CVEs published September 16, 2022
258 CVEs were published on September 16, 2022: 9 critical, 54 high.
- Published
- 258
- Critical
- 9
- High
- 54
- Medium
- 99
- Low
- 2
- Unrated
- 94
- Now in CISA KEV
- 0
- Fix available
- 89
Most affected products
- tensorflow · tensorflow-cpu +1
- 39
- Adobe InDesign
- 17
- Huawei HarmonyOS · Huawei EMUI
- 17
- tensorflow · tensorflow-gpu +1
- 17
- Adobe Experience Manager
- 11
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 11
- Adobe Photoshop
- 10
- Huawei HarmonyOS · Huawei EMUI +1
- 8
- Adobe InCopy
- 7
- Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- 5
Critical 9
- CVE-2022-3214Delta Electronics DIAEnergy Use of Hard-coded CredentialsDelta Electronics DIAEnergy
- CVE-2022-39009The WLAN module has a vulnerability in permission verification.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-39007The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privileHuawei HarmonyOS · Huawei EMUI
- CVE-2022-39008The NFC module has bundle serialization/deserialization vulnerabilities.Huawei HarmonyOS · Huawei EMUI
- CVE-2021-42949The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attack
- CVE-2022-25708Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon MobileQualcomm Snapdragon Connectivity, Snapdragon Mobile
- CVE-2022-25652Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and NetworkingQualcomm Snapdragon Wired Infrastructure and Networking
- CVE-2022-22105Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, SnapdrQualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…
- CVE-2022-26959There are two full (read/write) Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application.
High 54
- CVE-2022-2333Honeywell SoftMaster Uncontrolled Search Path ElementHoneywell SoftMaster
- CVE-2022-28758Zoom On-Premise Deployments: Improper Access ControlZoom Video Communications Zoom On-Premise Meeting Connector…
- CVE-2022-35937OOB read in `Gather_nd` op in TensorFlow Litetensorflow · tensorflow-gpu +1
- CVE-2022-35939Out of bounds write in `scatter_nd` op in TensorFlow Litetensorflow · tensorflow-cpu +1
- CVE-2022-35938OOB read in `Gather_nd` op in TensorFlow Lite Microtensorflow
- CVE-2022-39001The number identification module has a path traversal vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-38417Adobe InDesign SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2022-38416Adobe InDesign SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2022-38413Adobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2022-38415Adobe InDesign PCX File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2022-38414Adobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2022-28852Adobe InDesign 2022 Out-of-Bound Write Arbitrary code executionAdobe InDesign
- CVE-2022-28853Adobe InDesign 2022 Out-of-Bound Write Arbitrary code executionAdobe InDesign
- CVE-2022-38434Adobe Photoshop SVG File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38432Adobe Photoshop SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38433Adobe Photoshop SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38426Adobe Photoshop U3D File Parsing Uninitialized Variable Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38429Adobe Photoshop SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38431Adobe Photoshop SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-35713Adobe Photoshop U3D File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38427Adobe Photoshop U3D File Parsing Uninitialized Variable Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38430Adobe Photoshop MP4 File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Photoshop
- CVE-2022-38401Adobe InCopy PCX File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-38405Adobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-38404Adobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-38402Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-38403Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-38408Adobe Illustrator Improper Input Validation Arbitrary code executionAdobe Illustrator
- CVE-2022-38411Adobe Animate SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe Animate
- CVE-2022-38412Adobe Animate SVG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Animate
- CVE-2022-3225Improper Control of Dynamically-Managed Code Resources in budibase/budibasebudibase/budibase · @budibase/worker +2
- CVE-2022-38877Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductImage.php?id=1.
- CVE-2022-38878School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/event/index.php?view=edit&id=.
- CVE-2022-38832School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department/index.php?view=edit
- CVE-2022-38833School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent/index.php?view=view
- CVE-2022-3176Use-after-free in io_uring in Linux KernelLinux Kernel
- CVE-2022-25706Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, SnapdrQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-25696Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, SnaQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-25693Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon MobileQualcomm Snapdragon Connectivity, Snapdragon Mobile
- CVE-2022-25690Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, SnapdrQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-25686Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnecQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-25688Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectiviQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-25670Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectivitQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-25669Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-25656Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payloaQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22095Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock iQualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2022-22094memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, SnapdragonQualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2022-22093Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2022-22092Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, SnapdragoQualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2022-22091Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, SnapdQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22081Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon WearablQualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2022-22089Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Qualcomm Snapdragon Connectivity, Snapdragon Mobile, Snapdr…
- CVE-2022-22074Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnapdragQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22066Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, SnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
Medium, low and unrated 195
- CVE-2022-39217Improper Neutralization of Formula Elements in a CSV File in ghas-to-csvsome-natalie ghas-to-csv
- CVE-2022-39212Last video frame is still sent after video is disabled in a call in Nextcloud Talknextcloud security-advisories
- CVE-2022-39210Access to internal files of the Nextcloud Android appnextcloud security-advisories
- CVE-2022-39211Server-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Servernextcloud security-advisories
- CVE-2022-36015Integer overflow in math ops in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-36012Assertion fail on MLIR empty edge names in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35996Floating point exception in `Conv2D` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36027Segfault TFLite converter on per-channel quantized transposed convolutions in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36017Segfault in `Requantize` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-40300Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 bef
- CVE-2022-36014Null-dereference in `mlir::tfg::TFOp::nameAttr` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36000Null dereference on MLIR on empty function attributes in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36011Null dereference on MLIR on empty function attributes in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36013Null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35994`CHECK` fail in `CollectiveGather` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35993`CHECK` fail in `SetSize` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35992`CHECK` fail in `TensorListFromTensor` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35991`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35999`CHECK` fail in `Conv2DBackpropInput` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35998`CHECK` fail in `EmptyTensorList` in TensorFlowtensorflow
- CVE-2022-35997`CHECK` fail in `tf.sparse.cross` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35995`CHECK` fail in `AudioSummaryV2` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-36016`CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-36005`CHECK` fail in `FakeQuantWithMinMaxVarsGradient` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36004`CHECK` fail in `tf.random.gamma` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36003`CHECK` fail in `RandomPoissonV2` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36002`CHECK` fail in `Unbatch` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-36001`CHECK` fail in `DrawBoundingBoxes` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36026`CHECK` fail in `QuantizeAndDequantizeV3` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36018`CHECK` fail in `RaggedTensorToVariant` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-36019`CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35990`CHECK` fail in `FakeQuantWithMinMaxVarsPerChannelGradient` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35986Segfault in `RaggedBincount` in TensorFlowtensorflow
- CVE-2022-35987`CHECK` fail in `DenseBincount` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35985`CHECK` fail in `LRNGrad` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35984`CHECK` fail in `ParameterizedTruncatedNormal` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35983`CHECK` fail in `Save` and `SaveSlices` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-40757A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACComputeFinal function in Samsung mTower through 0.3.0 allows a truste
- CVE-2022-40758A Buffer Access with Incorrect Length Value vulnerablity in the TEE_CipherUpdate function in Samsung mTower through 0.3.0 allows a trusted a
- CVE-2022-40759A NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger
- CVE-2022-40760A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACUpdate function in Samsung mTower through 0.3.0 allows a trusted appl
- CVE-2022-40761The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the
- CVE-2022-40762A Memory Allocation with Excessive Size Value vulnerablity in the TEE_Realloc function in Samsung mTower through 0.3.0 allows a trusted appl
- CVE-2022-35989`CHECK` fail in `MaxPool` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35988`CHECK` fail in `tf.linalg.matrix_rank` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35982Segfault in `SparseBincount` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35981`CHECK` fail in `FractionalMaxPoolGrad` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35979Segfault in `QuantizedRelu` and `QuantizedRelu6`tensorflow · tensorflow-cpu +1
- CVE-2022-35974Segfault in `QuantizeDownAndShrinkRange` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35972Segfault in `QuantizedBiasAdd` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35973Segfault in `QuantizedMatMul` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-37258Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in npm-convsteal
- CVE-2022-37251Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts.craftcms/cms
- CVE-2022-35971`CHECK` fail in `FakeQuantWithMinMaxVars` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35969`CHECK` fail in `Conv2DBackpropInput` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35970Segfault in `QuantizedInstanceNorm` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-37709Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing.
- CVE-2022-35968`CHECK` fail in `AvgPoolGrad` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35966Segfault in `QuantizedAvgPool` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35967Segfault in `QuantizedAdd` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35194TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventoryView.php.
- CVE-2022-37247Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page.craftcms/cms
- CVE-2022-35964Segfault in `BlockLSTMGradV2` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35965Segfault in `LowerBound` and `UpperBound` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-29489WordPress Sucuri Security plugin <= 1.8.33 - Cross-Site Request Forgery (CSRF) vulnerabilitySucuri Security
- CVE-2022-2332Honeywell SoftMaster Incorrect Permission Assignment for Critical ResourceHoneywell SoftMaster
- CVE-2022-40755JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c.
- CVE-2022-3217When logging in to a VBASE runtime project via Web-Remote, the product uses XOR with a static initial key to obfuscate login messages.VISAM VBASE
- CVE-2022-35963`CHECK` failures in `FractionalAvgPoolGrad` in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35960`CHECK` failure in `TensorListReserve` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35959`CHECK` failures in `AvgPool3DGrad` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35952`CHECK` failures in `UnbatchGradOp` in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-35940Int overflow in `RaggedRangeOp` in Tensoflowtensorflow · tensorflow-cpu +1
- CVE-2022-35941`CHECK` failure in `AvgPoolOp` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2020-254916Kare Emakin 5.0.341.0 is affected by Cross Site Scripting (XSS) via the /rpc/membership/setProfile DisplayName field, which is mishandled w
- CVE-2022-35935`CHECK` failure in `SobolSample` via missing validation in TensorFlowtensorflow · tensorflow-gpu +1
- CVE-2022-35934`CHECK` failure in tf.reshape in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-38611Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a
- CVE-2022-38621Doufox v0.0.4 was discovered to contain a remote code execution (RCE) vulnerability via the edit file page.
- CVE-2022-39063When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment ResponsOpen5GS
- CVE-2020-36601Out-of-bounds write vulnerability in the kernel modules.Huawei EMUI · Huawei Magic UI
- CVE-2020-36600Out-of-bounds write vulnerability in the power consumption module.Huawei EMUI · Huawei Magic UI
- CVE-2022-39003Buffer overflow vulnerability in the video framework.Huawei EMUI · Huawei Magic UI
- CVE-2021-40019Out-of-bounds heap read vulnerability in the HW_KEYMASTER module.Huawei EMUI
- CVE-2021-40023Configuration defects in the secure OS module.Huawei EMUI
- CVE-2022-39010The HwChrService module has a vulnerability in permission control.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38999The AOD module has the improper update of reference count vulnerability.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38997The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-38996The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38995The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38994The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38992The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38991The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38979The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-38978The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-38989The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38988The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-39005The MPTCP module has the memory leak vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-39004The MPTCP module has the memory leak vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-38987The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-39006The MPTCP module has the race condition vulnerability.Huawei HarmonyOS · Huawei EMUI +1
- CVE-2022-38993The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38990The secure OS module has configuration defects.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-39000The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to Huawei HarmonyOS · Huawei EMUI +1
- CVE-2021-46836Implementation of the WLAN module interfaces has the information disclosure vulnerability.Huawei HarmonyOS · Huawei EMUI
- CVE-2021-40024Implementation of the WLAN module interfaces has the information disclosure vulnerability.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-35664AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30681AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30684AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-34218AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30686AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30682AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30680AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30685AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30678AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30683AEM Violation of Secure Design Principles Security feature bypassAdobe Experience Manager
- CVE-2022-30677AEM Reflected XSS Arbitrary code executionAdobe Experience Manager
- CVE-2022-30676Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-30675Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-30673Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-30674Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-30672Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-28855Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-28857Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-30671Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-28854Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-28856Adobe InDesign 2022 Out-of-Bound Read Memory leakAdobe InDesign
- CVE-2022-38428Adobe Photoshop DCM File Parsing Use-After-Free Information Disclosure VulnerabilityAdobe Photoshop
- CVE-2022-38407Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe InCopy
- CVE-2022-38406Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe InCopy
- CVE-2022-38410Adobe Illustrator EPS File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Illustrator
- CVE-2022-38409Adobe Illustrator EPS File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Illustrator
- CVE-2021-42597A Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Storage Unit Rental Management System PHP 8.0.10 , Apache 2.4.14, SURMS
- CVE-2021-41731Cross Site Scripting (XSS vulnerability exists in )Sourcecodester News247 News Magazine (CMS) PHP 5.6 or higher and MySQL 5.7 or higher via
- CVE-2022-37775Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History via
- CVE-2022-36402There is an int overflow vulnerability in vmwgfx driverLinux kernel
- CVE-2022-35193TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php.
- CVE-2022-35195TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php
- CVE-2022-40337OASES (aka Open Aviation Strategic Engineering System) 8.8.0.2 allows attackers to execute arbitrary code via the Open Print Folder menu.
- CVE-2021-42948HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, al
- CVE-2022-37248Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via src/helpers/Cp.php.craftcms/cms
- CVE-2022-37250Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting (XSS) in /admin/myaccount.craftcms/cms
- CVE-2022-38829Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg.
- CVE-2022-38830Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setIPv6Status.
- CVE-2022-38831Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/SetNetControlList
- CVE-2022-38823In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample.
- CVE-2022-38826In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi.
