# CVEs published 2022-08-11

205 CVEs were published on August 11, 2022: 2 critical, 17 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2022-37044](https://cve.now/CVE-2022-37044.md): In Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/search?action accepts parameters called extra, title, and onload that are partiall (no CVSS)
- [CVE-2022-37043](https://cve.now/CVE-2022-37043.md): An issue was discovered in the webmail component in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. (no CVSS)
- [CVE-2022-37042](https://cve.now/CVE-2022-37042.md): Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. (CVSS 9.8, KEV)
- [CVE-2022-37041](https://cve.now/CVE-2022-37041.md): An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. (no CVSS)
- [CVE-2022-28634](https://cve.now/CVE-2022-28634.md): A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. (no CVSS, HPE Integrated Lights-Out)
- [CVE-2022-28633](https://cve.now/CVE-2022-28633.md): A local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated Light (no CVSS, HPE Integrated Lights-Out)
- [CVE-2022-28635](https://cve.now/CVE-2022-28635.md): A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in H (no CVSS, HPE Integrated Lights-Out)
- [CVE-2022-28636](https://cve.now/CVE-2022-28636.md): A potential local arbitrary code execution and a local denial of service (DoS) vulnerability within an isolated process were discovered in H (no CVSS, HPE Integrated Lights-Out)
- [CVE-2022-28632](https://cve.now/CVE-2022-28632.md): A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrate (no CVSS, HPE Integrated Lights-Out)
- [CVE-2022-28631](https://cve.now/CVE-2022-28631.md): A potential arbitrary code execution and a denial of service (DoS) vulnerability within an isolated process were discovered in HPE Integrate (no CVSS, HPE Integrated Lights-Out)
- [CVE-2022-28630](https://cve.now/CVE-2022-28630.md): A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. (no CVSS, HPE Integrated Lights-Out)
- [CVE-2022-28629](https://cve.now/CVE-2022-28629.md): A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. (no CVSS, HPE Integrated Lights-Out)
- [CVE-2022-28627](https://cve.now/CVE-2022-28627.md): A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. (no CVSS, HPE Integrated Lights-Out)
- [CVE-2022-28628](https://cve.now/CVE-2022-28628.md): A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. (no CVSS, HPE Integrated Lights-Out)
- [CVE-2022-28626](https://cve.now/CVE-2022-28626.md): A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. (no CVSS, HPE Integrated Lights-Out)
- [CVE-2022-35561](https://cve.now/CVE-2022-35561.md): A stack overflow vulnerability exists in /goform/WifiMacFilterSet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to (no CVSS)
- [CVE-2022-35560](https://cve.now/CVE-2022-35560.md): A stack overflow vulnerability exists in /goform/wifiSSIDset in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to caus (no CVSS)
- [CVE-2022-35559](https://cve.now/CVE-2022-35559.md): A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 paramet (no CVSS)
- [CVE-2022-35558](https://cve.now/CVE-2022-35558.md): A stack overflow vulnerability exists in /goform/WifiMacFilterGet in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to (no CVSS)
- [CVE-2022-35557](https://cve.now/CVE-2022-35557.md): A stack overflow vulnerability exists in /goform/wifiSSIDget in Tenda W6 V1.0.0.9(4122) version, which can be exploited by attackers to caus (no CVSS)
- [CVE-2022-35555](https://cve.now/CVE-2022-35555.md): A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput para (no CVSS)
- [CVE-2021-44720](https://cve.now/CVE-2021-44720.md): In Ivanti Pulse Secure Pulse Connect Secure (PCS) before 9.1R12, the administrator password is stored in the HTML source code of the "Mainte (no CVSS)
- [CVE-2022-20362](https://cve.now/CVE-2022-20362.md): In Bluetooth, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2022-20342](https://cve.now/CVE-2022-20342.md): In WiFi, there is a possible disclosure of WiFi password to the end user due to an insecure default value. (no CVSS, Android)
- [CVE-2022-20341](https://cve.now/CVE-2022-20341.md): In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20340](https://cve.now/CVE-2022-20340.md): In SELinux policy, there is a possible way of inferring which websites are being opened in the browser due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20339](https://cve.now/CVE-2022-20339.md): In Android, there is a possible access of network neighbor table information due to an insecure SEpolicy configuration. (no CVSS, Android)
