30167.md): AV1 Video Extension Remote Code Execution Vulnerability (CVSS 7.8, Microsoft AV1 Video Extension)
- [CVE-2022-30166](https://cve.now/CVE-2022-30166.md): Local Security Authority Subsystem Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-30165](https://cve.now/CVE-2022-30165.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2022-30164](https://cve.now/CVE-2022-30164.md): Kerberos AppContainer Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-30163](https://cve.now/CVE-2022-30163.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 8.5, Microsoft Windows)
- [CVE-2022-30162](https://cve.now/CVE-2022-30162.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-30161](https://cve.now/CVE-2022-30161.md): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2022-30160](https://cve.now/CVE-2022-30160.md): Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-30159](https://cve.now/CVE-2022-30159.md): Microsoft Office Information Disclosure Vulnerability (CVSS 5.5, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2022-30158](https://cve.now/CVE-2022-30158.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2022-30157](https://cve.now/CVE-2022-30157.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2022-30155](https://cve.now/CVE-2022-30155.md): Windows Kernel Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-30154](https://cve.now/CVE-2022-30154.md): Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability (CVSS 5.3, Microsoft Windows Server)
- [CVE-2022-30153](https://cve.now/CVE-2022-30153.md): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2022-30152](https://cve.now/CVE-2022-30152.md): Windows Network Address Translation (NAT) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-30151](https://cve.now/CVE-2022-30151.md): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-30150](https://cve.now/CVE-2022-30150.md): Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-30149](https://cve.now/CVE-2022-30149.md): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-30148](https://cve.now/CVE-2022-30148.md): Windows Desired State Configuration (DSC) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-30147](https://cve.now/CVE-2022-30147.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-30146](https://cve.now/CVE-2022-30146.md): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-30145](https://cve.now/CVE-2022-30145.md): Windows Encrypting File System (EFS) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-30143](https://cve.now/CVE-2022-30143.md): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-30142](https://cve.now/CVE-2022-30142.md): Windows File History Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-30141](https://cve.now/CVE-2022-30141.md): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2022-30140](https://cve.now/CVE-2022-30140.md): Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-30139](https://cve.now/CVE-2022-30139.md): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-30137](https://cve.now/CVE-2022-30137.md): Azure Service Fabric Container Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Service Fabric)
- [CVE-2022-30136](https://cve.now/CVE-2022-30136.md): Windows Network File System Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server)
- [CVE-2022-30135](https://cve.now/CVE-2022-30135.md): Windows Media Center Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-30132](https://cve.now/CVE-2022-30132.md): Windows Container Manager Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-30131](https://cve.now/CVE-2022-30131.md): Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-29149](https://cve.now/CVE-2022-29149.md): Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Azure Automation State Configuration, DSC Exte… +8)
- [CVE-2022-29143](https://cve.now/CVE-2022-29143.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 7.5, Microsoft SQL Server)
- [CVE-2022-29119](https://cve.now/CVE-2022-29119.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extension · Microsoft HEVC Video Exten…)
- [CVE-2022-29111](https://cve.now/CVE-2022-29111.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extension · Microsoft HEVC Video Exten…)
- [CVE-2022-22021](https://cve.now/CVE-2022-22021.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 8.3, Microsoft Edge)
- [CVE-2022-22018](https://cve.now/CVE-2022-22018.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extension · Microsoft HEVC Video Exten…)
- [CVE-2022-20203](https://cve.now/CVE-2022-20203.md): In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files. (no CVSS, Android)
