CVEs published August 9, 2022
206 CVEs were published on August 9, 2022: 7 critical, 76 high. 1 is now in CISA KEV.
- Published
- 206
- Critical
- 7
- High
- 76
- Medium
- 76
- Low
- 2
- Unrated
- 45
- Now in CISA KEV
- 1
- Fix available
- 133
Most affected products
- Microsoft Windows
- 40
- Microsoft Azure Site Recovery VMWare to Azure
- 34
- Android
- 18
- Huawei HarmonyOS · Huawei EMUI +1
- 8
- Microsoft Azure RTOS GUIX Studio
- 8
- openemr/openemr
- 6
- libtar
- 4
- Microsoft Visual Studio
- 4
- VMware vRealize Operations
- 4
- Microsoft Edge
- 3
Critical 7
- CVE-2022-2634Digi ConnectPort X2DDigi ConnectPort X2D
- CVE-2022-35293Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account.SAP SE SAP Enable Now Manager
- CVE-2022-34715Windows Network File System Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-33649Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityMicrosoft Edge
- CVE-2022-30133Windows Point-to-Point Protocol (PPP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-2734Improper Restriction of Rendered UI Layers or Frames in openemr/openemropenemr/openemr
- CVE-2022-2733Cross-site Scripting (XSS) - Reflected in openemr/openemropenemr/openemr
High 76
- CVE-2022-20358In startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected content of content providers due to a missing Android
- CVE-2022-20347In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy.Android
- CVE-2022-20346In updateAudioTrackInfoFromESDS_MPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2022-31673VMware vRealize Operations contains an information disclosure vulnerability.VMware vRealize Operations
- CVE-2022-30580Empty Cmd.Path can trigger unintended binary in os/exec on WindowsGo standard library os/exec · stdlib
- CVE-2022-30630Stack exhaustion in Glob on certain paths in io/fsGo standard library io/fs · stdlib
- CVE-2022-30631Stack exhaustion when reading certain archives in compress/gzipGo standard library compress/gzip · stdlib
- CVE-2022-30633Stack exhaustion when unmarshaling certain documents in encoding/xmlGo standard library encoding/xml · stdlib
- CVE-2022-30635Stack exhaustion when decoding certain messages in encoding/gobGo standard library encoding/gob · stdlib
- CVE-2022-35827Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2022-35290Under certain conditions SAP Authenticator for Android allows an attacker to access information which would otherwise be restricted.SAP SE SAP Authenticator for Android
- CVE-2022-35826Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2022-35825Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2022-35824Azure Site Recovery Remote Code Execution VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35820Windows Bluetooth Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-40040Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module.HarmonyOS;EMUI;Magic UI
- CVE-2021-40030The My HUAWEI app has a defect in the design.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-37005The Settings application has an argument injection vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-37004The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE).Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-37002The SystemUI module has a privilege escalation vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-37008The recovery module has a vulnerability of bypassing the verification of an update package before use.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-37007The chinadrm module has an out-of-bounds read vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-35806Azure RTOS GUIX Studio Remote Code Execution VulnerabilityMicrosoft Azure RTOS GUIX Studio
- CVE-2022-35804SMB Client and Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-35802Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35796Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2022-35795Windows Error Reporting Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-35794Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-35793Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-35792Storage Spaces Direct Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-35779Azure RTOS GUIX Studio Remote Code Execution VulnerabilityMicrosoft Azure RTOS GUIX Studio
- CVE-2022-35777Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2022-35773Azure RTOS GUIX Studio Remote Code Execution VulnerabilityMicrosoft Azure RTOS GUIX Studio
- CVE-2022-35772Azure Site Recovery Remote Code Execution VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35771Windows Defender Credential Guard Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-35769Windows Point-to-Point Protocol (PPP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-35768Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-35767Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-35766Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-35765Storage Spaces Direct Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-35764Storage Spaces Direct Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-35763Storage Spaces Direct Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-35762Storage Spaces Direct Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-35761Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-35760Microsoft ATA Port Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34717Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2022-34714Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34713Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34707Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34706Windows Local Security Authority (LSA) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34705Windows Defender Credential Guard Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34703Windows Partition Management Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34702Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34701Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-34699Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34696Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34691Active Directory Domain Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34690Windows Fax Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34687Azure RTOS GUIX Studio Remote Code Execution VulnerabilityMicrosoft Azure RTOS GUIX Studio
- CVE-2022-33670Windows Partition Management Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-33648Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office Online Server