- [CVE-2022-20336](https://cve.now/CVE-2022-20336.md): In Settings, there is a possible installed application disclosure due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20335](https://cve.now/CVE-2022-20335.md): In Wifi Slice, there is a possible way to adjust Wi-Fi settings even when the permission has been disabled due to a missing permission check (no CVSS, Android)
- [CVE-2022-20334](https://cve.now/CVE-2022-20334.md): In Bluetooth, there are possible process crashes due to dereferencing a null pointer. (no CVSS, Android)
- [CVE-2022-20333](https://cve.now/CVE-2022-20333.md): In Bluetooth, there is a possible crash due to a missing null check. (no CVSS, Android)
- [CVE-2022-20332](https://cve.now/CVE-2022-20332.md): In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informat (no CVSS, Android)
- [CVE-2022-20331](https://cve.now/CVE-2022-20331.md): In the Framework, there is a possible way to enable a work profile without user consent due to a tapjacking/overlay attack. (no CVSS, Android)
- [CVE-2022-20330](https://cve.now/CVE-2022-20330.md): In Bluetooth, there is a possible way to connect or disconnect bluetooth devices without user awareness due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20329](https://cve.now/CVE-2022-20329.md): In Wifi, there is a possible way to enable Wifi without permissions due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20328](https://cve.now/CVE-2022-20328.md): In PackageManager, there is a possible way to determine whether an app is installed due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20327](https://cve.now/CVE-2022-20327.md): In Wi-Fi, there is a possible way to retrieve the WiFi SSID without location permissions due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20326](https://cve.now/CVE-2022-20326.md): In Telephony, there is a possible disclosure of SIM identifiers due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20325](https://cve.now/CVE-2022-20325.md): In Media, there is a possible code execution due to a use after free. (no CVSS, Android)
- [CVE-2022-20324](https://cve.now/CVE-2022-20324.md): In Framework, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information d (no CVSS, Android)
- [CVE-2022-20323](https://cve.now/CVE-2022-20323.md): In PackageManager, there is a possible package installation disclosure due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20322](https://cve.now/CVE-2022-20322.md): In PackageManager, there is a possible installed package disclosure due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20321](https://cve.now/CVE-2022-20321.md): In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a missing permission che (no CVSS, Android)
- [CVE-2022-20320](https://cve.now/CVE-2022-20320.md): In ActivityManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informa (no CVSS, Android)
- [CVE-2022-20319](https://cve.now/CVE-2022-20319.md): In DreamServices, there is a possible way to launch arbitrary protected activities due to a confused deputy. (no CVSS, Android)
- [CVE-2022-20318](https://cve.now/CVE-2022-20318.md): In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inform (no CVSS, Android)
- [CVE-2022-20317](https://cve.now/CVE-2022-20317.md): In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code. (no CVSS, Android)
- [CVE-2022-20316](https://cve.now/CVE-2022-20316.md): In ContentResolver, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informa (no CVSS, Android)
- [CVE-2022-20315](https://cve.now/CVE-2022-20315.md): In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20314](https://cve.now/CVE-2022-20314.md): In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. (no CVSS, Android)
- [CVE-2022-20313](https://cve.now/CVE-2022-20313.md): In Bluetooth, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-20312](https://cve.now/CVE-2022-20312.md): In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission check. (no CVSS, Android)
- [CVE-2022-20311](https://cve.now/CVE-2022-20311.md): In Telecomm, there is a possible disclosure of registered self managed phone accounts due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20310](https://cve.now/CVE-2022-20310.md): In Telecomm, there is a possible disclosure of registered self managed phone accounts due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20309](https://cve.now/CVE-2022-20309.md): In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inform (no CVSS, Android)
- [CVE-2022-20308](https://cve.now/CVE-2022-20308.md): In hostapd, there is a possible insecure configuration due to an insecure default value. (no CVSS, Android)
- [CVE-2022-20307](https://cve.now/CVE-2022-20307.md): In AlarmManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inf (no CVSS, Android)
