CVEs published August 5, 2022
169 CVEs were published on August 5, 2022: 34 critical, 24 high.
- Published
- 169
- Critical
- 34
- High
- 24
- Medium
- 70
- Low
- 15
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 57
Most affected products
- TCL LinkHub Mesh Wifi
- 42
- Samsung Mobile Devices
- 19
- GitLab
- 16
- VMware Workspace ONE Access, Identity Manager and vRealize…
- 9
- Artica PFMS Pandora FMS
- 6
- Samsung Mobile Charm by Samsung
- 5
- NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming
- 3
- ESTsoft Alyac
- 2
- FreshTomato
- 2
- hestiacp/hestiacp
- 2
Critical 34
- CVE-2022-27660A denial of service vulnerability exists in the confctl_set_guest_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-27185A denial of service vulnerability exists in the confctl_set_master_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-27178A denial of service vulnerability exists in the confctl_set_wan_cfg functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-26346A denial of service vulnerability exists in the ucloud_del_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24029A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24028A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24027A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24026A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24025A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24024A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24023A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24022A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24021A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24020A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24019A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24018A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24017A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24016A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24015A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24014A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24013A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24012A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24011A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24010A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24009A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24008A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24007A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24006A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24005A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-22140An os command injection vulnerability exists in the confsrv ucloud_add_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-21178An os command injection vulnerability exists in the confsrv ucloud_add_new_node functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-2626Incorrect Privilege Assignment in hestiacp/hestiacphestiacp/hestiacp
- CVE-2022-21186Arbitrary Command Injection@acrontum/filesystem-template
- CVE-2022-37434zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field.
High 24
- CVE-2022-32543An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files.ESTsoft Alyac
- CVE-2022-29886An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files.ESTsoft Alyac
- CVE-2022-29465An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0.Accusoft ImageGear
- CVE-2022-26342A buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-26009A stack-based buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_0TCL LinkHub Mesh Wifi
- CVE-2022-25996A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-23919A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-23918A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-23399A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-23103A stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_0TCL LinkHub Mesh Wifi
- CVE-2022-22144A hard-coded password vulnerability exists in the libcommonprod.so prod_change_root_passwd functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_0TCL LinkHub Mesh Wifi
- CVE-2022-21201A stack-based buffer overflow vulnerability exists in the confers ucloud_add_node_new functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_TCL LinkHub Mesh Wifi
- CVE-2022-31614NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources.NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming
- CVE-2022-31609NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to allocate resources fNVIDIA Virtual GPU Software and NVIDIA Cloud Gaming
- CVE-2022-37398A stack-based buffer overflow vulnerability was found on ADMASUSTOR ADM
- CVE-2022-1704Inductive Automation IgnitionInductive Automation Ignition
- CVE-2022-22299A format string vulnerability [CWE-134] in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 throFortinet FortiADC, FortiProxy, FortiMail, FortiOS
- CVE-2022-33719Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow.Samsung Mobile Devices
- CVE-2022-36833Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 Samsung Mobile Game Optimizing Service
- CVE-2022-2497An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions starting from 15.1 beforeGitLab
- CVE-2022-35936Ethermint DoS through Unintended Contract Selfdestructevmos ethermint · github.com/crypto-org-chain/cronos +9
- CVE-2022-2674SourceCodester Best Fee Management System admin_class.php login sql injectionSourceCodester Best Fee Management System
- CVE-2022-2664Private Cloud Management Platform POST Request global_config_query improper authenticationPrivate Cloud Management Platform
- CVE-2022-2636Code Injection in hestiacp/hestiacphestiacp/hestiacp
Medium, low and unrated 111
- CVE-2022-28665A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1.FreshTomato
- CVE-2022-28664A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1.FreshTomato
- CVE-2022-27633An information disclosure vulnerability exists in the confctl_get_guest_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-27631A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599.DD-WRT
