# CVEs published 2022-07-12

186 CVEs were published on July 12, 2022: 3 critical, 50 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2022-30517](https://cve.now/CVE-2022-30517.md): Mogu blog 5.2 is vulnerable to Cross Site Scripting (XSS). (no CVSS)
- [CVE-2022-29602](https://cve.now/CVE-2022-29602.md): The gridelements (aka Grid Elements) extension through 7.6.1, 8.x through 8.7.0, 9.x through 9.7.0, and 10.x through 10.2.0 extension for TY (no CVSS)
- [CVE-2022-33156](https://cve.now/CVE-2022-33156.md): The matomo\_integration (aka Matomo Integration) extension before 1.3.2 for TYPO3 allows XSS. (no CVSS, brotkrueml/typo3-matomo-integration)
- [CVE-2022-33678](https://cve.now/CVE-2022-33678.md): Azure Site Recovery Remote Code Execution Vulnerability (CVSS 7.2, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33677](https://cve.now/CVE-2022-33677.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 7.2, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33676](https://cve.now/CVE-2022-33676.md): Azure Site Recovery Remote Code Execution Vulnerability (CVSS 7.2, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33675](https://cve.now/CVE-2022-33675.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33674](https://cve.now/CVE-2022-33674.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 8.3, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33673](https://cve.now/CVE-2022-33673.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33672](https://cve.now/CVE-2022-33672.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33671](https://cve.now/CVE-2022-33671.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 4.9, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33669](https://cve.now/CVE-2022-33669.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 4.9, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33668](https://cve.now/CVE-2022-33668.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 4.9, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33667](https://cve.now/CVE-2022-33667.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33666](https://cve.now/CVE-2022-33666.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33665](https://cve.now/CVE-2022-33665.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33664](https://cve.now/CVE-2022-33664.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 4.9, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33663](https://cve.now/CVE-2022-33663.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33662](https://cve.now/CVE-2022-33662.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33661](https://cve.now/CVE-2022-33661.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33660](https://cve.now/CVE-2022-33660.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 4.9, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33659](https://cve.now/CVE-2022-33659.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 4.9, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33658](https://cve.now/CVE-2022-33658.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 4.9, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33657](https://cve.now/CVE-2022-33657.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33656](https://cve.now/CVE-2022-33656.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33655](https://cve.now/CVE-2022-33655.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33654](https://cve.now/CVE-2022-33654.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 4.9, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33653](https://cve.now/CVE-2022-33653.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 4.9, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33652](https://cve.now/CVE-2022-33652.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 4.9, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33651](https://cve.now/CVE-2022-33651.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 4.9, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33650](https://cve.now/CVE-2022-33650.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 4.9, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33644](https://cve.now/CVE-2022-33644.md): Xbox Live Save Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-33643](https://cve.now/CVE-2022-33643.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33642](https://cve.now/CVE-2022-33642.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 4.9, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33641](https://cve.now/CVE-2022-33641.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-33637](https://cve.now/CVE-2022-33637.md): Microsoft Defender for Endpoint Tampering Vulnerability (CVSS 6.5, Microsoft Defender for Endpoint for Linux)