- [CVE-2022-20306](https://cve.now/CVE-2022-20306.md): In Camera Provider HAL, there is a possible memory corruption due to a use after free. (no CVSS, Android)
- [CVE-2022-20305](https://cve.now/CVE-2022-20305.md): In ContentService, there is a possible disclosure of available account types due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20304](https://cve.now/CVE-2022-20304.md): In Content, there is a possible way to determinate the user's account due to side channel information disclosure. (no CVSS, Android)
- [CVE-2022-20303](https://cve.now/CVE-2022-20303.md): In ContentService, there is a possible way to determine if an account is on the device without GET\_ACCOUNTS permission due to a missing perm (no CVSS, Android)
- [CVE-2022-20302](https://cve.now/CVE-2022-20302.md): In Settings, there is a possible way to bypass factory reset protections due to a sandbox escape. (no CVSS, Android)
- [CVE-2022-20301](https://cve.now/CVE-2022-20301.md): In Content, there is a possible way to check if an account exists on the device due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20300](https://cve.now/CVE-2022-20300.md): In Content, there is a possible way to check if the given account exists on the device due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20299](https://cve.now/CVE-2022-20299.md): In ContentService, there is a possible way to check if the given account exists on the device due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20298](https://cve.now/CVE-2022-20298.md): In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20297](https://cve.now/CVE-2022-20297.md): In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. (no CVSS, Android)
- [CVE-2022-20296](https://cve.now/CVE-2022-20296.md): In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20295](https://cve.now/CVE-2022-20295.md): In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20294](https://cve.now/CVE-2022-20294.md): In Content, there is a possible way to learn about an account present on the device due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20293](https://cve.now/CVE-2022-20293.md): In LauncherApps, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatio (no CVSS, Android)
- [CVE-2022-20292](https://cve.now/CVE-2022-20292.md): In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. (no CVSS, Android)
- [CVE-2022-20291](https://cve.now/CVE-2022-20291.md): In AppOpsService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informati (no CVSS, Android)
- [CVE-2022-20290](https://cve.now/CVE-2022-20290.md): In Midi, there is a possible way to learn about private midi devices due to a permissions bypass. (no CVSS, Android)
- [CVE-2022-20289](https://cve.now/CVE-2022-20289.md): In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inform (no CVSS, Android)
- [CVE-2022-20288](https://cve.now/CVE-2022-20288.md): In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel (no CVSS, Android)
- [CVE-2022-20287](https://cve.now/CVE-2022-20287.md): In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel (no CVSS, Android)
- [CVE-2022-20286](https://cve.now/CVE-2022-20286.md): In Connectivity, there is a possible bypass the restriction of starting activity from background due to a logic error in the code. (no CVSS, Android)
- [CVE-2022-20285](https://cve.now/CVE-2022-20285.md): In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informat (no CVSS, Android)
- [CVE-2022-20284](https://cve.now/CVE-2022-20284.md): In Telephony, there is a possible information disclosure due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20283](https://cve.now/CVE-2022-20283.md): In Bluetooth, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2022-20282](https://cve.now/CVE-2022-20282.md): In AppWidget, there is a possible way to start an activity from the background due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20281](https://cve.now/CVE-2022-20281.md): In Core, there is a possible way to start an activity from the background due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20280](https://cve.now/CVE-2022-20280.md): In MMSProvider, there is a possible read of protected data due to improper input validationSQL injection. (no CVSS, Android)
- [CVE-2022-20279](https://cve.now/CVE-2022-20279.md): In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inf (no CVSS, Android)
- [CVE-2022-20278](https://cve.now/CVE-2022-20278.md): In Accounts, there is a possible way to write sensitive information to the system log due to insufficient log filtering. (no CVSS, Android)
- [CVE-2022-20277](https://cve.now/CVE-2022-20277.md): In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inf (no CVSS, Android)