- CVE-2022-33646Azure Batch Node Agent Elevation of Privilege VulnerabilityMicrosoft Azure Batch
- CVE-2022-33640System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege VulnerabilityMicrosoft Open Management Infrastructure · Microsoft System…
- CVE-2022-33636Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2022-33631Microsoft Excel Security Feature Bypass VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2022-30194Windows WebBrowser Control Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-30176Azure RTOS GUIX Studio Remote Code Execution VulnerabilityMicrosoft Azure RTOS GUIX Studio
- CVE-2022-30175Azure RTOS GUIX Studio Remote Code Execution VulnerabilityMicrosoft Azure RTOS GUIX Studio
- CVE-2022-30144Windows Bluetooth Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24516Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2022-24477Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2022-21980Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2022-2732Missing Authorization in openemr/openemropenemr/openemr
- CVE-2022-36125Integer overflow when reading corrupted .avro file in Avro Rust SDKApache Software Foundation Apache Avro · apache-avro
- CVE-2022-36124Memory overconsumption in Avro Rust SDKApache Software Foundation Apache Avro · avro +1
- CVE-2022-25907Prototype Pollutionts-deepmerge
Medium, low and unrated 123
- CVE-2022-20361In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth StaAndroid
- CVE-2022-20360In setChecked of SecureNfcPreferenceController.java, there is a missing permission check.Android
- CVE-2022-20357In writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to uninitialized data.Android
- CVE-2022-20356In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service from background due Android
- CVE-2022-20355In get of PacProxyService.java, there is a possible system service crash due to improper input validation.Android
- CVE-2022-20354In onDefaultNetworkChanged of Vpn.java, there is a possible way to disable VPN due to a logic error in the code.Android
- CVE-2022-20353In onSaveRingtone of DefaultRingtonePreference.java, there is a possible inappropriate file read due to improper input validation.Android
- CVE-2022-20352In addProviderRequestListener of LocationManagerService.java, there is a possible way to learn which packages request location information dAndroid
- CVE-2022-20350In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to trick the victim to grant notification access to the Android
- CVE-2022-20349In WifiScanningPreferenceController and BluetoothScanningPreferenceController, there is a possible admin restriction bypass due to a missingAndroid
- CVE-2022-20348In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass due to a missing permiAndroid
- CVE-2022-20345In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20344In stealReceiveChannel of EventThread.cpp, there is a possible way to interfere with process communication due to a race condition.Android
- CVE-2022-20239remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can alsoAndroid
- CVE-2021-39696In Task.java, there is a possible escalation of privilege due to a confused deputy.Android
- CVE-2021-46778Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” AMD Processors
- CVE-2022-22983VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability.VMware Workstation
- CVE-2022-31674VMware vRealize Operations contains an information disclosure vulnerability.VMware vRealize Operations
- CVE-2022-31675VMware vRealize Operations contains an authentication bypass vulnerability.VMware vRealize Operations
- CVE-2022-31672VMware vRealize Operations contains a privilege escalation vulnerability.VMware vRealize Operations
- CVE-2022-23238Linux deployments of StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.2 deployed with a Linux kernel version less StorageGRID
- CVE-2022-32148Exposure of client IP addresses in net/httpGo standard library net/http · stdlib
- CVE-2022-1962Stack exhaustion due to deeply nested types in go/parserGo standard library go/parser · stdlib
- CVE-2022-2719In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NUImageMagick
- CVE-2022-32189Panic when decoding Float and Rat types in math/bigGo standard library math/big · golang +1
- CVE-2022-30629Session tickets lack random ticket_age_add in crypto/tlsGo standard library crypto/tls · stdlib
- CVE-2022-1705Improper sanitization of Transfer-Encoding headers in net/httpGo standard library net/http · stdlib
- CVE-2022-2457A flaw was found in Red Hat Process Automation Manager 7 where an attacker can benefit from a brute force attack against Administration ConsRed Hat Process Automation Manager
- CVE-2022-30632Stack exhaustion on crafted paths in path/filepathGo standard library path/filepath · stdlib
- CVE-2022-29083Prior Dell BIOS versions contain an Improper Authentication vulnerability.Dell CPG BIOS
- CVE-2022-2458XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data.Red Hat Process Automation Manager
- CVE-2022-32245SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attacker to retrieve sensiSAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-35697AEM File Upload Security Issue leading to RXSSAdobe Experience Manager · com.adobe.cq:core.wcm.components…
- CVE-2022-35821Azure Sphere Information Disclosure VulnerabilityMicrosoft Azure Sphere
- CVE-2022-37006Permission control vulnerability in the network module.HarmonyOS;EMUI
- CVE-2022-35819Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35818Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35817Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35816Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-37003The AOD module has a vulnerability in permission assignment.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-35815Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35814Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-37001The diag-router module has a vulnerability in intercepting excessive long and short instructions.Huawei HarmonyOS