- [CVE-2022-33633](https://cve.now/CVE-2022-33633.md): Skype for Business and Lync Remote Code Execution Vulnerability (CVSS 7.2, Microsoft Lync Server 2013 CU10 · Microsoft Skype for Bu… +1)
- [CVE-2022-33632](https://cve.now/CVE-2022-33632.md): Microsoft Office Security Feature Bypass Vulnerability (CVSS 4.7, Microsoft Office LTSC · Microsoft Office +1)
- [CVE-2022-30226](https://cve.now/CVE-2022-30226.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2022-30225](https://cve.now/CVE-2022-30225.md): Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2022-30224](https://cve.now/CVE-2022-30224.md): Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-30223](https://cve.now/CVE-2022-30223.md): Windows Hyper-V Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows)
- [CVE-2022-30222](https://cve.now/CVE-2022-30222.md): Windows Shell Remote Code Execution Vulnerability (CVSS 8.4, Microsoft Windows)
- [CVE-2022-30221](https://cve.now/CVE-2022-30221.md): Windows Graphics Component Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows · Microsoft Remote Desktop client for Win…)
- [CVE-2022-30220](https://cve.now/CVE-2022-30220.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-30216](https://cve.now/CVE-2022-30216.md): Windows Server Service Tampering Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2022-30215](https://cve.now/CVE-2022-30215.md): Active Directory Federation Services Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2022-30214](https://cve.now/CVE-2022-30214.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 6.6, Microsoft Windows Server)
- [CVE-2022-30213](https://cve.now/CVE-2022-30213.md): Windows GDI+ Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-30212](https://cve.now/CVE-2022-30212.md): Windows Connected Devices Platform Service Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2022-30211](https://cve.now/CVE-2022-30211.md): Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-30209](https://cve.now/CVE-2022-30209.md): Windows IIS Server Elevation of Privilege Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2022-30208](https://cve.now/CVE-2022-30208.md): Windows Security Account Manager (SAM) Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2022-30206](https://cve.now/CVE-2022-30206.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-30205](https://cve.now/CVE-2022-30205.md): Windows Group Policy Elevation of Privilege Vulnerability (CVSS 6.6, Microsoft Windows)
- [CVE-2022-30203](https://cve.now/CVE-2022-30203.md): Windows Boot Manager Security Feature Bypass Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2022-30202](https://cve.now/CVE-2022-30202.md): Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-30187](https://cve.now/CVE-2022-30187.md): Azure Storage Library Information Disclosure Vulnerability (CVSS 4.7, Microsoft Azure Storage Blobs client library for .NET ·… +8)
- [CVE-2022-30181](https://cve.now/CVE-2022-30181.md): Azure Site Recovery Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Azure Site Recovery VMWare to Azure)
- [CVE-2022-22711](https://cve.now/CVE-2022-22711.md): Windows BitLocker Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows)
- [CVE-2022-22050](https://cve.now/CVE-2022-22050.md): Windows Fax Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-22049](https://cve.now/CVE-2022-22049.md): Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-22048](https://cve.now/CVE-2022-22048.md): BitLocker Security Feature Bypass Vulnerability (CVSS 6.1, Microsoft Windows)
- [CVE-2022-22047](https://cve.now/CVE-2022-22047.md): Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2022-22045](https://cve.now/CVE-2022-22045.md): Windows.Devices.Picker.dll Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-22043](https://cve.now/CVE-2022-22043.md): Windows Fast FAT File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-22042](https://cve.now/CVE-2022-22042.md): Windows Hyper-V Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2022-22041](https://cve.now/CVE-2022-22041.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2022-22040](https://cve.now/CVE-2022-22040.md): Internet Information Services Dynamic Compression Module Denial of Service Vulnerability (CVSS 7.3, Microsoft Windows)
- [CVE-2022-22039](https://cve.now/CVE-2022-22039.md): Windows Network File System Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2022-22038](https://cve.now/CVE-2022-22038.md): Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2022-22037](https://cve.now/CVE-2022-22037.md): Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-22036](https://cve.now/CVE-2022-22036.md): Performance Counters for Windows Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-22034](https://cve.now/CVE-2022-22034.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-22031](https://cve.now/CVE-2022-22031.md): Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-22029](https://cve.now/CVE-2022-22029.md): Windows Network File System Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows Server)
- [CVE-2022-22028](https://cve.now/CVE-2022-22028.md): Windows Network File System Information Disclosure Vulnerability (CVSS 5.9, Microsoft Windows Server)
- [CVE-2022-33157](https://cve.now/CVE-2022-33157.md): The libconnect extension before 7.0.8 and 8.x before 8.1.0 for TYPO3 allows XSS. (no CVSS, subhh/libconnect)
- [CVE-2022-22027](https://cve.now/CVE-2022-22027.md): Windows Fax Service Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-22026](https://cve.now/CVE-2022-22026.md): Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2022-22025](https://cve.now/CVE-2022-22025.md): Windows Internet Information Services Cachuri Module Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-22024](https://cve.now/CVE-2022-22024.md): Windows Fax Service Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-22023](https://cve.now/CVE-2022-22023.md): Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability (CVSS 6.6, Microsoft Windows)
- [CVE-2022-22022](https://cve.now/CVE-2022-22022.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2022-21845](https://cve.now/CVE-2022-21845.md): Windows Kernel Information Disclosure Vulnerability (CVSS 4.7, Microsoft Windows)
- [CVE-2022-31102](https://cve.now/CVE-2022-31102.md): Cross-site Scripting for Argo CD single sign on users (CVSS 2.6, argoproj argo-cd · github.com/argoproj/argo-cd +1)
- [CVE-2022-31105](https://cve.now/CVE-2022-31105.md): Argo CD's certificate verification is skipped for connections to OIDC providers (CVSS 8.3, argoproj argo-cd · github.com/argoproj/argo-cd +1)
- [CVE-2022-35628](https://cve.now/CVE-2022-35628.md): A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3. (no CVSS, in2code/lux)
- [CVE-2022-33155](https://cve.now/CVE-2022-33155.md): The ameos\_tarteaucitron (aka AMEOS - TarteAuCitron GDPR cookie banner and tracking management / French RGPD compatible) extension before 1.2 (no CVSS, ameos/ameos\_tarteaucitron)
- [CVE-2022-35403](https://cve.now/CVE-2022-35403.md): Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an u (no CVSS)
- [CVE-2022-33154](https://cve.now/CVE-2022-33154.md): The schema (aka Embedding schema.org vocabulary) extension before 1.13.1 and 2.x before 2.5.1 for TYPO3 allows XSS. (no CVSS, brotkrueml/schema)
- [CVE-2022-29600](https://cve.now/CVE-2022-29600.md): The oelib (aka One is Enough Library) extension through 4.1.5 for TYPO3 allows SQL Injection. (no CVSS)
- [CVE-2022-29601](https://cve.now/CVE-2022-29601.md): The seminars (aka Seminar Manager) extension through 4.1.3 for TYPO3 allows SQL Injection. (no CVSS)
- [CVE-2022-31655](https://cve.now/CVE-2022-31655.md): VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitizatio (no CVSS, VMware vRealize Log Insight)
- [CVE-2022-31654](https://cve.now/CVE-2022-31654.md): VMware vRealize Log Insight in versions prior to 8.8.2 contain a stored cross-site scripting vulnerability due to improper input sanitizatio (no CVSS, VMware vRealize Log Insight)
- [CVE-2022-1737](https://cve.now/CVE-2022-1737.md): Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write (CVSS 9.8, Pyramid Solutions EtherNet/IP Adapter Development Kit ·… +2)
- [CVE-2022-1025](https://cve.now/CVE-2022-1025.md): All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potent (no CVSS, ArgoCD · github.com/argoproj/argo-cd +1)
- [CVE-2011-4916](https://cve.now/CVE-2011-4916.md): Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ and /dev/tty\*. (no CVSS, Linux Kernel)
- [CVE-2022-31012](https://cve.now/CVE-2022-31012.md): Git for Windows' installer can be tricked into executing an untrusted binary (CVSS 8.2, git-for-windows git)
- [CVE-2022-31134](https://cve.now/CVE-2022-31134.md): Zulip Server public data export contains attachments that are non-public (CVSS 4.9, zulip)
- [CVE-2022-2211](https://cve.now/CVE-2022-2211.md): A vulnerability was found in libguestfs. (no CVSS, libguestfs)
- [CVE-2022-32249](https://cve.now/CVE-2022-32249.md): Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit�s data volume to ga (no CVSS, SAP SE SAP Business one)
- [CVE-2022-35224](https://cve.now/CVE-2022-35224.md): SAP Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in (no CVSS, SAP SE SAP Enterprise Portal)
- [CVE-2022-35228](https://cve.now/CVE-2022-35228.md): SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricte (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2022-35225](https://cve.now/CVE-2022-35225.md): SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs ove (no CVSS, SAP SE SAP NetWeaver Enterprise Portal)