- [CVE-2022-20276](https://cve.now/CVE-2022-20276.md): In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inf (no CVSS, Android)
- [CVE-2022-20275](https://cve.now/CVE-2022-20275.md): In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inf (no CVSS, Android)
- [CVE-2022-20274](https://cve.now/CVE-2022-20274.md): In Keyguard, there is a missing permission check. (no CVSS, Android)
- [CVE-2022-20273](https://cve.now/CVE-2022-20273.md): In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2022-20272](https://cve.now/CVE-2022-20272.md): In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to misleading text. (no CVSS, Android)
- [CVE-2022-20271](https://cve.now/CVE-2022-20271.md): In PermissionController, there is a possible way to grant some permissions without user consent due to misleading or insufficient UI. (no CVSS, Android)
- [CVE-2022-20270](https://cve.now/CVE-2022-20270.md): In Content, there is a possible way to learn gmail account name on the device due to a permissions bypass. (no CVSS, Android)
- [CVE-2022-20269](https://cve.now/CVE-2022-20269.md): In Bluetooth, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2022-20268](https://cve.now/CVE-2022-20268.md): In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a permissions bypass. (no CVSS, Android)
- [CVE-2022-20267](https://cve.now/CVE-2022-20267.md): In bluetooth, there is a possible way to enable or disable bluetooth connection without user consent due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20266](https://cve.now/CVE-2022-20266.md): In Companion, there is a possible way to keep a service running with elevated importance without showing foreground service notification due (no CVSS, Android)
- [CVE-2022-20265](https://cve.now/CVE-2022-20265.md): In Settings, there is a possible way to bypass factory reset permissions due to a permissions bypass. (no CVSS, Android)
- [CVE-2022-20263](https://cve.now/CVE-2022-20263.md): In ActivityManager, there is a way to read process state for other users due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20262](https://cve.now/CVE-2022-20262.md): In ActivityManager, there is a possible way to check another process's capabilities due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20261](https://cve.now/CVE-2022-20261.md): In LocationManager, there is a possible way to get location information due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20260](https://cve.now/CVE-2022-20260.md): In the Phone app, there is a possible crash loop due to resource exhaustion. (no CVSS, Android)
- [CVE-2022-20259](https://cve.now/CVE-2022-20259.md): In Telephony, there is a possible leak of ICCID and EID due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20258](https://cve.now/CVE-2022-20258.md): In Bluetooth, there is a possible way to bypass compiler exploit mitigations due to a configuration error. (no CVSS, Android)
- [CVE-2022-20257](https://cve.now/CVE-2022-20257.md): In Bluetooth, there is a possible way to pair a display only device without PIN confirmation due to a logic error in the code. (no CVSS, Android)
- [CVE-2022-20256](https://cve.now/CVE-2022-20256.md): In the Audio HAL, there is a possible out of bounds write due to a race condition. (no CVSS, Android)
- [CVE-2022-20255](https://cve.now/CVE-2022-20255.md): In SettingsProvider, there is a possible way to read or change the default ringtone due to a missing permission check. (no CVSS, Android)
- [CVE-2022-20254](https://cve.now/CVE-2022-20254.md): In Wi-Fi, there is a permissions bypass. (no CVSS, Android)
- [CVE-2022-20253](https://cve.now/CVE-2022-20253.md): In Bluetooth, there is a possible cleanup failure due to an uncaught exception. (no CVSS, Android)
- [CVE-2022-20252](https://cve.now/CVE-2022-20252.md): In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informat (no CVSS, Android)
- [CVE-2022-20251](https://cve.now/CVE-2022-20251.md): In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informati (no CVSS, Android)
- [CVE-2022-20250](https://cve.now/CVE-2022-20250.md): In Messaging, there is a possible way to attach files to a message without proper access checks due to improper input validation. (no CVSS, Android)
- [CVE-2022-20249](https://cve.now/CVE-2022-20249.md): In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informati (no CVSS, Android)
- [CVE-2022-20248](https://cve.now/CVE-2022-20248.md): In Settings, there is a possible way to connect to an open network bypassing DISALLOW\_CONFIG\_WIFI restriction due to a logic error in the co (no CVSS, Android)
- [CVE-2022-20247](https://cve.now/CVE-2022-20247.md): In Media, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2022-20246](https://cve.now/CVE-2022-20246.md): In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an incorrect UID/permiss (no CVSS, Android)
- [CVE-2022-20245](https://cve.now/CVE-2022-20245.md): In WindowManager, there is a possible method to create a recording of the lock screen due to an insecure default value. (no CVSS, Android)
- [CVE-2022-20244](https://cve.now/CVE-2022-20244.md): In Bluetooth, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-20243](https://cve.now/CVE-2022-20243.md): In Core Utilities, there is a possible log information disclosure. (no CVSS, Android)
- [CVE-2022-20242](https://cve.now/CVE-2022-20242.md): In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information d (no CVSS, Android)
- [CVE-2022-20241](https://cve.now/CVE-2022-20241.md): In Messaging, there is a possible way to attach a private file to an SMS message due to improper input validation. (no CVSS, Android)
- [CVE-2021-0975](https://cve.now/CVE-2021-0975.md): In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information (no CVSS, Android)
- [CVE-2021-0735](https://cve.now/CVE-2021-0735.md): In PackageManager, there is a possible way to get information about installed packages ignoring limitations introduced in Android 11 due to (no CVSS, Android)
- [CVE-2021-0734](https://cve.now/CVE-2021-0734.md): In Settings, there is a possible way to determine whether an app is installed without query permissions, due to side channel information dis (no CVSS, Android)
- [CVE-2022-20408](https://cve.now/CVE-2022-20408.md): Product: AndroidVersions: Android kernelAndroid ID: A-204782372References: N/A (no CVSS, Android)
- [CVE-2022-20407](https://cve.now/CVE-2022-20407.md): Product: AndroidVersions: Android kernelAndroid ID: A-210916981References: N/A (no CVSS, Android)
- [CVE-2022-20406](https://cve.now/CVE-2022-20406.md): Product: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/A (no CVSS, Android)
- [CVE-2022-20405](https://cve.now/CVE-2022-20405.md): Product: AndroidVersions: Android kernelAndroid ID: A-216363416References: N/A (no CVSS, Android)
- [CVE-2022-20404](https://cve.now/CVE-2022-20404.md): Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A (no CVSS, Android)
- [CVE-2022-20403](https://cve.now/CVE-2022-20403.md): Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A (no CVSS, Android)
- [CVE-2022-20402](https://cve.now/CVE-2022-20402.md): Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A (no CVSS, Android)
- [CVE-2022-20401](https://cve.now/CVE-2022-20401.md): In SAEMM\_RetrievEPLMNList of SAEMM\_ContextManagement.c, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-20400](https://cve.now/CVE-2022-20400.md): In cd\_CodeMsg of cd\_codec.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-20384](https://cve.now/CVE-2022-20384.md): Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A (no CVSS, Android)
- [CVE-2022-20383](https://cve.now/CVE-2022-20383.md): In AllocateInternalBuffers of g3aa\_buffer\_allocator.cc, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2022-20382](https://cve.now/CVE-2022-20382.md): In (TBD) of (TBD), there is a possible out of bounds write due to kernel stack overflow. (no CVSS, Android)
- [CVE-2022-20381](https://cve.now/CVE-2022-20381.md): Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A (no CVSS, Android)
- [CVE-2022-20380](https://cve.now/CVE-2022-20380.md): Product: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/A (no CVSS, Android)
- [CVE-2022-20379](https://cve.now/CVE-2022-20379.md): In lwis\_buffer\_alloc of lwis\_buffer.c, there is a possible arbitrary code execution due to a use after free. (no CVSS, Android)
- [CVE-2022-20378](https://cve.now/CVE-2022-20378.md): Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A (no CVSS, Android)
- [CVE-2022-20377](https://cve.now/CVE-2022-20377.md): In TBD of keymaster\_ipc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. (no CVSS, Android)
- [CVE-2022-20376](https://cve.now/CVE-2022-20376.md): In trusty\_log\_seq\_start of trusty-log.c, there is a possible use after free due to improper locking. (no CVSS, Android)
- [CVE-2022-20375](https://cve.now/CVE-2022-20375.md): In LteRrcNrProAsnDecode of LteRrcNr\_Codec.c, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-20373](https://cve.now/CVE-2022-20373.md): In st21nfc\_loc\_set\_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race condition. (no CVSS, Android)
- [CVE-2022-20372](https://cve.now/CVE-2022-20372.md): In exynos5\_i2c\_irq of (TBD), there is a possible out of bounds write due to a use after free. (CVSS 7.3, Android)
- [CVE-2022-20371](https://cve.now/CVE-2022-20371.md): In dm\_bow\_dtr and related functions of dm-bow.c, there is a possible use after free due to a race condition. (no CVSS, Android)
- [CVE-2022-20370](https://cve.now/CVE-2022-20370.md): Product: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/A (no CVSS, Android)
- [CVE-2022-20368](https://cve.now/CVE-2022-20368.md): Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel (no CVSS, Android)
- [CVE-2022-20367](https://cve.now/CVE-2022-20367.md): In construct\_transaction of lwis\_ioctl.c, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2022-20366](https://cve.now/CVE-2022-20366.md): In ioctl\_dpm\_clk\_update of lwis\_ioctl.c, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2022-20365](https://cve.now/CVE-2022-20365.md): Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A (no CVSS, Android)
- [CVE-2022-20237](https://cve.now/CVE-2022-20237.md): In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-20180](https://cve.now/CVE-2022-20180.md): In several functions of mali\_gralloc\_reference.cpp, there is a possible arbitrary code execution due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-20158](https://cve.now/CVE-2022-20158.md): In bdi\_put and bdi\_unregister of backing-dev.c, there is a possible memory corruption due to a use after free. (CVSS 6.7, Android)
- [CVE-2021-22289](https://cve.now/CVE-2021-22289.md): RCE through Project Upload from Target (CVSS 8.3, B&R Industrial Automation Automation Studio)
- [CVE-2022-28755](https://cve.now/CVE-2022-28755.md): Improper URL parsing in Zoom Clients (CVSS 9.6, Zoom Video Communications Zoom Client for Meetings · Zoom V…)
- [CVE-2022-28753](https://cve.now/CVE-2022-28753.md): Zoom On-Premise Deployments: Improper Access Control Vulnerability (CVSS 7.1, Zoom Video Communications Zoom On-Premise Meeting Connector…)
- [CVE-2022-28750](https://cve.now/CVE-2022-28750.md): Zoom On-Premise Deployments: Stack Buffer Overflow in Meeting Connector (CVSS 7.5, Zoom Video Communications Zoom On-Premise Meeting Connector…)
- [CVE-2022-28754](https://cve.now/CVE-2022-28754.md): Zoom On-Premise Deployments: Improper Access Control Vulnerability (CVSS 7.1, Zoom Video Communications Zoom On-Premise Meeting Connector…)
- [CVE-2022-35676](https://cve.now/CVE-2022-35676.md): Adobe FrameMaker SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe FrameMaker)
- [CVE-2022-34264](https://cve.now/CVE-2022-34264.md): Adobe FrameMaker Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe FrameMaker)
- [CVE-2022-34260](https://cve.now/CVE-2022-34260.md): Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Illustrator)
- [CVE-2022-34263](https://cve.now/CVE-2022-34263.md): Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Illustrator)
- [CVE-2022-34261](https://cve.now/CVE-2022-34261.md): Adobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Illustrator)
- [CVE-2022-34262](https://cve.now/CVE-2022-34262.md): Adobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Illustrator)
- [CVE-2022-35666](https://cve.now/CVE-2022-35666.md): Adobe Acrobat Reader Improper Input Validation Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2022-35671](https://cve.now/CVE-2022-35671.md): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2022-35668](https://cve.now/CVE-2022-35668.md): Adobe Acrobat Reader Improper Input Validation Memory leak (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2022-35678](https://cve.now/CVE-2022-35678.md): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2022-35667](https://cve.now/CVE-2022-35667.md): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2022-35665](https://cve.now/CVE-2022-35665.md): Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2022-35670](https://cve.now/CVE-2022-35670.md): Adobe Acrobat Reader Use-After-Free Memory leak (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2022-34235](https://cve.now/CVE-2022-34235.md): Adobe Premiere Elements Uncontrolled Search Path Element Privilege Escalation (CVSS 7.8, Adobe Premiere Elements)
- [CVE-2022-35673](https://cve.now/CVE-2022-35673.md): Adobe FrameMaker SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe FrameMaker)
- [CVE-2022-35674](https://cve.now/CVE-2022-35674.md): Adobe FrameMaker SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe FrameMaker)
- [CVE-2022-35677](https://cve.now/CVE-2022-35677.md): Adobe FrameMaker SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe FrameMaker)
- [CVE-2022-35675](https://cve.now/CVE-2022-35675.md): Adobe FrameMaker SVG File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe FrameMaker)
- [CVE-2022-2776](https://cve.now/CVE-2022-2776.md): SourceCodester Gym Management System delete\_user.php denial of service (CVSS 5.4, SourceCodester Gym Management System)