- CVE-2022-27630An information disclosure vulnerability exists in the confctl_get_master_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-26376A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New GeAsuswrt-Merlin New Gen
- CVE-2022-31618NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null pointer, which may lNVIDIA Virtual GPU Software and NVIDIA Cloud Gaming
- CVE-2022-37450Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulationgithub.com/ethereum/go-ethereum
- CVE-2022-2685SourceCodester Interview Management System addQuestion.php cross site scriptingSourceCodester Interview Management System
- CVE-2022-2684SourceCodester Apartment Visitor Management System manage-apartment.php cross site scriptingSourceCodester Apartment Visitor Management System
- CVE-2022-2683SourceCodester Simple Food Ordering System login.php cross site scriptingSourceCodester Simple Food Ordering System
- CVE-2022-2682SourceCodester Alphaware Simple E-Commerce System stockin.php cross site scriptingSourceCodester Alphaware Simple E-Commerce System
- CVE-2022-2681SourceCodester Online Student Admission System Student User Page edit-profile.php cross site scriptingSourceCodester Online Student Admission System
- CVE-2022-2680SourceCodester Church Management System login.php sql injectionSourceCodester Church Management System
- CVE-2022-2679SourceCodester Interview Management System viewReport.php sql injectionSourceCodester Interview Management System
- CVE-2022-2678SourceCodester Alphaware Simple E-Commerce System Background Management Page admin_feature.php unrestricted uploadSourceCodester Alphaware Simple E-Commerce System
- CVE-2022-2677SourceCodester Apartment Visitor Management System index.php sql injectionSourceCodester Apartment Visitor Management System
- CVE-2022-2676SourceCodester Electronic Medical Records System POST Request sql injectionSourceCodester Electronic Medical Records System
- CVE-2022-35163Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the U_NAME parameter at /cat
- CVE-2022-35162Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the CATEGORY parameter at /c
- CVE-2022-2675Unitree Go 1 "Robot Dog" Unauthenticated Remote Power DownUnitree Go
- CVE-2022-27535Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All ServicKaspersky VPN Secure Connection for Windows
- CVE-2021-28511This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this vulnerability is that the security ACL drop rule might be bypassed if a NAT ACL rule filter with permit action matches t ...Arista Networks EOS
- CVE-2022-29071This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vu ...Arista Networks CloudVision Portal
- CVE-2022-28880Denial-of-Service (DoS) VulnerabilityAll F-Secure and WithSecure Endpoint Protection products fo…
- CVE-2022-2668An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS keycloak · org.keycloak:keycloak-parent
- CVE-2021-46678Vulnerability XSS in service form name fieldArtica PFMS Pandora FMS
- CVE-2021-46680Vulnerability XSS in module form name fieldArtica PFMS Pandora FMS
- CVE-2021-46677Vulnerability XSS in Event filter name fieldArtica PFMS Pandora FMS
- CVE-2021-46676Vulnerability XSS in Transaction Map name fieldArtica PFMS Pandora FMS
- CVE-2021-46679Vulnerability XSS in service elementsArtica PFMS Pandora FMS
- CVE-2021-46681Vulnerability XSS in module mass operation name fieldArtica PFMS Pandora FMS
- CVE-2022-34769Michlol - rashim web interface Insecure direct object references (IDOR)Michlol - rashim web
- CVE-2022-34768Synel - eHarmony Stored XSSSynel eHarmony
- CVE-2021-27798privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.xBrocade Fabric OS
- CVE-2022-2053When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit imUndertow · io.undertow:undertow-core
- CVE-2016-3098Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorizadministrate
- CVE-2020-1754In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not Moodle
- CVE-2020-1691In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site scriptMoodle · moodle/moodle
- CVE-2022-33720Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chrome locked by AppLockSamsung Mobile Devices
- CVE-2022-33730Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical aSamsung Mobile Devices
- CVE-2022-33724Exposure of Sensitive Information in Samsung Dialer application?prior to SMR Aug-2022 Release 1 allows local attackers to access ICCID via lSamsung Mobile Devices
- CVE-2022-33726Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity.Samsung Mobile Devices
- CVE-2022-33722Implicit Intent hijacking vulnerability in Smart View prior to SMR Aug-2022 Release 1 allows attacker to access connected device MAC addressSamsung Mobile Devices
- CVE-2022-36839SQL injection vulnerability via IAPService in Samsung Checkout prior to version 5.0.53.1 allows attackers to access IAP information.Samsung Mobile Samsung Checkout
- CVE-2022-33721A vulnerability using PendingIntent in DeX for PC prior to SMR Aug-2022 Release 1 allows attackers to access files with system privilege.Samsung Mobile Devices
- CVE-2022-33732Improper access control vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows local attackers to scan and connect to PCSamsung Mobile Devices
- CVE-2022-36832Improper access control vulnerability in WebApp in Cameralyzer prior to versions 3.2.22, 3.3.22, 3.4.22 and 3.5.51 allows attackers to accesSamsung Mobile Cameralyzer
- CVE-2022-33731Improper access control vulnerability in DesktopSystemUI prior to SMR Aug-2022 Release 1 allows attackers to enable and disable arbitrary coSamsung Mobile Devices
- CVE-2022-36840DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to execute arbitrary code.Samsung Mobile Samsung Update Setup
- CVE-2022-36834Exposure of Sensitive Information vulnerability in Game Launcher prior to version 6.0.07 allows local attacker to access app data with user Samsung Mobile Game Launcher
- CVE-2022-33714Improper access control vulnerability in SemWifiApBroadcastReceiver prior to SMR Aug-2022 Release 1 allows attacker to reset a setting valueSamsung Mobile Devices
- CVE-2022-33718An improper access control vulnerability in Wi-Fi Service prior to SMR AUG-2022 Release 1 allows untrusted applications to manipulate the liSamsung Mobile Devices
