CVEs published August 11, 2022
205 CVEs were published on August 11, 2022: 2 critical, 17 high. 1 is now in CISA KEV.
- Published
- 205
- Critical
- 2
- High
- 17
- Medium
- 25
- Low
- 6
- Unrated
- 155
- Now in CISA KEV
- 1
- Fix available
- 5
Most affected products
- Android
- 135
- HPE Integrated Lights-Out
- 11
- Adobe Acrobat Reader
- 7
- Adobe FrameMaker
- 6
- SourceCodester Company Website CMS
- 6
- Adobe Illustrator
- 4
- SourceCodester Gym Management System
- 4
- SourceCodester Simple Online Book Store System
- 4
- Zoom Video Communications Zoom On-Premise Meeting Connector…
- 3
- SourceCodester Apartment Visitor Management System
- 2
Critical 2
High 17
- CVE-2022-20372In exynos5_i2c_irq of (TBD), there is a possible out of bounds write due to a use after free.Android
- CVE-2021-22289RCE through Project Upload from TargetB&R Industrial Automation Automation Studio
- CVE-2022-28753Zoom On-Premise Deployments: Improper Access Control VulnerabilityZoom Video Communications Zoom On-Premise Meeting Connector…
- CVE-2022-28750Zoom On-Premise Deployments: Stack Buffer Overflow in Meeting ConnectorZoom Video Communications Zoom On-Premise Meeting Connector…
- CVE-2022-28754Zoom On-Premise Deployments: Improper Access Control VulnerabilityZoom Video Communications Zoom On-Premise Meeting Connector…
- CVE-2022-35676Adobe FrameMaker SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe FrameMaker
- CVE-2022-34260Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2022-34263Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2022-35666Adobe Acrobat Reader Improper Input Validation Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-35667Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-35665Adobe Acrobat Reader Use-After-Free Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2022-34235Adobe Premiere Elements Uncontrolled Search Path Element Privilege EscalationAdobe Premiere Elements
- CVE-2022-35673Adobe FrameMaker SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe FrameMaker
- CVE-2022-35674Adobe FrameMaker SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe FrameMaker
- CVE-2022-35677Adobe FrameMaker SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe FrameMaker
- CVE-2022-35675Adobe FrameMaker SVG File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe FrameMaker
- CVE-2022-2766SourceCodester Loan Management System index.php sql injectionSourceCodester Loan Management System
Medium, low and unrated 186
- CVE-2022-37044In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/search?action accepts parameters called extra, title, and onload that are partiall
- CVE-2022-37043An issue was discovered in the webmail component in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0.
- CVE-2022-37041An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0.
- CVE-2022-28634A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71.HPE Integrated Lights-Out
- CVE-2022-28633A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated LightHPE Integrated Lights-Out
- CVE-2022-28635A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in HHPE Integrated Lights-Out
- CVE-2022-28636A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in HHPE Integrated Lights-Out
- CVE-2022-28632A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE IntegrateHPE Integrated Lights-Out
- CVE-2022-28631A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE IntegrateHPE Integrated Lights-Out
- CVE-2022-28630A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71.HPE Integrated Lights-Out
- CVE-2022-28629A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71.HPE Integrated Lights-Out
- CVE-2022-28627A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71.HPE Integrated Lights-Out
- CVE-2022-28628A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71.HPE Integrated Lights-Out
- CVE-2022-28626A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71.HPE Integrated Lights-Out
- CVE-2022-35561A stack overflow vulnerability exists in /goform/WifiMacFilterSet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to
- CVE-2022-35560A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to caus
- CVE-2022-35559A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 paramet
- CVE-2022-35558A stack overflow vulnerability exists in /goform/WifiMacFilterGet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to
- CVE-2022-35557A stack overflow vulnerability exists in /goform/wifiSSIDget in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to caus
- CVE-2022-35555A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput para
- CVE-2021-44720In Ivanti Pulse Secure Pulse Connect Secure (PCS) before 9.1R12, the administrator password is stored in the HTML source code of the "Mainte
- CVE-2022-20362In Bluetooth, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2022-20342In WiFi, there is a possible disclosure of WiFi password to the end user due to an insecure default value.Android
- CVE-2022-20341In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check.Android
- CVE-2022-20340In SELinux policy, there is a possible way of inferring which websites are being opened in the browser due to a missing permission check.Android
- CVE-2022-20339In Android, there is a possible access of network neighbor table information due to an insecure SEpolicy configuration.Android
- CVE-2022-20336In Settings, there is a possible installed application disclosure due to a missing permission check.Android
- CVE-2022-20335In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission has been disabled due to a missing permission checkAndroid
- CVE-2022-20334In Bluetooth, there are possible process crashes due to dereferencing a null pointer.Android
- CVE-2022-20333In Bluetooth, there is a possible crash due to a missing null check.Android
- CVE-2022-20332In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatAndroid
- CVE-2022-20331In the Framework, there is a possible way to enable a work profile without user consent due to a tapjacking/overlay attack.Android
- CVE-2022-20330In Bluetooth, there is a possible way to connect or disconnect bluetooth devices without user awareness due to a missing permission check.Android
- CVE-2022-20329In Wifi, there is a possible way to enable Wifi without permissions due to a missing permission check.Android
- CVE-2022-20328In PackageManager, there is a possible way to determine whether an app is installed due to a missing permission check.Android
- CVE-2022-20327In Wi-Fi, there is a possible way to retrieve the WiFi SSID without location permissions due to a missing permission check.Android
- CVE-2022-20326In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check.Android
- CVE-2022-20325In Media, there is a possible code execution due to a use after free.Android
- CVE-2022-20324In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information dAndroid
- CVE-2022-20323In PackageManager, there is a possible package installation disclosure due to a missing permission check.Android
- CVE-2022-20322In PackageManager, there is a possible installed package disclosure due to a missing permission check.Android
- CVE-2022-20321In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission cheAndroid
- CVE-2022-20320In ActivityManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informaAndroid
- CVE-2022-20319In DreamServices, there is a possible way to launch arbitrary protected activities due to a confused deputy.Android
- CVE-2022-20318In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informAndroid
- CVE-2022-20317In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code.Android
- CVE-2022-20316In ContentResolver, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informaAndroid
- CVE-2022-20315In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check.Android
- CVE-2022-20314In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation.Android
- CVE-2022-20313In Bluetooth, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20312In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission check.Android
- CVE-2022-20311In Telecomm, there is a possible disclosure of registered self managed phone accounts due to a missing permission check.Android
- CVE-2022-20310In Telecomm, there is a possible disclosure of registered self managed phone accounts due to a missing permission check.Android
- CVE-2022-20309In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informAndroid
- CVE-2022-20308In hostapd, there is a possible insecure configuration due to an insecure default value.Android
- CVE-2022-20307In AlarmManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel infAndroid
- CVE-2022-20306In Camera Provider HAL, there is a possible memory corruption due to a use after free.Android
- CVE-2022-20305In ContentService, there is a possible disclosure of available account types due to a missing permission check.Android
- CVE-2022-20304In Content, there is a possible way to determinate the user's account due to side channel information disclosure.Android
- CVE-2022-20303In ContentService, there is a possible way to determine if an account is on the device without GET_ACCOUNTS permission due to a missing permAndroid
- CVE-2022-20302In Settings, there is a possible way to bypass factory reset protections due to a sandbox escape.Android
- CVE-2022-20301In Content, there is a possible way to check if an account exists on the device due to a missing permission check.Android
- CVE-2022-20300In Content, there is a possible way to check if the given account exists on the device due to a missing permission check.Android
- CVE-2022-20299In ContentService, there is a possible way to check if the given account exists on the device due to a missing permission check.Android
- CVE-2022-20298In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check.Android
- CVE-2022-20297In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code.Android
- CVE-2022-20296In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check.Android
- CVE-2022-20295In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check.Android
- CVE-2022-20294In Content, there is a possible way to learn about an account present on the device due to a missing permission check.Android
- CVE-2022-20293In LauncherApps, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatioAndroid
- CVE-2022-20292In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code.Android
- CVE-2022-20291In AppOpsService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatiAndroid
- CVE-2022-20290In Midi, there is a possible way to learn about private midi devices due to a permissions bypass.Android
- CVE-2022-20289In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informAndroid
- CVE-2022-20288In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channelAndroid
- CVE-2022-20287In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channelAndroid
- CVE-2022-20286In Connectivity, there is a possible bypass the restriction of starting activity from background due to a logic error in the code.Android
- CVE-2022-20285In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatAndroid
- CVE-2022-20284In Telephony, there is a possible information disclosure due to a missing permission check.Android
- CVE-2022-20283In Bluetooth, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2022-20282In AppWidget, there is a possible way to start an activity from the background due to a missing permission check.Android
- CVE-2022-20281In Core, there is a possible way to start an activity from the background due to a missing permission check.Android
- CVE-2022-20280In MMSProvider, there is a possible read of protected data due to improper input validationSQL injection.Android
- CVE-2022-20279In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel infAndroid
- CVE-2022-20278In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering.Android
- CVE-2022-20277In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel infAndroid
- CVE-2022-20276In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel infAndroid
- CVE-2022-20275In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel infAndroid
- CVE-2022-20274In Keyguard, there is a missing permission check.Android
- CVE-2022-20273In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow.Android
- CVE-2022-20272In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to misleading text.Android
- CVE-2022-20271In PermissionController, there is a possible way to grant some permissions without user consent due to misleading or insufficient UI.Android
- CVE-2022-20270In Content, there is a possible way to learn gmail account name on the device due to a permissions bypass.Android
- CVE-2022-20269In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2022-20268In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a permissions bypass.Android
- CVE-2022-20267In bluetooth, there is a possible way to enable or disable bluetooth connection without user consent due to a missing permission check.Android
- CVE-2022-20266In Companion, there is a possible way to keep a service running with elevated importance without showing foreground service notification dueAndroid
- CVE-2022-20265In Settings, there is a possible way to bypass factory reset permissions due to a permissions bypass.Android
- CVE-2022-20263In ActivityManager, there is a way to read process state for other users due to a missing permission check.Android
- CVE-2022-20262In ActivityManager, there is a possible way to check another process's capabilities due to a missing permission check.Android
- CVE-2022-20261In LocationManager, there is a possible way to get location information due to a missing permission check.Android
- CVE-2022-20260In the Phone app, there is a possible crash loop due to resource exhaustion.Android
- CVE-2022-20259In Telephony, there is a possible leak of ICCID and EID due to a missing permission check.Android
- CVE-2022-20258In Bluetooth, there is a possible way to bypass compiler exploit mitigations due to a configuration error.Android
- CVE-2022-20257In Bluetooth, there is a possible way to pair a display only device without PIN confirmation due to a logic error in the code.Android
- CVE-2022-20256In the Audio HAL, there is a possible out of bounds write due to a race condition.Android
- CVE-2022-20255In SettingsProvider, there is a possible way to read or change the default ringtone due to a missing permission check.Android
- CVE-2022-20254In Wi-Fi, there is a permissions bypass.Android
- CVE-2022-20253In Bluetooth, there is a possible cleanup failure due to an uncaught exception.Android
- CVE-2022-20252In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatAndroid
- CVE-2022-20251In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatiAndroid
- CVE-2022-20250In Messaging, there is a possible way to attach files to a message without proper access checks due to improper input validation.Android
- CVE-2022-20249In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatiAndroid
- CVE-2022-20248In Settings, there is a possible way to connect to an open network bypassing DISALLOW_CONFIG_WIFI restriction due to a logic error in the coAndroid
- CVE-2022-20247In Media, there is a possible out of bounds read due to a heap buffer overflow.Android
- CVE-2022-20246In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permissAndroid
- CVE-2022-20245In WindowManager, there is a possible method to create a recording of the lock screen due to an insecure default value.Android
- CVE-2022-20244In Bluetooth, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20243In Core Utilities, there is a possible log information disclosure.Android
- CVE-2022-20242In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information dAndroid
- CVE-2022-20241In Messaging, there is a possible way to attach a private file to an SMS message due to improper input validation.Android
- CVE-2021-0975In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informationAndroid
- CVE-2021-0735In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to Android
- CVE-2021-0734In Settings, there is a possible way to determine whether an app is installed without query permissions, due to side channel information disAndroid
- CVE-2022-20408Product: AndroidVersions: Android kernelAndroid ID: A-204782372References: N/AAndroid
- CVE-2022-20407Product: AndroidVersions: Android kernelAndroid ID: A-210916981References: N/AAndroid
- CVE-2022-20406Product: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/AAndroid
- CVE-2022-20405Product: AndroidVersions: Android kernelAndroid ID: A-216363416References: N/AAndroid
- CVE-2022-20404Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/AAndroid
- CVE-2022-20403Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/AAndroid
- CVE-2022-20402Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/AAndroid
- CVE-2022-20401In SAEMM_RetrievEPLMNList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20400In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20384Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/AAndroid
- CVE-2022-20383In AllocateInternalBuffers of g3aa_buffer_allocator.cc, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2022-20382In (TBD) of (TBD), there is a possible out of bounds write due to kernel stack overflow.Android
- CVE-2022-20381Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/AAndroid
- CVE-2022-20380Product: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/AAndroid
- CVE-2022-20379In lwis_buffer_alloc of lwis_buffer.c, there is a possible arbitrary code execution due to a use after free.Android
- CVE-2022-20378Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/AAndroid
- CVE-2022-20377In TBD of keymaster_ipc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key.Android
- CVE-2022-20376In trusty_log_seq_start of trusty-log.c, there is a possible use after free due to improper locking.Android
- CVE-2022-20375In LteRrcNrProAsnDecode of LteRrcNr_Codec.c, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20373In st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition.Android
- CVE-2022-20371In dm_bow_dtr and related functions of dm-bow.c, there is a possible use after free due to a race condition.Android
- CVE-2022-20370Product: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/AAndroid
- CVE-2022-20368Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernelAndroid
- CVE-2022-20367In construct_transaction of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2022-20366In ioctl_dpm_clk_update of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2022-20365Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/AAndroid
- CVE-2022-20237In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20180In several functions of mali_gralloc_reference.cpp, there is a possible arbitrary code execution due to a missing bounds check.Android
- CVE-2022-20158In bdi_put and bdi_unregister of backing-dev.c, there is a possible memory corruption due to a use after free.Android
- CVE-2022-34264Adobe FrameMaker Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe FrameMaker
- CVE-2022-34261Adobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Illustrator
- CVE-2022-34262Adobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Illustrator
- CVE-2022-35671Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-35668Adobe Acrobat Reader Improper Input Validation Memory leakAdobe Acrobat Reader
- CVE-2022-35678Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-35670Adobe Acrobat Reader Use-After-Free Memory leakAdobe Acrobat Reader
- CVE-2022-2776SourceCodester Gym Management System delete_user.php denial of serviceSourceCodester Gym Management System
- CVE-2022-2774SourceCodester Library Management System student.php sql injectionSourceCodester Library Management System
- CVE-2022-2773SourceCodester Apartment Visitor Management System profile.php cross site scriptingSourceCodester Apartment Visitor Management System
- CVE-2022-2772SourceCodester Apartment Visitor Management System action-visitor.php sql injectionSourceCodester Apartment Visitor Management System
- CVE-2022-2771SourceCodester Simple Online Book Store System bookPerPub.php sql injectionSourceCodester Simple Online Book Store System
- CVE-2022-2770SourceCodester Simple Online Book Store System book.php sql injectionSourceCodester Simple Online Book Store System
- CVE-2022-2769SourceCodester Company Website CMS contact cross site scriptingSourceCodester Company Website CMS
- CVE-2022-2768SourceCodester Library Management System cross site scriptingSourceCodester Library Management System
- CVE-2022-2777Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber/microweber
- CVE-2022-2767SourceCodester Online Admission System index.php cross site scriptingSourceCodester Online Admission System
- CVE-2022-2765SourceCodester Company Website CMS settings improper authenticationSourceCodester Company Website CMS
- CVE-2022-2751SourceCodester Company Website CMS add-portfolio.php unrestricted uploadSourceCodester Company Website CMS
- CVE-2022-2750SourceCodester Company Website CMS Add Service add-service.php unrestricted uploadSourceCodester Company Website CMS
- CVE-2022-2749SourceCodester Gym Management System unrestricted uploadSourceCodester Gym Management System
- CVE-2022-2748SourceCodester Simple Online Book Store System edit.php cross site scriptingSourceCodester Simple Online Book Store System
- CVE-2022-2747SourceCodester Simple Online Book Store book.php sql injectionSourceCodester Simple Online Book Store
- CVE-2022-2746SourceCodester Simple Online Book Store System Admin_ add.php unrestricted uploadSourceCodester Simple Online Book Store System
- CVE-2022-2745SourceCodester Gym Management System Add New Trainer add_trainers.php sql injectionSourceCodester Gym Management System
- CVE-2022-2744SourceCodester Gym Management System Background Management add_exercises.php unrestricted uploadSourceCodester Gym Management System
- CVE-2022-2740SourceCodester Company Website CMS Add Blog add-blog.php unrestricted uploadSourceCodester Company Website CMS
- CVE-2022-2736SourceCodester Company Website CMS Background Upload Logo Icon updatelogo.php unrestricted uploadSourceCodester Company Website CMS
- CVE-2022-38161The Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other platforms, allows unrestricted remapping of th
- CVE-2022-38155TEE_Malloc in Samsung mTower through 0.3.0 allows a trusted application to achieve Excessive Memory Allocation via a large len value, as dem
- CVE-2022-20338In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation.Android
- CVE-2022-20369In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation.Android
- CVE-2022-38150In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forg