- [CVE-2022-35227](https://cve.now/CVE-2022-35227.md): A vulnerability in SAP NW EP (WPC) - versions 7.30, 7.31, 7.40, 7.50, which does not sufficiently validate user-controlled input, allows a r (no CVSS, SAP SE SAP NetWeaver Enterprise Portal)
- [CVE-2022-35172](https://cve.now/CVE-2022-35172.md): SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, re (no CVSS, SAP SE SAP NetWeaver Enterprise Portal)
- [CVE-2022-35171](https://cve.now/CVE-2022-35171.md): When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the appli (no CVSS, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2022-35169](https://cve.now/CVE-2022-35169.md): SAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker with an admin privilege to read and decrypt (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2022-35170](https://cve.now/CVE-2022-35170.md): SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, not sufficiently encode user-controlled inputs ove (no CVSS, SAP SE SAP NetWeaver Enterprise Portal)
- [CVE-2022-35168](https://cve.now/CVE-2022-35168.md): Due to improper input sanitization of XML input in SAP Business One - version 10.0, an attacker can perform a denial-of-service attack rende (no CVSS, SAP SE SAP Business one)
- [CVE-2022-32247](https://cve.now/CVE-2022-32247.md): SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthe (no CVSS, SAP SE SAP NetWeaver Enterprise Portal)
- [CVE-2022-32248](https://cve.now/CVE-2022-32248.md): Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could (no CVSS, SAP SE SAP S/4HANA)
- [CVE-2022-31593](https://cve.now/CVE-2022-31593.md): SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. (no CVSS, SAP SE SAP Business One)
- [CVE-2022-31591](https://cve.now/CVE-2022-31591.md): SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. (no CVSS, SAP SE SAP BusinessObjects)
- [CVE-2022-31597](https://cve.now/CVE-2022-31597.md): Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovak (no CVSS, SAP SE SAP S/4HANA)
- [CVE-2022-28771](https://cve.now/CVE-2022-28771.md): Due to missing authentication check, SAP Business one License service API - version 10.0 allows an unauthenticated attacker to send maliciou (no CVSS, SAP SE SAP Business One License service API)
- [CVE-2022-29619](https://cve.now/CVE-2022-29619.md): Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.x - versions 420,430 allows user Administrator to view, edit o (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2022-31592](https://cve.now/CVE-2022-31592.md): The application SAP Enterprise Extension Defense Forces & Public Security - versions 605, 606, 616,617,618, 802, 803, 804, 805, 806, does no (no CVSS, SAP SE SAP Enterprise Extension Defense Forces & Public Sec…)
- [CVE-2022-31598](https://cve.now/CVE-2022-31598.md): Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request thr (no CVSS, SAP SE SAP Business Objects)
- [CVE-2022-32246](https://cve.now/CVE-2022-32246.md): SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who (no CVSS, SAP SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2022-22997](https://cve.now/CVE-2022-22997.md): Command Injection Vulnerability on My Cloud Home (CVSS 6.8, Western Digital My Cloud Home)
- [CVE-2022-22998](https://cve.now/CVE-2022-22998.md): Protecting AWS credentials stored in plaintext on My Cloud Home (CVSS 8.0, Western Digital My Cloud Home)
- [CVE-2022-24800](https://cve.now/CVE-2022-24800.md): Race Condition in October CMS upload process (CVSS 8.1, octobercms october · october/system)
- [CVE-2021-39041](https://cve.now/CVE-2021-39041.md): IBM QRadar SIEM 7.3, 7.4, and 7.5 may be vulnerable to partial denial of service attack, resulting in some protocols not listening to specif (CVSS 3.7, IBM QRadar SIEM)
- [CVE-2020-4159](https://cve.now/CVE-2020-4159.md): IBM QRadar Network Security 5.4.0 and 5.5.0 discloses sensitive information to unauthorized users which could be used to mount further attac (CVSS 5.3, IBM QRadar Network Security)
- [CVE-2020-4157](https://cve.now/CVE-2020-4157.md): IBM QRadar Network Security 5.4.0 and 5.5.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its (CVSS 6.8, IBM QRadar Network Security)
- [CVE-2022-2364](https://cve.now/CVE-2022-2364.md): SourceCodester Simple Parking Management System category cross site scripting (CVSS 3.5, SourceCodester Simple Parking Management System)
- [CVE-2022-2363](https://cve.now/CVE-2022-2363.md): SourceCodester Simple Parking Management System cross site scripting (CVSS 3.5, SourceCodester Simple Parking Management System)