- [CVE-2021-41403](https://cve.now/CVE-2021-41403.md): flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities. (no CVSS)
- [CVE-2022-30669](https://cve.now/CVE-2022-30669.md): Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak (CVSS 5.5, Adobe Illustrator)
- [CVE-2022-30668](https://cve.now/CVE-2022-30668.md): Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak (CVSS 5.5, Adobe Illustrator)
- [CVE-2022-30667](https://cve.now/CVE-2022-30667.md): Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak (CVSS 5.5, Adobe Illustrator)
- [CVE-2022-30666](https://cve.now/CVE-2022-30666.md): Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak (CVSS 5.5, Adobe Illustrator)
- [CVE-2022-30649](https://cve.now/CVE-2022-30649.md): Adobe Illustrator Out-of-bounds Write could lead to Arbitrary code execution (CVSS 7.8, Adobe Illustrator)
- [CVE-2022-32370](https://cve.now/CVE-2022-32370.md): itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get\_classroom.php?id=. (no CVSS)
- [CVE-2022-30648](https://cve.now/CVE-2022-30648.md): Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Illustrator)
- [CVE-2022-30647](https://cve.now/CVE-2022-30647.md): Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Illustrator)
- [CVE-2022-32371](https://cve.now/CVE-2022-32371.md): itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get\_teacher.php?id=. (no CVSS)
- [CVE-2022-32372](https://cve.now/CVE-2022-32372.md): itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get\_subject.php?id=. (no CVSS)
- [CVE-2022-24946](https://cve.now/CVE-2022-24946.md): Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Ele (CVSS 7.5, Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V; Mitsubish…)
- [CVE-2022-21938](https://cve.now/CVE-2022-21938.md): Metasys MUI Graphics XSS (CVSS 8.1, Johnson Controls Metasys ADS/ADX/OAS server)
- [CVE-2022-28749](https://cve.now/CVE-2022-28749.md): Insufficient Authorization Check During Meeting Join (CVSS 6.5, Zoom Video Communications On-Premise Meeting Connectors)
- [CVE-2022-22788](https://cve.now/CVE-2022-22788.md): DLL injection in Zoom Opener installer for Zoom and Zoom Rooms clients (CVSS 7.1, Zoom Video Communications Zoom Client for Meetings · Zoom V…)
- [CVE-2022-24436](https://cve.now/CVE-2022-24436.md): Observable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to potentially enable info (CVSS 6.5, Intel(R) Processors)
- [CVE-2022-21180](https://cve.now/CVE-2022-21180.md): Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local ac (CVSS 5.5, Intel(R) Processors)
- [CVE-2022-21166](https://cve.now/CVE-2022-21166.md): Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially (CVSS 5.5, Intel(R) Processors)
- [CVE-2022-21127](https://cve.now/CVE-2022-21127.md): Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially (CVSS 5.5, Intel(R) Processors)
- [CVE-2022-21125](https://cve.now/CVE-2022-21125.md): Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable info (CVSS 5.5, Intel(R) Processors)
- [CVE-2021-41415](https://cve.now/CVE-2021-41415.md): Subscription-Manager v1.0 /main.js has a cross-site scripting (XSS) vulnerability in the machineDetail parameter. (no CVSS)
- [CVE-2022-21123](https://cve.now/CVE-2022-21123.md): Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable informati (CVSS 5.5, Intel(R) Processors)
- [CVE-2022-21935](https://cve.now/CVE-2022-21935.md): Metasys password guessing (CVSS 7.5, Johnson Controls Metasys ADS/ADX/OAS server)
- [CVE-2022-32280](https://cve.now/CVE-2022-32280.md): WordPress XO Slider plugin \<= 3.3.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 5.4, Xakuro XO Slider)
- [CVE-2022-29452](https://cve.now/CVE-2022-29452.md): WordPress Export All URLs plugin \<= 4.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 3.4, Atlas Gondal Export All URLs)
- [CVE-2022-32373](https://cve.now/CVE-2022-32373.md): itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get\_exam.php?id=. (no CVSS)
- [CVE-2021-43755](https://cve.now/CVE-2021-43755.md): Adobe After Effects Memory Corruption could lead to Arbitrary Code Execution (CVSS 7.8, Adobe After Effects)
- [CVE-2022-32368](https://cve.now/CVE-2022-32368.md): itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get\_grade.php?id=. (no CVSS)
- [CVE-2022-32374](https://cve.now/CVE-2022-32374.md): itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get\_subject\_routing.php?id=. (no CVSS)
- [CVE-2021-42735](https://cve.now/CVE-2021-42735.md): Adobe Photoshop Memory Corruption could lead to Arbitrary code execution (CVSS 7.8, Adobe Photoshop)