- CVE-2022-33715Improper access control and path traversal vulnerability in LauncherProvider prior to SMR Aug-2022 Release 1 allow local attacker to access Samsung Mobile Devices
- CVE-2022-36836Unprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to read connection state without permission.Samsung Mobile Charm by Samsung
- CVE-2022-36830PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access fileSamsung Mobile Charm by Samsung
- CVE-2022-36829PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files withSamsung Mobile Charm by Samsung
- CVE-2022-33734Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connecSamsung Mobile Charm by Samsung
- CVE-2022-33733Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connectioSamsung Mobile Charm by Samsung
- CVE-2022-36837Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to get sensitive informatSamsung Mobile Samsung email
- CVE-2022-36838Implicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows attacker to get sensitive information.Samsung Mobile Galaxy Wearable
- CVE-2022-33725A vulnerability using PendingIntent in Knox VPN prior to SMR Aug-2022 Release 1 allows attackers to access content providers with system priSamsung Mobile Devices
- CVE-2022-33717A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read out of bound memory.Samsung Mobile Devices
- CVE-2022-33716An absence of variable initialization in ICCC TA prior to SMR Aug-2022 Release 1 allows local attacker to read uninitialized memory.Samsung Mobile Devices
- CVE-2022-36831Path traversal vulnerability in UriFileUtils of Samsung Notes prior to version 4.3.14.39 allows attacker to access some file as Samsung NoteSamsung Mobile Samsung notes
- CVE-2022-33728Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress via Samsung Mobile Devices
- CVE-2022-33729Improper restriction of broadcasting Intent in ConfirmConnectActivity of?NFC prior to SMR Aug-2022 Release 1 leaks MAC address of the connecSamsung Mobile Devices
- CVE-2022-33727A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwaSamsung Mobile Devices
- CVE-2022-33723A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwantSamsung Mobile Devices
- CVE-2022-36835Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files.Samsung Mobile Samsung Internet Browser
- CVE-2022-2095An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions starting from 15.1 beGitLab
- CVE-2022-2459An issue has been discovered in GitLab EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions GitLab
- CVE-2022-2500A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior GitLab
- CVE-2022-2501An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2GitLab
- CVE-2022-2534An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before GitLab
- CVE-2022-2303An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versioGitLab
- CVE-2022-2326An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versioGitLab
- CVE-2022-2307A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before GitLab
- CVE-2022-2498An issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15GitLab
- CVE-2022-2456An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versioGitLab
- CVE-2022-2417Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 alGitLab
- CVE-2022-2539An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 priorGitLab
- CVE-2022-2512An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions starting from 15.1 beforeGitLab
- CVE-2022-2499An issue has been discovered in GitLab EE affecting all versions starting from 13.10 before 15.0.5, all versions starting from 15.1 before 1GitLab
- CVE-2022-2531An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15GitLab
- CVE-2022-36284WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email changeStoreApps Affiliate For WooCommerce
- CVE-2021-36861WordPress Rich Reviews by Starfish plugin <= 1.9.14 - Cross-Site Request Forgery (CSRF) vulnerabilityStarfish Reviews Rich Reviews by Starfish
- CVE-2022-33201WordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerabilityMailerLite
- CVE-2022-36296WordPress ActiveDEMAND plugin <= 0.2.27 - Broken Authentication vulnerabilityJumpDEMAND ActiveDEMAND
- CVE-2022-25649WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilitiesStoreApps Affiliate For WooCommerce
- CVE-2022-31657VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31656VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31658VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31661VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31659VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31663VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31664VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31665VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31660VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31662VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability.VMware Workspace ONE Access, Access Connector, Identity Man…
- CVE-2022-2673Rigatur Online Booking and Hotel Management System POST Request login.php sql injectionRigatur Online Booking and Hotel Management System
- CVE-2022-2672SourceCodester Garage Management System createUser.php sql injectionSourceCodester Garage Management System
- CVE-2022-2671SourceCodester Garage Management System removeUser.php sql injectionSourceCodester Garage Management System
- CVE-2022-2667SourceCodester Loan Management System delete_lplan.php sql injectionSourceCodester Loan Management System
- CVE-2022-2665SourceCodester Simple E-Learning System classroom.php sql injectionSourceCodester Simple E-Learning System
- CVE-2022-37431A Reflected Cross-site scripting (XSS) issue was discovered in dotCMS Core through 22.06.
- CVE-2022-37416Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2_mc_fullx_fully_8x8.
- CVE-2022-37415The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008.
- CVE-2022-1012A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size.Kernel
- CVE-2022-1158A flaw was found in KVM.kernel
- CVE-2022-1973A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal.kernel