- [CVE-2022-2298](https://cve.now/CVE-2022-2298.md): SourceCodester Clinics Patient Management System Login Page index.php sql injection (CVSS 7.3, SourceCodester Clinics Patient Management System)
- [CVE-2022-2297](https://cve.now/CVE-2022-2297.md): SourceCodester Clinics Patient Management System unrestricted upload (CVSS 6.3, SourceCodester Clinics Patient Management System)
- [CVE-2022-29900](https://cve.now/CVE-2022-29900.md): Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-depend (no CVSS, AMD Processors)
- [CVE-2022-2385](https://cve.now/CVE-2022-2385.md): AccessKeyID validation bypass (CVSS 8.1, Kubernetes aws-iam-authenticator · sigs.k8s.io/aws-iam-auth…)
- [CVE-2022-25875](https://cve.now/CVE-2022-25875.md): Cross-site Scripting (XSS) (CVSS 5.4, svelte)
- [CVE-2022-25303](https://cve.now/CVE-2022-25303.md): Cross-site Scripting (XSS) (CVSS 5.4, whoogle-search)
- [CVE-2022-2293](https://cve.now/CVE-2022-2293.md): SourceCodester Simple Sales Management System create cross site scripting (CVSS 3.5, SourceCodester Simple Sales Management System)
- [CVE-2022-2292](https://cve.now/CVE-2022-2292.md): SourceCodester Hotel Management System Room Edit Page 1 cross site scripting (CVSS 3.5, SourceCodester Hotel Management System)
- [CVE-2022-2291](https://cve.now/CVE-2022-2291.md): SourceCodester Hotel Management System Search search cross site scripting (CVSS 4.3, SourceCodester Hotel Management System)
- [CVE-2022-2263](https://cve.now/CVE-2022-2263.md): Online Hotel Booking System Room edit\_room\_cat.php sql injection (CVSS 4.7, Online Hotel Booking System)
- [CVE-2022-2262](https://cve.now/CVE-2022-2262.md): Online Hotel Booking System Room edit\_all\_room.php sql injection (CVSS 4.7, Online Hotel Booking System)
- [CVE-2021-38289](https://cve.now/CVE-2021-38289.md): An issue has been discovered in Novastar-VNNOX-iCare Novaicare 7.16.0 that gives attacker privilege escalation and allows attackers to view (no CVSS)
- [CVE-2022-34820](https://cve.now/CVE-2022-34820.md): A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions \< V3.3.46), SIMATIC CP 1243-1 (All versions \< V3.3.46), SIMATIC CP (CVSS 8.4, Siemens SIMATIC CP 1242-7 · Siemens SIMATIC CP 1243-1 +11)
- [CVE-2022-34819](https://cve.now/CVE-2022-34819.md): A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions \< V3.3.46), SIMATIC CP 1243-1 (All versions \< V3.3.46), SIMATIC CP (CVSS 10.0, Siemens SIMATIC CP 1242-7 · Siemens SIMATIC CP 1243-1 +11)
- [CVE-2022-34748](https://cve.now/CVE-2022-34748.md): A vulnerability has been identified in Simcenter Femap (All versions \< V2022.2). (no CVSS, Siemens Simcenter Femap)
- [CVE-2022-34663](https://cve.now/CVE-2022-34663.md): A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, (CVSS 8.0, Siemens RUGGEDCOM i800 · Siemens RUGGEDCOM i800NC +140)
- [CVE-2022-34467](https://cve.now/CVE-2022-34467.md): A vulnerability has been identified in Mendix Excel Importer Module (Mendix 8 compatible) (All versions \< V9.2.2), Mendix Excel Importer Mod (no CVSS, Siemens Mendix Excel Importer Module)
- [CVE-2022-34466](https://cve.now/CVE-2022-34466.md): A vulnerability has been identified in Mendix Applications using Mendix 9 (All versions \>= V9.11 \< V9.15), Mendix Applications using Mendix (no CVSS, Siemens Mendix Applications using Mendix)
- [CVE-2022-34465](https://cve.now/CVE-2022-34465.md): A vulnerability has been identified in Parasolid V33.1 (All versions \< V33.1.264), Parasolid V34.0 (All versions \< V34.0.250), Parasolid V34 (no CVSS, Siemens Parasolid · Siemens Simcenter Femap)
- [CVE-2022-34464](https://cve.now/CVE-2022-34464.md): A vulnerability has been identified in SICAM GridEdge (Classic) (All versions \< V2.7.3). (CVSS 6.3, Siemens SICAM GridEdge)
- [CVE-2022-34291](https://cve.now/CVE-2022-34291.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34290](https://cve.now/CVE-2022-34290.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34289](https://cve.now/CVE-2022-34289.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34288](https://cve.now/CVE-2022-34288.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34287](https://cve.now/CVE-2022-34287.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34286](https://cve.now/CVE-2022-34286.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34285](https://cve.now/CVE-2022-34285.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34284](https://cve.now/CVE-2022-34284.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34283](https://cve.now/CVE-2022-34283.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34282](https://cve.now/CVE-2022-34282.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34281](https://cve.now/CVE-2022-34281.