- [CVE-2021-41418](https://cve.now/CVE-2021-41418.md): AriaNg v0.1.0~v1.2.2 is affected by an incorrect access control vulnerability through not authenticating visitors' access rights. (no CVSS)
- [CVE-2022-21937](https://cve.now/CVE-2022-21937.md): Metasys CSS (CVSS 8.7, Johnson Controls Metasys ADS/ADX/OAS server)
- [CVE-2022-28612](https://cve.now/CVE-2022-28612.md): WordPress Custom Popup Builder plugin \<= 1.3.1 - Improper Access Control vulnerability leading to multiple Authenticated Stored XSS (CVSS 5.4, Muneeb Custom Popup Builder)
- [CVE-2022-28846](https://cve.now/CVE-2022-28846.md): Adobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Bridge)
- [CVE-2022-28850](https://cve.now/CVE-2022-28850.md): Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Bridge)
- [CVE-2022-28849](https://cve.now/CVE-2022-28849.md): Adobe Bridge Font Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Bridge)
- [CVE-2022-28848](https://cve.now/CVE-2022-28848.md): Adobe Bridge PCX Out-of-bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Bridge)
- [CVE-2022-28847](https://cve.now/CVE-2022-28847.md): Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Bridge)
- [CVE-2022-28845](https://cve.now/CVE-2022-28845.md): Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Bridge)
- [CVE-2022-28844](https://cve.now/CVE-2022-28844.md): Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Bridge)
- [CVE-2022-28843](https://cve.now/CVE-2022-28843.md): Adobe Bridge Font Out-of-bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Bridge)
- [CVE-2022-28842](https://cve.now/CVE-2022-28842.md): Adobe Bridge Font Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Bridge)
- [CVE-2022-28841](https://cve.now/CVE-2022-28841.md): Adobe Bridge Font Out-of-bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Bridge)
- [CVE-2022-28840](https://cve.now/CVE-2022-28840.md): Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Bridge)
- [CVE-2022-28839](https://cve.now/CVE-2022-28839.md): Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Bridge)
- [CVE-2021-36891](https://cve.now/CVE-2021-36891.md): WordPress Photo Gallery by Supsystic plugin \<= 1.15.5 - Cross-Site Request Forgery (CSRF) leading to Plugin Settings Change (CVSS 5.4, Photo Gallery by Supsystic)
- [CVE-2022-23823](https://cve.now/CVE-2022-23823.md): A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to p (no CVSS, AMD Processors)
- [CVE-2022-28225](https://cve.now/CVE-2022-28225.md): Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary (no CVSS, Yandex Browser)
- [CVE-2022-28226](https://cve.now/CVE-2022-28226.md): Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.801 allows a local, low privileged, attacker to execute arbitary (no CVSS, Yandex Browser)
- [CVE-2021-25261](https://cve.now/CVE-2021-25261.md): Local privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local, low privileged, attacker to execute arbitary (no CVSS, Yandex Browser)
- [CVE-2022-31070](https://cve.now/CVE-2022-31070.md): Potential Sensitive Cookie Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy (CVSS 5.8, finastra-nodejs-libs · @finastra/nestjs-proxy)
- [CVE-2022-31044](https://cve.now/CVE-2022-31044.md): Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automation (CVSS 7.5, rundeck · org.rundeck:rundeck)
- [CVE-2022-31069](https://cve.now/CVE-2022-31069.md): Potential Authorization Header Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy (CVSS 5.8, finastra-nodejs-libs · @finastra/nestjs-proxy)
- [CVE-2022-29443](https://cve.now/CVE-2022-29443.md): WordPress Hotel Booking plugin \<= 3.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 4.1, Nicdark Hotel Booking)
- [CVE-2022-29450](https://cve.now/CVE-2022-29450.md): WordPress Admin Management Xtended plugin \<= 2.4.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities (CVSS 5.4, Oliver Schlöbe Admin Management Xtended)
- [CVE-2022-31219](https://cve.now/CVE-2022-31219.md): Drive Composer Link Following Local Privilege Escalation Vulnerability (CVSS 7.3, ABB Drive Composer entry · ABB Drive Composer pro +2)
- [CVE-2022-31218](https://cve.now/CVE-2022-31218.md): Drive Composer Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, ABB Drive Composer entry · ABB Drive Composer pro +2)
- [CVE-2022-31217](https://cve.now/CVE-2022-31217.md): Drive Composer Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, ABB Drive Composer entry · ABB Drive Composer pro +2)
- [CVE-2022-31216](https://cve.now/CVE-2022-31216.md): Drive Composer Link Following Local Privilege Escalation Vulnerability (CVSS 7.8, ABB Drive Composer entry · ABB Drive Composer pro +2)
- [CVE-2022-26057](https://cve.now/CVE-2022-26057.md): Mint WorkBench Link Following Local Privilege Escalation Vulnerability (CVSS 6.7, ABB Mint WorkBench)
- [CVE-2022-32375](https://cve.now/CVE-2022-32375.md): itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get\_timetable.php?id=. (no CVSS)
- [CVE-2022-32376](https://cve.now/CVE-2022-32376.md): itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get\_events.php?event\_id=. (no CVSS)
- [CVE-2022-32377](https://cve.now/CVE-2022-32377.md): itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get\_exam\_timetable.php?id=. (no CVSS)
- [CVE-2022-32378](https://cve.now/CVE-2022-32378.md): itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get\_teacher\_profile.php?my\_index=. (no CVSS)
- [CVE-2021-43756](https://cve.now/CVE-2021-43756.md): Adobe Media Encoder Memory Corruption Vulnerability could lead to Remote Code Execution (CVSS 7.8, Adobe Media Encoder)
- [CVE-2022-32379](https://cve.now/CVE-2022-32379.md): itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get\_parents\_profile.php?my\_index=. (no CVSS)
- [CVE-2022-32380](https://cve.now/CVE-2022-32380.md): itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get\_student\_subject.php?index=. (no CVSS)
- [CVE-2021-43754](https://cve.now/CVE-2021-43754.md): Adobe Prelude Corruption could lead to Arbitrary code execution (CVSS 7.8, Adobe Prelude)
- [CVE-2022-32381](https://cve.now/CVE-2022-32381.md): itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get\_admin\_profile.php?my\_index=. (no CVSS)
- [CVE-2021-40776](https://cve.now/CVE-2021-40776.md): Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability (CVSS 6.1, Adobe Lightroom Classic)
- [CVE-2016-6556](https://cve.now/CVE-2016-6556.md): OpenNMS Stored XSS via SNMP Agent Data (CVSS 7.1, OpenNMS)
- [CVE-2016-6555](https://cve.now/CVE-2016-6555.md): OpenNMS Stored XSS via SNMP Trap Alerts (CVSS 7.1, OpenNMS)
- [CVE-2022-32433](https://cve.now/CVE-2022-32433.md): itsourcecode Advanced School Management System v1.0 is vulnerable to Arbitrary code execution via ip/school/view/all\_teacher.php. (no CVSS)
- [CVE-2022-24127](https://cve.now/CVE-2022-24127.md): A Stored Cross-Site Scripting (XSS) vulnerability was discovered in ProjectGeneral/edit\_project\_settings.php in REDCap 12.0.11. (no CVSS)
- [CVE-2022-24004](https://cve.now/CVE-2022-24004.md): A Stored Cross-Site Scripting (XSS) vulnerability was discovered in Messenger/messenger\_ajax.php in REDCap 12.0.11. (no CVSS)
- [CVE-2022-32550](https://cve.now/CVE-2022-32550.md): An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to t (no CVSS)
- [CVE-2022-20825](https://cve.now/CVE-2022-20825.md): Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability (CVSS 9.8, Cisco Small Business RV Series Router Firmware)
- [CVE-2022-20819](https://cve.now/CVE-2022-20819.md): Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability (CVSS 6.5, Cisco Identity Services Engine Software)
- [CVE-2022-20817](https://cve.now/CVE-2022-20817.md): Cisco IP Phone Duplicate Key Vulnerability (CVSS 7.4, Cisco IP Phones with Multiplatform Firmware)
- [CVE-2022-20798](https://cve.now/CVE-2022-20798.md): Cisco Email Security Appliance and Cisco Secure Email and Web Manager External Authentication Bypass Vulnerability (CVSS 9.8, Cisco Email Security Appliance)
- [CVE-2022-20736](https://cve.now/CVE-2022-20736.md): Cisco AppDynamics Controller Authorization Bypass Vulnerability (CVSS 5.3, Cisco AppDynamics)
- [CVE-2022-20733](https://cve.now/CVE-2022-20733.md): Cisco Identity Services Engine Authentication Bypass Vulnerability (CVSS 5.3, Cisco Identity Services Engine Software)
- [CVE-2022-20664](https://cve.now/CVE-2022-20664.md): Cisco Email Security Appliance and Cisco Secure Email and Web Manager Information Disclosure Vulnerability (CVSS 7.7, Cisco Email Security Appliance)
- [CVE-2017-20049](https://cve.now/CVE-2017-20049.md): A vulnerability, was found in legacy Axis devices such as P3225 and M3005. (no CVSS, AXIS OS)
- [CVE-2021-42732](https://cve.now/CVE-2021-42732.md): Adobe InDesign crashes when parsing the GIF file (CVSS 7.8, Adobe InDesign)
- [CVE-2021-40727](https://cve.now/CVE-2021-40727.md): Adobe InDesign crashes when parsing the TIF file (CVSS 7.8, Adobe InDesign)
- [CVE-2021-39820](https://cve.now/CVE-2021-39820.md): Adobe InDesign Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (CVSS 7.8, Adobe InDesign)
- [CVE-2022-32158](https://cve.now/CVE-2022-32158.md): Splunk Enterprise deployment servers allow client publishing of forwarder bundles (CVSS 9.0, Splunk Enterprise)
- [CVE-2022-32157](https://cve.now/CVE-2022-32157.md): Splunk Enterprise deployment servers allow unauthenticated forwarder bundle downloads (CVSS 7.5, Splunk Enterprise)