- CVE-2022-38827TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi
- CVE-2022-38828TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi
- CVE-2022-38808ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.
- CVE-2022-38843EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server
- CVE-2022-38844CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating contacts with payloa
- CVE-2022-38845Cross Site Scripting in Import feature in EspoCRM 7.1.8 allows remote users to run malicious JavaScript in victim s browser via sending craf
- CVE-2022-38846EspoCRM version 7.1.8 is vulnerable to Missing Secure Flag allowing the browser to send plain text cookies over an insecure channel (HTTP).
- CVE-2022-3223Cross-site Scripting (XSS) - Stored in jgraph/drawiojgraph/drawio
- CVE-2022-40152Stack Buffer Overflow in Woodstoxxstream Woodstox · com.fasterxml.woodstox:woodstox-core
- CVE-2022-40151Stack Buffer Overflow in xstreamxstream · com.thoughtworks.xstream:xstream
- CVE-2022-2913Login No Captcha reCAPTCHA < 1.7 - IP Check BypassLogin No Captcha reCAPTCHA
- CVE-2022-2912Craw Data <= 1.0.0 - Server Side Request ForgeryCraw Data
- CVE-2022-2877Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP SpoofingTitan Anti-spam & Security
- CVE-2022-2887WP Server Health Stats < 1.7.0 - Admin+ Stored Cross-Site ScriptingWP Server Health Stats
- CVE-2022-2799Affiliates Manager < 2.9.14 - Admin+ Stored Cross-Site ScriptingAffiliates Manager
- CVE-2022-2798Affiliates Manager < 2.9.14 - Affiliate CSV InjectionAffiliates Manager
- CVE-2022-2737WP STAGING < 2.9.18 - Admin+ Stored Cross-Site ScriptingWP STAGING – Backup Duplicator & Migration
- CVE-2022-2669WP Taxonomy Import <= 1.0.4 - Reflected Cross-Site ScriptingWP Taxonomy Import
- CVE-2022-2654Classima < 2.1.11 - Reflected Cross-Site ScriptingClassified Listing – Classified ads & Business Directory… +3
- CVE-2022-2655Classified Listing Pro < 2.0.20 - Reflected Cross-Site ScriptingClassified Listing Pro - Classified ads & Business Director…
- CVE-2022-2635Autoptimize < 3.1.1 - Admin+ Stored Cross Site ScriptingAutoptimize
- CVE-2022-2575WBW Currency Switcher for WooCommerce < 1.6.6 - Admin+ Stored XSSWBW Currency Switcher for WooCommerce
- CVE-2022-2351Post SMTP < 2.1.4 - Admin+ Stored Cross-Site ScriptingPost SMTP Mailer/Email Log
- CVE-2022-1194Mobile Events Manager < 1.4.8 - Admin+ CSV InjectionMobile Events Manager
- CVE-2022-25654Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, SnapQualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…
- CVE-2022-25653Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity, SnapdragonQualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…
- CVE-2020-23560IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000001bcab.
- CVE-2020-23559IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007d7f.
- CVE-2020-23558IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007f4b.
- CVE-2020-23557IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000755d.
- CVE-2020-23556IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28.
- CVE-2020-23555IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e.
- CVE-2020-23554IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20.
- CVE-2020-23553IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33.
- CVE-2020-23552IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e62.
- CVE-2020-23551IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30.
- CVE-2020-23550IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e82.
- CVE-2022-36536An issue in the component post_applogin.php of Super Flexible Software GmbH & Co.
- CVE-2022-36533Super Flexible Software GmbH & Co.
- CVE-2022-36532Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR privileges to upload an
- CVE-2022-35415An improper input validation in NI System Configuration Manager before 22.5 may allow a privileged user to potentially enable escalation of
- CVE-2022-34002The ‘document’ parameter of PDS Vista 7’s /application/documents/display.aspx page is vulnerable to a Local File Inclusion vulnerability whi
- CVE-2021-40017The HW_KEYMASTER module lacks the validity check of the key format.HarmonyOS;EMUI
- CVE-2022-2863WPvivid Backup < 0.9.76 - Admin+ Arbitrary File ReadMigration, Backup, Staging – WPvivid
- CVE-2022-36534Super Flexible Software GmbH & Co.
- CVE-2022-39002Double free vulnerability in the storage module.HarmonyOS;EMUI;Magic UI
- CVE-2022-40149Stack Buffer Overflow in JettisonJettison · org.codehaus.jettison:jettison
- CVE-2022-40150Stack Buffer Overflow in JettisonJettison · org.codehaus.jettison:jettison