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34280](https://cve.now/CVE-2022-34280.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34279](https://cve.now/CVE-2022-34279.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34278](https://cve.now/CVE-2022-34278.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34277](https://cve.now/CVE-2022-34277.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34276](https://cve.now/CVE-2022-34276.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34275](https://cve.now/CVE-2022-34275.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34274](https://cve.now/CVE-2022-34274.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34273](https://cve.now/CVE-2022-34273.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-34272](https://cve.now/CVE-2022-34272.md): A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). (no CVSS, Siemens PADS Standard/Plus Viewer)
- [CVE-2022-33736](https://cve.now/CVE-2022-33736.md): A vulnerability has been identified in Opcenter Quality V13.1 (All versions \< V13.1.20220624), Opcenter Quality V13.2 (All versions \< V13.2. (no CVSS, Siemens Opcenter Quality)
- [CVE-2022-33138](https://cve.now/CVE-2022-33138.md): A vulnerability has been identified in SIMATIC MV540 H (All versions \< V3.3), SIMATIC MV540 S (All versions \< V3.3), SIMATIC MV550 H (All ve (no CVSS, Siemens SIMATIC MV540 H · Siemens SIMATIC MV540 S +4)
- [CVE-2022-33137](https://cve.now/CVE-2022-33137.md): A vulnerability has been identified in SIMATIC MV540 H (All versions \< V3.3), SIMATIC MV540 S (All versions \< V3.3), SIMATIC MV550 H (All ve (no CVSS, Siemens SIMATIC MV540 H · Siemens SIMATIC MV540 S +4)
- [CVE-2022-31257](https://cve.now/CVE-2022-31257.md): A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions \< V7.23.31), Mendix Applications using Mendix 8 (All (no CVSS, Siemens Mendix Applications using Mendix)
- [CVE-2022-30938](https://cve.now/CVE-2022-30938.md): A vulnerability has been identified in EN100 Ethernet module DNP3 IP variant (All versions), EN100 Ethernet module IEC 104 variant (All vers (no CVSS, Siemens EN100 Ethernet module DNP3 IP variant · Siemens… +3)
- [CVE-2022-29884](https://cve.now/CVE-2022-29884.md): A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions \< CPC80 V16.30), CP-8000 MASTER MODULE WITH I/ (no CVSS, Siemens CP-8000 MASTER MODULE WITH I/O -25/+70°C · Sieme… +2)
- [CVE-2022-29560](https://cve.now/CVE-2022-29560.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< 2.15.1), RUGGEDCOM ROX MX5000RE (All versions \< 2.15.1), RUGGEDC (no CVSS, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2022-26649](https://cve.now/CVE-2022-26649.md): A vulnerability has been identified in SCALANCE X200-4P IRT (All versions \< V5.5.2), SCALANCE X201-3P IRT (All versions \< V5.5.2), SCALANCE (CVSS 9.6, Siemens SCALANCE X200-4P IRT · Siemens SCALANCE X201-3P… +23)
- [CVE-2022-26648](https://cve.now/CVE-2022-26648.md): A vulnerability has been identified in SCALANCE X200-4P IRT (All versions \< V5.5.2), SCALANCE X201-3P IRT (All versions \< V5.5.2), SCALANCE (CVSS 8.2, Siemens SCALANCE X200-4P IRT · Siemens SCALANCE X201-3P… +23)
- [CVE-2022-26647](https://cve.now/CVE-2022-26647.md): A vulnerability has been identified in SCALANCE X200-4P IRT (All versions \< V5.5.2), SCALANCE X201-3P IRT (All versions \< V5.5.2), SCALANCE (CVSS 8.8, Siemens SCALANCE X200-4P IRT · Siemens SCALANCE X201-3P… +23)
- [CVE-2021-44222](https://cve.now/CVE-2021-44222.md): A vulnerability has been identified in SIMATIC eaSie Core Package (All versions \< V22.00). (no CVSS, Siemens SIMATIC eaSie Core Package)
- [CVE-2021-44221](https://cve.now/CVE-2021-44221.md): A vulnerability has been identified in SIMATIC eaSie Core Package (All versions \< V22.00). (no CVSS, Siemens SIMATIC eaSie Core Package)
- [CVE-2022-22682](https://cve.now/CVE-2022-22682.md): Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Event Management in Synology Calendar (CVSS 6.5, Synology Calendar)
- [CVE-2022-35648](https://cve.now/CVE-2022-35648.md): Nautilus treadmills T616 S/N 100672PRO21140001 through 100672PRO21171980 and T618 S/N 100647PRO21130111 through 100647PRO21183960 with softw (CVSS 2.6)
- [CVE-2022-29187](https://cve.now/CVE-2022-29187.md): Bypass of safe.directory protections in Git (CVSS 7.8, git)
- [CVE-2022-29901](https://cve.now/CVE-2022-29901.md): Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed) (CVSS 5.6, Intel Microprocessors)
- [CVE-2022-34821](https://cve.now/CVE-2022-34821.md): A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2), (CVSS 7.6, Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +37)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-07-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.