- [CVE-2022-32155](https://cve.now/CVE-2022-32155.md): Universal Forwarder management services allows remote login by default (no CVSS, Splunk Universal Forwarder)
- [CVE-2022-32154](https://cve.now/CVE-2022-32154.md): Risky commands warnings in Splunk Enterprise Dashboards (CVSS 6.8, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2022-32153](https://cve.now/CVE-2022-32153.md): Splunk Enterprise lacked TLS host name validation (CVSS 8.1, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2022-32152](https://cve.now/CVE-2022-32152.md): Splunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by default (CVSS 8.1, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2022-32151](https://cve.now/CVE-2022-32151.md): Splunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by default (CVSS 7.4, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2021-40940](https://cve.now/CVE-2021-40940.md): Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability. (no CVSS)
- [CVE-2022-32992](https://cve.now/CVE-2022-32992.md): Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the tname parameter at /admin/op (no CVSS)
- [CVE-2022-32302](https://cve.now/CVE-2022-32302.md): Theme Park Ticketing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edit\_ticket.php. (no CVSS)
- [CVE-2022-32991](https://cve.now/CVE-2022-32991.md): Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the eid parameter at welcome.php. (no CVSS)
- [CVE-2022-32300](https://cve.now/CVE-2022-32300.md): YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the MailSendID parameter at /App/Lib/Action/Admin/MailAction.c (no CVSS)
- [CVE-2022-32301](https://cve.now/CVE-2022-32301.md): YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.class.p (no CVSS)
- [CVE-2022-32101](https://cve.now/CVE-2022-32101.md): kkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid parameter at /template/wapian/vlist.php. (no CVSS)
- [CVE-2022-32299](https://cve.now/CVE-2022-32299.md): YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the id parameter at /App/Lib/Action/Admin/SiteAction.class.php (no CVSS)
- [CVE-2022-1342](https://cve.now/CVE-2022-1342.md): A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. (no CVSS, Devolutions Remote Desktop Manager)
- [CVE-2022-22444](https://cve.now/CVE-2022-22444.md): IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user to exploit a vulnerability in the lpd daemon to cause a denial of service. (CVSS 6.2, IBM AIX · IBM VIOS)
- [CVE-2019-4575](https://cve.now/CVE-2019-4575.md): IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection. (CVSS 5.3, IBM Financial Transaction Manager)
- [CVE-2022-29442](https://cve.now/CVE-2022-29442.md): Private Messages For WordPress \<= 2.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 5.4, Rilwis Private Messages For WordPress)
- [CVE-2021-40910](https://cve.now/CVE-2021-40910.md): There is a reflective cross-site scripting (XSS) vulnerability in the PHPCMS V9.6.3 management side. (no CVSS)
- [CVE-2022-29441](https://cve.now/CVE-2022-29441.md): WordPress Private Messages For WordPress plugin \<= 2.1.10 - Sending Messages via Cross-Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Rilwis Private Messages For WordPress)
- [CVE-2022-29440](https://cve.now/CVE-2022-29440.md): WordPress Promotion Slider plugin \<= 3.3.4 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 5.4, Micah Wood Promotion Slider)
- [CVE-2022-29439](https://cve.now/CVE-2022-29439.md): WordPress Image Slider by NextCode plugin \<= 1.1.2 - Slider Deletion via Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Image Slider by NextCode – Photo & Video SLider)
- [CVE-2022-29453](https://cve.now/CVE-2022-29453.md): WordPress API KEY for Google Maps plugin \<= 1.2.1 - CSRF vulnerability leading to Google Maps API key update (CVSS 5.4, AyeCode API KEY for Google Maps)
- [CVE-2022-29438](https://cve.now/CVE-2022-29438.md): WordPress Image Slider by NextCode plugin \<= 1.1.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, Image Slider by NextCode – Photo & Video SLider)
- [CVE-2021-41672](https://cve.now/CVE-2021-41672.md): PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. (no CVSS)
- [CVE-2022-29437](https://cve.now/CVE-2022-29437.md): WordPress Image Slider by NextCode plugin \<= 1.1.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities (CVSS 5.4, Image Slider by NextCode – Photo & Video SLider)
- [CVE-2022-33140](https://cve.now/CVE-2022-33140.md): Improper Neutralization of Command Elements in Shell User Group Provider (no CVSS, Apache Software Foundation Apache NiFi · org.apache.nifi… +1)