- CVE-2022-35813Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2021-40034The video framework has the memory overwriting vulnerability caused by addition overflow.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-35811Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35810Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35809Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35808Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35807Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35801Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35800Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35799Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35797Windows Hello Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-35791Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35790Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35789Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35788Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35787Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35786Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35785Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35784Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35783Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35782Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35781Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35780Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35517WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: web_pskValue, wl_Method, wlan_ssid, EncrypType,
- CVE-2022-35776Azure Site Recovery Denial of Service VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35775Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35774Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-35518WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to command i
- CVE-2022-34716.NET Spoofing VulnerabilityMicrosoft Visual Studio · Microsoft .NET +14
- CVE-2022-35519WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection in
- CVE-2022-34712Windows Defender Credential Guard Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-34710Windows Defender Credential Guard Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-34709Windows Defender Credential Guard Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-34708Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-35520WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which does
- CVE-2022-35521WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanEnab
- CVE-2022-34692Microsoft Exchange Server Information Disclosure VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2022-35522WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, rwan_gateway, rwan_ma
- CVE-2022-34686Azure RTOS GUIX Studio Information Disclosure VulnerabilityMicrosoft Azure RTOS GUIX Studio
- CVE-2022-34685Azure RTOS GUIX Studio Information Disclosure VulnerabilityMicrosoft Azure RTOS GUIX Studio
- CVE-2022-35523WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which leads to c
- CVE-2022-30197Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-35524WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, sel_A
- CVE-2022-30134Microsoft Exchange Server Information Disclosure VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Micro… +1
- CVE-2022-35525WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection in p
- CVE-2022-21979Microsoft Exchange Server Information Disclosure VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Micro… +1
- CVE-2022-35526WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /
- CVE-2022-35533WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which leads to command in
- CVE-2022-35534WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G2, which leads to co
- CVE-2022-35535WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection in
- CVE-2022-35536WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qos_bandwith and qos_dat, which leads to comman
- CVE-2022-35537WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads to command
- CVE-2022-35538WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: delete_list, delete_al_mac, b_delete_list
- CVE-2022-35509An issue was discovered in EyouCMS 1.5.8.
- CVE-2022-30574TIBCO eFTL Secret JackingTIBCO Software TIBCO FTL - Community Edition · TIBCO Sof… +4
- CVE-2022-30573TIBCO FTL Privilege EscalationTIBCO Software TIBCO FTL - Community Edition · TIBCO Sof… +1
- CVE-2022-35491TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample.
- CVE-2022-35426UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.
- CVE-2022-37024Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 t
- CVE-2022-2731Cross-site Scripting (XSS) - Reflected in openemr/openemropenemr/openemr
- CVE-2022-2729Cross-site Scripting (XSS) - DOM in openemr/openemropenemr/openemr
- CVE-2022-2730Authorization Bypass Through User-Controlled Key in openemr/openemropenemr/openemr
- CVE-2022-2728SourceCodester Gym Management System index.php sql injectionSourceCodester Gym Management System
- CVE-2022-2727SourceCodester Gym Management System login.php sql injectionSourceCodester Gym Management System
- CVE-2022-2726SEMCMS Ant_Check.php sql injectionSEMCMS
- CVE-2022-2725SourceCodester Company Website CMS add-blog.php cross site scriptingSourceCodester Company Website CMS
- CVE-2022-2724SourceCodester Employee Management System aprocess.php sql injectionSourceCodester Employee Management System
- CVE-2022-2723SourceCodester Employee Management System eprocess.php sql injectionSourceCodester Employee Management System
- CVE-2022-2722SourceCodester Simple Student Information System manage_course.php sql injectionSourceCodester Simple Student Information System
- CVE-2022-35724Denial of service while reading data in Avro Rust SDKApache Software Foundation Apache Avro · apache-avro
- CVE-2022-2715SourceCodester Employee Management System eloginwel.php sql injectionSourceCodester Employee Management System
- CVE-2021-33643An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable libtar
- CVE-2021-33644An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable libtar
- CVE-2021-33645The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak.libtar
- CVE-2021-33646The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak.libtar
- CVE-2022-28131Stack exhaustion from deeply nested XML documents in encoding/xmlGo standard library encoding/xml · stdlib
- CVE-2022-29804Path traversal via Clean on Windows in path/filepathGo standard library path/filepath · stdlib
- CVE-2022-32429An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technologies Inc MSNSwitch MN
- CVE-2022-34704Windows Defender Credential Guard Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-35812Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure