# CVEs published 2022-08-05

169 CVEs were published on August 5, 2022: 34 critical, 24 high. Days are UTC.

- [CVE-2022-32543](https://cve.now/CVE-2022-32543.md): An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. (CVSS 7.3, ESTsoft Alyac)
- [CVE-2022-29886](https://cve.now/CVE-2022-29886.md): An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. (CVSS 7.3, ESTsoft Alyac)
- [CVE-2022-29465](https://cve.now/CVE-2022-29465.md): An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0. (CVSS 8.1, Accusoft ImageGear)
- [CVE-2022-28665](https://cve.now/CVE-2022-28665.md): A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. (CVSS 5.3, FreshTomato)
- [CVE-2022-28664](https://cve.now/CVE-2022-28664.md): A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. (CVSS 5.3, FreshTomato)
- [CVE-2022-27660](https://cve.now/CVE-2022-27660.md): A denial of service vulnerability exists in the confctl\_set\_guest\_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.3, TCL LinkHub Mesh Wifi)
- [CVE-2022-27633](https://cve.now/CVE-2022-27633.md): An information disclosure vulnerability exists in the confctl\_get\_guest\_wlan functionality of TCL LinkHub Mesh Wifi MS1G\_00\_01.00\_14. (CVSS 6.5, TCL LinkHub Mesh Wifi)
- [CVE-2022-27631](https://cve.now/CVE-2022-27631.md): A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. (CVSS 5.3, DD-WRT)
- [CVE-2022-27630](https://cve.now/CVE-2022-27630.md): An information disclosure vulnerability exists in the confctl\_get\_master\_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 6.5, TCL LinkHub Mesh Wifi)
- [CVE-2022-27185](https://cve.now/CVE-2022-27185.md): A denial of service vulnerability exists in the confctl\_set\_master\_wlan functionality of TCL LinkHub Mesh Wifi MS1G\_00\_01.00\_14. (CVSS 9.3, TCL LinkHub Mesh Wifi)
- [CVE-2022-27178](https://cve.now/CVE-2022-27178.md): A denial of service vulnerability exists in the confctl\_set\_wan\_cfg functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-26376](https://cve.now/CVE-2022-26376.md): A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386\_48706 and Asuswrt-Merlin New Ge (CVSS 5.3, Asuswrt-Merlin New Gen)
- [CVE-2022-26346](https://cve.now/CVE-2022-26346.md): A denial of service vulnerability exists in the ucloud\_del\_node functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-26342](https://cve.now/CVE-2022-26342.md): A buffer overflow vulnerability exists in the confsrv ucloud\_set\_node\_location functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-26009](https://cve.now/CVE-2022-26009.md): A stack-based buffer overflow vulnerability exists in the confsrv ucloud\_set\_node\_location functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_0 (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-25996](https://cve.now/CVE-2022-25996.md): A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-24029](https://cve.now/CVE-2022-24029.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24028](https://cve.now/CVE-2022-24028.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24027](https://cve.now/CVE-2022-24027.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24026](https://cve.now/CVE-2022-24026.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24025](https://cve.now/CVE-2022-24025.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24024](https://cve.now/CVE-2022-24024.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24023](https://cve.now/CVE-2022-24023.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24022](https://cve.now/CVE-2022-24022.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24021](https://cve.now/CVE-2022-24021.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24020](https://cve.now/CVE-2022-24020.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24019](https://cve.now/CVE-2022-24019.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24018](https://cve.now/CVE-2022-24018.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24017](https://cve.now/CVE-2022-24017.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24016](https://cve.now/CVE-2022-24016.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24015](https://cve.now/CVE-2022-24015.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24014](https://cve.now/CVE-2022-24014.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24013](https://cve.now/CVE-2022-24013.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24012](https://cve.now/CVE-2022-24012.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24011](https://cve.now/CVE-2022-24011.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24010](https://cve.now/CVE-2022-24010.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24009](https://cve.now/CVE-2022-24009.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24008](https://cve.now/CVE-2022-24008.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24007](https://cve.now/CVE-2022-24007.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24006](https://cve.now/CVE-2022-24006.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-24005](https://cve.now/CVE-2022-24005.md): A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-23919](https://cve.now/CVE-2022-23919.md): A stack-based buffer overflow vulnerability exists in the confsrv set\_mf\_rule functionality of TCL LinkHub Mesh Wifi MS1G\_00\_01.00\_14. (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-23918](https://cve.now/CVE-2022-23918.md): A stack-based buffer overflow vulnerability exists in the confsrv set\_mf\_rule functionality of TCL LinkHub Mesh Wifi MS1G\_00\_01.00\_14. (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-23399](https://cve.now/CVE-2022-23399.md): A stack-based buffer overflow vulnerability exists in the confsrv set\_port\_fwd\_rule functionality of TCL LinkHub Mesh Wifi MS1G\_00\_01.00\_14. (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-23103](https://cve.now/CVE-2022-23103.md): A stack-based buffer overflow vulnerability exists in the confsrv confctl\_set\_app\_language functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_0 (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-22144](https://cve.now/CVE-2022-22144.md): A hard-coded password vulnerability exists in the libcommonprod.so prod\_change\_root\_passwd functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_0 (CVSS 7.5, TCL LinkHub Mesh Wifi)
- [CVE-2022-22140](https://cve.now/CVE-2022-22140.md): An os command injection vulnerability exists in the confsrv ucloud\_add\_node functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-21201](https://cve.now/CVE-2022-21201.md): A stack-based buffer overflow vulnerability exists in the confers ucloud\_add\_node\_new functionality of TCL LinkHub Mesh Wi-Fi MS1G\_00\_01.00\_ (CVSS 8.8, TCL LinkHub Mesh Wifi)
- [CVE-2022-21178](https://cve.now/CVE-2022-21178.md): An os command injection vulnerability exists in the confsrv ucloud\_add\_new\_node functionality of TCL LinkHub Mesh Wifi MS1G\_00\_01.00\_14. (CVSS 9.6, TCL LinkHub Mesh Wifi)
- [CVE-2022-31618](https://cve.now/CVE-2022-31618.md): NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null pointer, which may l (CVSS 5.5, NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming)
- [CVE-2022-37450](https://cve.now/CVE-2022-37450.md): Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation (no CVSS, github.com/ethereum/go-ethereum)
- [CVE-2022-31614](https://cve.now/CVE-2022-31614.md): NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources. (CVSS 7.0, NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming)
- [CVE-2022-31609](https://cve.now/CVE-2022-31609.md): NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to allocate resources f (CVSS 7.8, NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming)
- [CVE-2022-2685](https://cve.now/CVE-2022-2685.md): SourceCodester Interview Management System addQuestion.php cross site scripting (CVSS 3.5, SourceCodester Interview Management System)
- [CVE-2022-2684](https://cve.now/CVE-2022-2684.md): SourceCodester Apartment Visitor Management System manage-apartment.php cross site scripting (CVSS 3.5, SourceCodester Apartment Visitor Management System)
- [CVE-2022-2683](https://cve.now/CVE-2022-2683.md): SourceCodester Simple Food Ordering System login.php cross site scripting (CVSS 3.5, SourceCodester Simple Food Ordering System)
- [CVE-2022-2682](https://cve.now/CVE-2022-2682.md): SourceCodester Alphaware Simple E-Commerce System stockin.php cross site scripting (CVSS 3.5, SourceCodester Alphaware Simple E-Commerce System)
- [CVE-2022-2681](https://cve.now/CVE-2022-2681.md): SourceCodester Online Student Admission System Student User Page edit-profile.php cross site scripting (CVSS 3.5, SourceCodester Online Student Admission System)
- [CVE-2022-2680](https://cve.now/CVE-2022-2680.md): SourceCodester Church Management System login.php sql injection (CVSS 6.3, SourceCodester Church Management System)
- [CVE-2022-2679](https://cve.now/CVE-2022-2679.md): SourceCodester Interview Management System viewReport.php sql injection (CVSS 6.3, SourceCodester Interview Management System)
- [CVE-2022-2678](https://cve.now/CVE-2022-2678.md): SourceCodester Alphaware Simple E-Commerce System Background Management Page admin\_feature.php unrestricted upload (CVSS 6.3, SourceCodester Alphaware Simple E-Commerce System)
- [CVE-2022-2677](https://cve.now/CVE-2022-2677.md): SourceCodester Apartment Visitor Management System index.php sql injection (CVSS 6.3, SourceCodester Apartment Visitor Management System)
- [CVE-2022-2676](https://cve.now/CVE-2022-2676.md): SourceCodester Electronic Medical Records System POST Request sql injection (CVSS 6.3, SourceCodester Electronic Medical Records System)
- [CVE-2022-35163](https://cve.now/CVE-2022-35163.md): Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the U\_NAME parameter at /cat (no CVSS)
- [CVE-2022-35162](https://cve.now/CVE-2022-35162.md): Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the CATEGORY parameter at /c (no CVSS)
- [CVE-2022-2675](https://cve.now/CVE-2022-2675.md): Unitree Go 1 "Robot Dog" Unauthenticated Remote Power Down (no CVSS, Unitree Go)
- [CVE-2022-27535](https://cve.now/CVE-2022-27535.md): Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Servic (no CVSS, Kaspersky VPN Secure Connection for Windows)
- [CVE-2021-28511](https://cve.now/CVE-2021-28511.md): This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this vulnerability is that the security ACL drop rule might be bypassed if a NAT ACL rule filter with permit action matches t ... (CVSS 5.8, Arista Networks EOS)
- [CVE-2022-29071](https://cve.now/CVE-2022-29071.md): This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vu ... (CVSS 4.0, Arista Networks CloudVision Portal)
- [CVE-2022-28880](https://cve.now/CVE-2022-28880.md): Denial-of-Service (DoS) Vulnerability (CVSS 4.3, All F-Secure and WithSecure Endpoint Protection products fo…)
- [CVE-2022-2668](https://cve.now/CVE-2022-2668.md): An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD\_SCRIPTS (no CVSS, keycloak · org.keycloak:keycloak-parent)
- [CVE-2022-37398](https://cve.now/CVE-2022-37398.md): A stack-based buffer overflow vulnerability was found on ADM (CVSS 7.1, ASUSTOR ADM)
- [CVE-2021-46678](https://cve.now/CVE-2021-46678.md): Vulnerability XSS in service form name field (CVSS 4.0, Artica PFMS Pandora FMS)
- [CVE-2021-46680](https://cve.now/CVE-2021-46680.md): Vulnerability XSS in module form name field (CVSS 4.0, Artica PFMS Pandora FMS)
- [CVE-2021-46677](https://cve.now/CVE-2021-46677.md): Vulnerability XSS in Event filter name field (CVSS 4.0, Artica PFMS Pandora FMS)
- [CVE-2021-46676](https://cve.now/CVE-2021-46676.md): Vulnerability XSS in Transaction Map name field (CVSS 4.0, Artica PFMS Pandora FMS)
- [CVE-2021-46679](https://cve.now/CVE-2021-46679.md): Vulnerability XSS in service elements (CVSS 4.0, Artica PFMS Pandora FMS)
- [CVE-2021-46681](https://cve.now/CVE-2021-46681.md): Vulnerability XSS in module mass operation name field (CVSS 4.0, Artica PFMS Pandora FMS)
- [CVE-2022-1704](https://cve.now/CVE-2022-1704.md): Inductive Automation Ignition (CVSS 7.6, Inductive Automation Ignition)
- [CVE-2022-34769](https://cve.now/CVE-2022-34769.md): Michlol - rashim web interface Insecure direct object references (IDOR) (CVSS 6.3, Michlol - rashim web)
- [CVE-2022-34768](https://cve.now/CVE-2022-34768.md): Synel - eHarmony Stored XSS (CVSS 6.5, Synel eHarmony)
- [CVE-2021-27798](https://cve.now/CVE-2021-27798.md): privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.x (no CVSS, Brocade Fabric OS)
- [CVE-2022-2053](https://cve.now/CVE-2022-2053.md): When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit im (no CVSS, Undertow · io.undertow:undertow-core)
- [CVE-2022-22299](https://cve.now/CVE-2022-22299.md): A format string vulnerability \[CWE-134\] in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 thro (CVSS 7.8, Fortinet FortiADC, FortiProxy, FortiMail, FortiOS)
- [CVE-2016-3098](https://cve.now/CVE-2016-3098.md): Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autoriz (no CVSS, administrate)
- [CVE-2020-1754](https://cve.now/CVE-2020-1754.md): In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not (CVSS 4.3, Moodle)
- [CVE-2020-1691](https://cve.now/CVE-2020-1691.md): In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site script (no CVSS, Moodle · moodle/moodle)
- [CVE-2022-33720](https://cve.now/CVE-2022-33720.md): Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chrome locked by AppLock (CVSS 2.4, Samsung Mobile Devices)
- [CVE-2022-33730](https://cve.now/CVE-2022-33730.md): Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical a (CVSS 6.8, Samsung Mobile Devices)
- [CVE-2022-33719](https://cve.now/CVE-2022-33719.md): Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow. (CVSS 8.6, Samsung Mobile Devices)
- [CVE-2022-33724](https://cve.now/CVE-2022-33724.md): Exposure of Sensitive Information in Samsung Dialer application?prior to SMR Aug-2022 Release 1 allows local attackers to access ICCID via l (CVSS 3.3, Samsung Mobile Devices)
- [CVE-2022-36833](https://cve.now/CVE-2022-36833.md): Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 (CVSS 7.3, Samsung Mobile Game Optimizing Service)
- [CVE-2022-33726](https://cve.now/CVE-2022-33726.md): Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity. (CVSS 3.3, Samsung Mobile Devices)
- [CVE-2022-33722](https://cve.now/CVE-2022-33722.md): Implicit Intent hijacking vulnerability in Smart View prior to SMR Aug-2022 Release 1 allows attacker to access connected device MAC address (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-36839](https://cve.now/CVE-2022-36839.md): SQL injection vulnerability via IAPService in Samsung Checkout prior to version 5.0.53.1 allows attackers to access IAP information. (CVSS 5.9, Samsung Mobile Samsung Checkout)
- [CVE-2022-33721](https://cve.now/CVE-2022-33721.md): A vulnerability using PendingIntent in DeX for PC prior to SMR Aug-2022 Release 1 allows attackers to access files with system privilege. (CVSS 4.4, Samsung Mobile Devices)
- [CVE-2022-33732](https://cve.now/CVE-2022-33732.md): Improper access control vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows local attackers to scan and connect to PC (CVSS 6.2, Samsung Mobile Devices)
- [CVE-2022-36832](https://cve.now/CVE-2022-36832.md): Improper access control vulnerability in WebApp in Cameralyzer prior to versions 3.2.22, 3.3.22, 3.4.22 and 3.5.51 allows attackers to acces (CVSS 4.0, Samsung Mobile Cameralyzer)
- [CVE-2022-33731](https://cve.now/CVE-2022-33731.md): Improper access control vulnerability in DesktopSystemUI prior to SMR Aug-2022 Release 1 allows attackers to enable and disable arbitrary co (CVSS 5.1, Samsung Mobile Devices)
- [CVE-2022-36840](https://cve.now/CVE-2022-36840.md): DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to execute arbitrary code. (CVSS 4.5, Samsung Mobile Samsung Update Setup)
- [CVE-2022-36834](https://cve.now/CVE-2022-36834.md): Exposure of Sensitive Information vulnerability in Game Launcher prior to version 6.0.07 allows local attacker to access app data with user (CVSS 3.3, Samsung Mobile Game Launcher)
- [CVE-2022-33714](https://cve.now/CVE-2022-33714.md): Improper access control vulnerability in SemWifiApBroadcastReceiver prior to SMR Aug-2022 Release 1 allows attacker to reset a setting value (CVSS 6.2, Samsung Mobile Devices)
- [CVE-2022-33718](https://cve.now/CVE-2022-33718.md): An improper access control vulnerability in Wi-Fi Service prior to SMR AUG-2022 Release 1 allows untrusted applications to manipulate the li (CVSS 6.2, Samsung Mobile Devices)
- [CVE-2022-33715](https://cve.now/CVE-2022-33715.md): Improper access control and path traversal vulnerability in LauncherProvider prior to SMR Aug-2022 Release 1 allow local attacker to access (CVSS 5.3, Samsung Mobile Devices)
- [CVE-2022-36836](https://cve.now/CVE-2022-36836.md): Unprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to read connection state without permission. (CVSS 6.2, Samsung Mobile Charm by Samsung)
- [CVE-2022-36830](https://cve.now/CVE-2022-36830.md): PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access file (CVSS 6.2, Samsung Mobile Charm by Samsung)
- [CVE-2022-36829](https://cve.now/CVE-2022-36829.md): PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files with (CVSS 6.2, Samsung Mobile Charm by Samsung)
- [CVE-2022-33734](https://cve.now/CVE-2022-33734.md): Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connec (CVSS 6.2, Samsung Mobile Charm by Samsung)
- [CVE-2022-33733](https://cve.now/CVE-2022-33733.md): Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connectio (CVSS 6.2, Samsung Mobile Charm by Samsung)
- [CVE-2022-36837](https://cve.now/CVE-2022-36837.md): Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to get sensitive informat (CVSS 6.2, Samsung Mobile Samsung email)
- [CVE-2022-36838](https://cve.now/CVE-2022-36838.md): Implicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows attacker to get sensitive information. (CVSS 4.0, Samsung Mobile Galaxy Wearable)
- [CVE-2022-33725](https://cve.now/CVE-2022-33725.md): A vulnerability using PendingIntent in Knox VPN prior to SMR Aug-2022 Release 1 allows attackers to access content providers with system pri (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-33717](https://cve.now/CVE-2022-33717.md): A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read out of bound memory. (CVSS 4.4, Samsung Mobile Devices)
- [CVE-2022-33716](https://cve.now/CVE-2022-33716.md): An absence of variable initialization in ICCC TA prior to SMR Aug-2022 Release 1 allows local attacker to read uninitialized memory. (CVSS 2.3, Samsung Mobile Devices)
- [CVE-2022-36831](https://cve.now/CVE-2022-36831.md): Path traversal vulnerability in UriFileUtils of Samsung Notes prior to version 4.3.14.39 allows attacker to access some file as Samsung Note (CVSS 6.2, Samsung Mobile Samsung notes)
- [CVE-2022-33728](https://cve.now/CVE-2022-33728.md): Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress via (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-33729](https://cve.now/CVE-2022-33729.md): Improper restriction of broadcasting Intent in ConfirmConnectActivity of?NFC prior to SMR Aug-2022 Release 1 leaks MAC address of the connec (CVSS 5.9, Samsung Mobile Devices)
- [CVE-2022-33727](https://cve.now/CVE-2022-33727.md): A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwa (CVSS 4.8, Samsung Mobile Devices)
- [CVE-2022-33723](https://cve.now/CVE-2022-33723.md): A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwant (CVSS 4.8, Samsung Mobile Devices)
- [CVE-2022-36835](https://cve.now/CVE-2022-36835.md): Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files. (CVSS 3.3, Samsung Mobile Samsung Internet Browser)
- [CVE-2022-2095](https://cve.now/CVE-2022-2095.md): An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions starting from 15.1 be (CVSS 4.3, GitLab)
- [CVE-2022-2459](https://cve.now/CVE-2022-2459.md): An issue has been discovered in GitLab EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions (CVSS 2.7, GitLab)
- [CVE-2022-2500](https://cve.now/CVE-2022-2500.md): A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior (CVSS 4.4, GitLab)
- [CVE-2022-2501](https://cve.now/CVE-2022-2501.md): An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2 (CVSS 5.9, GitLab)
- [CVE-2022-2534](https://cve.now/CVE-2022-2534.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before (CVSS 2.2, GitLab)
- [CVE-2022-2303](https://cve.now/CVE-2022-2303.md): An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versio (CVSS 4.3, GitLab)
- [CVE-2022-2326](https://cve.now/CVE-2022-2326.md): An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versio (CVSS 6.4, GitLab)
- [CVE-2022-2307](https://cve.now/CVE-2022-2307.md): A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before (CVSS 3.5, GitLab)
- [CVE-2022-2498](https://cve.now/CVE-2022-2498.md): An issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15 (CVSS 6.4, GitLab)
- [CVE-2022-2456](https://cve.now/CVE-2022-2456.md): An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versio (CVSS 4.9, GitLab)
- [CVE-2022-2417](https://cve.now/CVE-2022-2417.md): Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 al (CVSS 6.2, GitLab)
- [CVE-2022-2539](https://cve.now/CVE-2022-2539.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior (CVSS 5.3, GitLab)
- [CVE-2022-2512](https://cve.now/CVE-2022-2512.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions starting from 15.1 before (CVSS 6.5, GitLab)
- [CVE-2022-2499](https://cve.now/CVE-2022-2499.md): An issue has been discovered in GitLab EE affecting all versions starting from 13.10 before 15.0.5, all versions starting from 15.1 before 1 (CVSS 3.5, GitLab)
- [CVE-2022-2497](https://cve.now/CVE-2022-2497.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions starting from 15.1 before (CVSS 8.5, GitLab)
- [CVE-2022-2531](https://cve.now/CVE-2022-2531.md): An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15 (CVSS 5.3, GitLab)
- [CVE-2022-36284](https://cve.now/CVE-2022-36284.md): WordPress Affiliate For WooCommerce premium plugin \<= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change (CVSS 6.4, StoreApps Affiliate For WooCommerce)
- [CVE-2021-36861](https://cve.now/CVE-2021-36861.md): WordPress Rich Reviews by Starfish plugin \<= 1.9.14 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Starfish Reviews Rich Reviews by Starfish)
- [CVE-2022-33201](https://cve.now/CVE-2022-33201.md): WordPress MailerLite – Signup forms (official) plugin \<= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 6.3, MailerLite)
- [CVE-2022-36296](https://cve.now/CVE-2022-36296.md): WordPress ActiveDEMAND plugin \<= 0.2.27 - Broken Authentication vulnerability (CVSS 6.5, JumpDEMAND ActiveDEMAND)
- [CVE-2022-25649](https://cve.now/CVE-2022-25649.md): WordPress Affiliate For WooCommerce premium plugin \<= 4.7.0 - Multiple Improper Access Control vulnerabilities (CVSS 5.0, StoreApps Affiliate For WooCommerce)
- [CVE-2022-31657](https://cve.now/CVE-2022-31657.md): VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31656](https://cve.now/CVE-2022-31656.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31658](https://cve.now/CVE-2022-31658.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31661](https://cve.now/CVE-2022-31661.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31659](https://cve.now/CVE-2022-31659.md): VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31663](https://cve.now/CVE-2022-31663.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31664](https://cve.now/CVE-2022-31664.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31665](https://cve.now/CVE-2022-31665.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31660](https://cve.now/CVE-2022-31660.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability. (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-31662](https://cve.now/CVE-2022-31662.md): VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. (no CVSS, VMware Workspace ONE Access, Access Connector, Identity Man…)
- [CVE-2022-35936](https://cve.now/CVE-2022-35936.md): Ethermint DoS through Unintended Contract Selfdestruct (CVSS 8.2, evmos ethermint · github.com/crypto-org-chain/cronos +9)
- [CVE-2022-2674](https://cve.now/CVE-2022-2674.md): SourceCodester Best Fee Management System admin\_class.php login sql injection (CVSS 7.3, SourceCodester Best Fee Management System)
- [CVE-2022-2673](https://cve.now/CVE-2022-2673.md): Rigatur Online Booking and Hotel Management System POST Request login.php sql injection (CVSS 6.3, Rigatur Online Booking and Hotel Management System)
- [CVE-2022-2672](https://cve.now/CVE-2022-2672.md): SourceCodester Garage Management System createUser.php sql injection (CVSS 6.3, SourceCodester Garage Management System)
- [CVE-2022-2671](https://cve.now/CVE-2022-2671.md): SourceCodester Garage Management System removeUser.php sql injection (CVSS 6.3, SourceCodester Garage Management System)
- [CVE-2022-2667](https://cve.now/CVE-2022-2667.md): SourceCodester Loan Management System delete\_lplan.php sql injection (CVSS 6.3, SourceCodester Loan Management System)
- [CVE-2022-2665](https://cve.now/CVE-2022-2665.md): SourceCodester Simple E-Learning System classroom.php sql injection (CVSS 6.3, SourceCodester Simple E-Learning System)
- [CVE-2022-2664](https://cve.now/CVE-2022-2664.md): Private Cloud Management Platform POST Request global\_config\_query improper authentication (CVSS 7.3, Private Cloud Management Platform)
- [CVE-2022-2636](https://cve.now/CVE-2022-2636.md): Code Injection in hestiacp/hestiacp (CVSS 8.5, hestiacp/hestiacp)
- [CVE-2022-2626](https://cve.now/CVE-2022-2626.md): Incorrect Privilege Assignment in hestiacp/hestiacp (CVSS 9.1, hestiacp/hestiacp)
- [CVE-2022-37431](https://cve.now/CVE-2022-37431.md): A Reflected Cross-site scripting (XSS) issue was discovered in dotCMS Core through 22.06. (no CVSS)
- [CVE-2022-21186](https://cve.now/CVE-2022-21186.md): Arbitrary Command Injection (CVSS 9.8, @acrontum/filesystem-template)
- [CVE-2022-37416](https://cve.now/CVE-2022-37416.md): Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2\_mc\_fullx\_fully\_8x8. (no CVSS)
- [CVE-2022-37415](https://cve.now/CVE-2022-37415.md): The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008. (no CVSS)
- [CVE-2022-1012](https://cve.now/CVE-2022-1012.md): A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. (no CVSS, Kernel)
- [CVE-2022-1158](https://cve.now/CVE-2022-1158.md): A flaw was found in KVM. (no CVSS, kernel)
- [CVE-2022-1973](https://cve.now/CVE-2022-1973.md): A use-after-free flaw was found in the Linux kernel in log\_replay in fs/ntfs3/fslog.c in the NTFS journal. (no CVSS, kernel)
- [CVE-2022-37434](https://cve.now/CVE-2022-37434.md): zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-08-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.