- [CVE-2021-33036](https://cve.now/CVE-2021-33036.md): Apache Hadoop Privilege escalation vulnerability (no CVSS, Apache Software Foundation Apache Hadoop · org.apache.hadoo…)
- [CVE-2022-20233](https://cve.now/CVE-2022-20233.md): In param\_find\_digests\_internal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect boun (no CVSS, Android)
- [CVE-2022-20209](https://cve.now/CVE-2022-20209.md): In hme\_add\_new\_node\_to\_a\_sorted\_array of hme\_utils.c, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2022-20208](https://cve.now/CVE-2022-20208.md): In parseRecursively of cppbor\_parse.cpp, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2022-20207](https://cve.now/CVE-2022-20207.md): In static definitions of GattServiceConfig.java, there is a possible permission bypass due to an insecure default value. (no CVSS, Android)
- [CVE-2022-20206](https://cve.now/CVE-2022-20206.md): In setPackageOrComponentEnabled of NotificationManagerService.java, there is a missing permission check. (no CVSS, Android)
- [CVE-2022-20205](https://cve.now/CVE-2022-20205.md): In isFileUri of FileUtil.java, there is a possible way to bypass the check for a file:// scheme due to improper input validation. (no CVSS, Android)
- [CVE-2022-20204](https://cve.now/CVE-2022-20204.md): In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a miss (no CVSS, Android)
- [CVE-2022-20202](https://cve.now/CVE-2022-20202.md): In ih264\_resi\_trans\_quant\_4x4\_sse42 of ih264\_resi\_trans\_quant\_sse42.c, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2022-20201](https://cve.now/CVE-2022-20201.md): In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-20200](https://cve.now/CVE-2022-20200.md): In updateApState of SoftApManager.java, there is a possible leak of hotspot state due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20198](https://cve.now/CVE-2022-20198.md): In llcp\_dlc\_proc\_connect\_pdu of llcp\_dlc.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-20197](https://cve.now/CVE-2022-20197.md): In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions bypass. (no CVSS, Android)
- [CVE-2022-20196](https://cve.now/CVE-2022-20196.md): In gallery3d and photos, there is a possible permission bypass due to a confused deputy. (no CVSS, Android)
- [CVE-2022-20195](https://cve.now/CVE-2022-20195.md): In the keystore library, there is a possible prevention of access to system Settings due to unsafe deserialization. (no CVSS, Android)
- [CVE-2022-20194](https://cve.now/CVE-2022-20194.md): In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. (no CVSS, Android)
- [CVE-2022-20193](https://cve.now/CVE-2022-20193.md): In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to a logic error in the (no CVSS, Android)
- [CVE-2022-20192](https://cve.now/CVE-2022-20192.md): In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedded hierarchy due to a (no CVSS, Android)
- [CVE-2022-20191](https://cve.now/CVE-2022-20191.md): Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A (no CVSS, Android)
- [CVE-2022-20190](https://cve.now/CVE-2022-20190.md): Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A (no CVSS, Android)
- [CVE-2022-20188](https://cve.now/CVE-2022-20188.md): Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A (no CVSS, Android)
- [CVE-2022-20185](https://cve.now/CVE-2022-20185.md): In TBD of TBD, there is a possible use after free bug. (no CVSS, Android)
- [CVE-2022-20184](https://cve.now/CVE-2022-20184.md): Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A (no CVSS, Android)
- [CVE-2022-20183](https://cve.now/CVE-2022-20183.md): In hypx\_create\_blob\_dmabuf of faceauth\_hypx.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-20182](https://cve.now/CVE-2022-20182.md): In handle\_ramdump of pixel\_loader.c, there is a possible way to create a ramdump of non-secure memory due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20181](https://cve.now/CVE-2022-20181.md): Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A (no CVSS, Android)
- [CVE-2022-20179](https://cve.now/CVE-2022-20179.md): Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A (no CVSS, Android)
- [CVE-2022-20178](https://cve.now/CVE-2022-20178.md): In ioctl\_dpm\_qos\_update and ioctl\_event\_control\_set of (TBD), there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2022-20177](https://cve.now/CVE-2022-20177.md): Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A (no CVSS, Android)
- [CVE-2022-20176](https://cve.now/CVE-2022-20176.md): In auth\_store of sjtag-driver.c, there is a possible read of uninitialized memory due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-20175](https://cve.now/CVE-2022-20175.md): Product: AndroidVersions: Android kernelAndroid ID: A-209252491References: N/A (no CVSS, Android)
- [CVE-2022-20174](https://cve.now/CVE-2022-20174.md): In exynos\_secEnv\_init of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2022-20173](https://cve.now/CVE-2022-20173.md): Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/A (no CVSS, Android)
- [CVE-2022-20172](https://cve.now/CVE-2022-20172.md): In onbind of ShannonRcsService.java, there is a possible access to protect data due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20171](https://cve.now/CVE-2022-20171.md): Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/A (no CVSS, Android)
- [CVE-2022-20170](https://cve.now/CVE-2022-20170.md): Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A (no CVSS, Android)
- [CVE-2022-20169](https://cve.now/CVE-2022-20169.md): Product: AndroidVersions: Android kernelAndroid ID: A-211162353References: N/A (no CVSS, Android)
- [CVE-2022-20168](https://cve.now/CVE-2022-20168.md): Product: AndroidVersions: Android kernelAndroid ID: A-210594998References: N/A (no CVSS, Android)
- [CVE-2022-20167](https://cve.now/CVE-2022-20167.md): Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A (no CVSS, Android)
- [CVE-2022-20166](https://cve.now/CVE-2022-20166.md): In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2022-20165](https://cve.now/CVE-2022-20165.md): In asn1\_parse of asn1.c, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2022-20164](https://cve.now/CVE-2022-20164.md): Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A (no CVSS, Android)
- [CVE-2022-20162](https://cve.now/CVE-2022-20162.md): In asn1\_p256\_int of crypto/asn1.c, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2022-20160](https://cve.now/CVE-2022-20160.md): Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A (no CVSS, Android)
- [CVE-2022-20159](https://cve.now/CVE-2022-20159.md): In asn1\_ec\_pkey\_parse of acropora/crypto/asn1\_common.c, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2022-20156](https://cve.now/CVE-2022-20156.md): In unflatten of GraphicBuffer.cpp, there is a possible arbitrary code execution due to improper input validation. (no CVSS, Android)
- [CVE-2022-20155](https://cve.now/CVE-2022-20155.md): In ipu\_core\_jqs\_msg\_transport\_kernel\_write\_sync of ipu-core-jqs-msg-transport.c, there is a possible use-after-free due to a race condition. (no CVSS, Android)
- [CVE-2022-20154](https://cve.now/CVE-2022-20154.md): In lock\_sock\_nested of sock.c, there is a possible use after free due to a race condition. (no CVSS, Android · :linux\_kernel:)
- [CVE-2022-20153](https://cve.now/CVE-2022-20153.md): In rcu\_cblist\_dequeue of rcu\_segcblist.c, there is a possible use-after-free due to improper locking. (no CVSS, Android · :linux\_kernel:)
- [CVE-2022-20152](https://cve.now/CVE-2022-20152.md): In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-20151](https://cve.now/CVE-2022-20151.md): Product: AndroidVersions: Android kernelAndroid ID: A-210712565References: N/A (no CVSS, Android)
- [CVE-2022-20149](https://cve.now/CVE-2022-20149.md): Product: AndroidVersions: Android kernelAndroid ID: A-211685939References: N/A (no CVSS, Android)
- [CVE-2022-20148](https://cve.now/CVE-2022-20148.md): In TBD of TBD, there is a possible use-after-free due to a race condition. (no CVSS, Android)
- [CVE-2022-20146](https://cve.now/CVE-2022-20146.md): In uploadFile of FileUploadServiceImpl.java, there is a possible incorrect file access due to a confused deputy. (no CVSS, Android)
- [CVE-2021-39806](https://cve.now/CVE-2021-39806.md): In closef of label\_backends\_android.c, there is a possible way to corrupt memory due to a double free. (no CVSS, Android)
- [CVE-2022-29406](https://cve.now/CVE-2022-29406.md): WordPress Team Manager plugin \<= 1.6.9 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 4.1, DynamicWebLab WordPress Team Manager)
- [CVE-2022-27859](https://cve.now/CVE-2022-27859.md): WordPress Travel Management plugin \<= 2.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 4.1, Nicdark d.o.o. Travel Management)
- [CVE-2022-2087](https://cve.now/CVE-2022-2087.md): SourceCodester Bank Management System cross site scripting (CVSS 3.5, SourceCodester Bank Management System)
- [CVE-2022-2086](https://cve.now/CVE-2022-2086.md): SourceCodester Bank Management System login.php sql injection (CVSS 6.3, SourceCodester Bank Management System)