- [CVE-2022-2774](https://cve.now/CVE-2022-2774.md): SourceCodester Library Management System student.php sql injection (CVSS 6.3, SourceCodester Library Management System)
- [CVE-2022-2773](https://cve.now/CVE-2022-2773.md): SourceCodester Apartment Visitor Management System profile.php cross site scripting (CVSS 3.5, SourceCodester Apartment Visitor Management System)
- [CVE-2022-2772](https://cve.now/CVE-2022-2772.md): SourceCodester Apartment Visitor Management System action-visitor.php sql injection (CVSS 6.3, SourceCodester Apartment Visitor Management System)
- [CVE-2022-2771](https://cve.now/CVE-2022-2771.md): SourceCodester Simple Online Book Store System bookPerPub.php sql injection (CVSS 6.3, SourceCodester Simple Online Book Store System)
- [CVE-2022-2770](https://cve.now/CVE-2022-2770.md): SourceCodester Simple Online Book Store System book.php sql injection (CVSS 6.3, SourceCodester Simple Online Book Store System)
- [CVE-2022-2769](https://cve.now/CVE-2022-2769.md): SourceCodester Company Website CMS contact cross site scripting (CVSS 3.5, SourceCodester Company Website CMS)
- [CVE-2022-2768](https://cve.now/CVE-2022-2768.md): SourceCodester Library Management System cross site scripting (CVSS 3.5, SourceCodester Library Management System)
- [CVE-2022-2777](https://cve.now/CVE-2022-2777.md): Cross-site Scripting (XSS) - Stored in microweber/microweber (CVSS 6.6, microweber/microweber)
- [CVE-2022-2767](https://cve.now/CVE-2022-2767.md): SourceCodester Online Admission System index.php cross site scripting (CVSS 3.5, SourceCodester Online Admission System)
- [CVE-2022-2766](https://cve.now/CVE-2022-2766.md): SourceCodester Loan Management System index.php sql injection (CVSS 7.3, SourceCodester Loan Management System)
- [CVE-2022-2765](https://cve.now/CVE-2022-2765.md): SourceCodester Company Website CMS settings improper authentication (CVSS 6.3, SourceCodester Company Website CMS)
- [CVE-2022-2751](https://cve.now/CVE-2022-2751.md): SourceCodester Company Website CMS add-portfolio.php unrestricted upload (CVSS 6.3, SourceCodester Company Website CMS)
- [CVE-2022-2750](https://cve.now/CVE-2022-2750.md): SourceCodester Company Website CMS Add Service add-service.php unrestricted upload (CVSS 6.3, SourceCodester Company Website CMS)
- [CVE-2022-2749](https://cve.now/CVE-2022-2749.md): SourceCodester Gym Management System unrestricted upload (CVSS 4.7, SourceCodester Gym Management System)
- [CVE-2022-2748](https://cve.now/CVE-2022-2748.md): SourceCodester Simple Online Book Store System edit.php cross site scripting (CVSS 3.5, SourceCodester Simple Online Book Store System)
- [CVE-2022-2747](https://cve.now/CVE-2022-2747.md): SourceCodester Simple Online Book Store book.php sql injection (CVSS 6.3, SourceCodester Simple Online Book Store)
- [CVE-2022-2746](https://cve.now/CVE-2022-2746.md): SourceCodester Simple Online Book Store System Admin\_ add.php unrestricted upload (CVSS 6.3, SourceCodester Simple Online Book Store System)
- [CVE-2022-2745](https://cve.now/CVE-2022-2745.md): SourceCodester Gym Management System Add New Trainer add\_trainers.php sql injection (CVSS 6.3, SourceCodester Gym Management System)
- [CVE-2022-2744](https://cve.now/CVE-2022-2744.md): SourceCodester Gym Management System Background Management add\_exercises.php unrestricted upload (CVSS 6.3, SourceCodester Gym Management System)
- [CVE-2022-2740](https://cve.now/CVE-2022-2740.md): SourceCodester Company Website CMS Add Blog add-blog.php unrestricted upload (CVSS 6.3, SourceCodester Company Website CMS)
- [CVE-2022-2736](https://cve.now/CVE-2022-2736.md): SourceCodester Company Website CMS Background Upload Logo Icon updatelogo.php unrestricted upload (CVSS 6.3, SourceCodester Company Website CMS)
- [CVE-2022-38161](https://cve.now/CVE-2022-38161.md): The Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other platforms, allows unrestricted remapping of th (no CVSS)
- [CVE-2022-38155](https://cve.now/CVE-2022-38155.md): TEE\_Malloc in Samsung mTower through 0.3.0 allows a trusted application to achieve Excessive Memory Allocation via a large len value, as dem (no CVSS)
- [CVE-2022-20338](https://cve.now/CVE-2022-20338.md): In HierarchicalUri.readFrom of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. (CVSS 3.3, Android)
- [CVE-2022-20369](https://cve.now/CVE-2022-20369.md): In v4l2\_m2m\_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. (no CVSS, Android)
- [CVE-2022-38150](https://cve.now/CVE-2022-38150.md): In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forg (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-08-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.