- [CVE-2021-36901](https://cve.now/CVE-2021-36901.md): WordPress Age Gate plugin \<= 2.17.0 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 6.1, Phil Baker Age Gate)
- [CVE-2022-20210](https://cve.now/CVE-2022-20210.md): The UE and the EMM communicate with each other using NAS messages. (no CVSS, Android)
- [CVE-2022-20147](https://cve.now/CVE-2022-20147.md): In nfa\_dm\_check\_set\_config of nfa\_dm\_main.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-20145](https://cve.now/CVE-2022-20145.md): In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. (no CVSS, Android)
- [CVE-2022-20143](https://cve.now/CVE-2022-20143.md): In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion. (no CVSS, Android)
- [CVE-2022-20142](https://cve.now/CVE-2022-20142.md): In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parcel mismatch. (no CVSS, Android)
- [CVE-2022-20141](https://cve.now/CVE-2022-20141.md): In ip\_check\_mc\_rcu of igmp.c, there is a possible use after free due to improper locking. (no CVSS, Android)
- [CVE-2022-20140](https://cve.now/CVE-2022-20140.md): In read\_multi\_rsp of gatt\_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2022-20138](https://cve.now/CVE-2022-20138.md): In ACTION\_MANAGED\_PROFILE\_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app to send MANAGED\_PROFI (no CVSS, Android)
- [CVE-2022-20137](https://cve.now/CVE-2022-20137.md): In onCreateContextMenu of NetworkProviderSettings.java, there is a possible way for non-owner users to change WiFi settings due to a missing (no CVSS, Android)
- [CVE-2022-20135](https://cve.now/CVE-2022-20135.md): In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch. (no CVSS, Android)
- [CVE-2022-20134](https://cve.now/CVE-2022-20134.md): In readArguments of CallSubjectDialog.java, there is a possible way to trick the user to call the wrong phone number due to improper input v (no CVSS, Android)
- [CVE-2022-20133](https://cve.now/CVE-2022-20133.md): In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20132](https://cve.now/CVE-2022-20132.md): In lg\_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validati (no CVSS, Android)
- [CVE-2022-20131](https://cve.now/CVE-2022-20131.md): In nci\_proc\_rf\_management\_ntf of nci\_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-20130](https://cve.now/CVE-2022-20130.md): In transportDec\_OutOfBandConfig of tpdec\_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2022-20129](https://cve.now/CVE-2022-20129.md): In registerPhoneAccount of PhoneAccountRegistrar.java, there is a possible way to prevent the user from selecting a phone account due to imp (no CVSS, Android)
- [CVE-2022-20127](https://cve.now/CVE-2022-20127.md): In ce\_t4t\_data\_cback of ce\_t4t.cc, there is a possible out of bounds write due to a double free. (no CVSS, Android)
- [CVE-2022-20126](https://cve.now/CVE-2022-20126.md): In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interaction due to a missing (no CVSS, Android)
- [CVE-2022-20125](https://cve.now/CVE-2022-20125.md): In GBoard, there is a possible way to bypass factory reset protections due to a sandbox escape. (no CVSS, Android)
- [CVE-2022-20123](https://cve.now/CVE-2022-20123.md): In phNciNfc\_RecvMfResp of phNxpExtns\_MifareStd.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-39691](https://cve.now/CVE-2021-39691.md): In WindowManager, there is a possible tapjacking attack due to an incorrect window flag when processing user input. (no CVSS, Android)
- [CVE-2021-41413](https://cve.now/CVE-2021-41413.md): ok-file-formats master 2021-9-12 is affected by a buffer overflow in ok\_jpg\_convert\_data\_unit\_grayscale and ok\_jpg\_convert\_YCbCr\_to\_RGB. (no CVSS)
- [CVE-2021-40212](https://cve.now/CVE-2021-40212.md): An exploitable out-of-bounds write vulnerability in PotPlayer 1.7.21523 build 210729 may lead to code execution, information disclosure, and (no CVSS)
- [CVE-2022-1958](https://cve.now/CVE-2022-1958.md): FileCloud NTFS access control (CVSS 6.3, FileCloud)
- [CVE-2022-20124](https://cve.now/CVE-2022-20124.md): In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications for other users due (no CVSS, Android)
- [CVE-2022-20144](https://cve.now/CVE-2022-20144.md): In multiple functions of AvatarPhotoController.java, there is a possible access to content owned by system content providers due to a confus (no CVSS, Android)
- [CVE-2022-20186](https://cve.now/CVE-2022-20186.md): In kbase\_mem\_alias of mali\_kbase\_mem\_linux.c, there is a possible arbitrary code execution due to improper input validation. (no CVSS, Android)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-06-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.