# CVEs published 2022-09-16

258 CVEs were published on September 16, 2022: 9 critical, 54 high. Days are UTC.

- [CVE-2022-39217](https://cve.now/CVE-2022-39217.md): Improper Neutralization of Formula Elements in a CSV File in ghas-to-csv (CVSS 5.8, some-natalie ghas-to-csv)
- [CVE-2022-39212](https://cve.now/CVE-2022-39212.md): Last video frame is still sent after video is disabled in a call in Nextcloud Talk (CVSS 4.3, nextcloud security-advisories)
- [CVE-2022-39210](https://cve.now/CVE-2022-39210.md): Access to internal files of the Nextcloud Android app (CVSS 3.2, nextcloud security-advisories)
- [CVE-2022-39211](https://cve.now/CVE-2022-39211.md): Server-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Server (CVSS 3.0, nextcloud security-advisories)
- [CVE-2022-36015](https://cve.now/CVE-2022-36015.md): Integer overflow in math ops in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-36012](https://cve.now/CVE-2022-36012.md): Assertion fail on MLIR empty edge names in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35996](https://cve.now/CVE-2022-35996.md): Floating point exception in \`Conv2D\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36027](https://cve.now/CVE-2022-36027.md): Segfault TFLite converter on per-channel quantized transposed convolutions in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36017](https://cve.now/CVE-2022-36017.md): Segfault in \`Requantize\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-40300](https://cve.now/CVE-2022-40300.md): Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 bef (no CVSS)
- [CVE-2022-36014](https://cve.now/CVE-2022-36014.md): Null-dereference in \`mlir::tfg::TFOp::nameAttr\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36000](https://cve.now/CVE-2022-36000.md): Null dereference on MLIR on empty function attributes in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36011](https://cve.now/CVE-2022-36011.md): Null dereference on MLIR on empty function attributes in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36013](https://cve.now/CVE-2022-36013.md): Null-dereference in \`mlir::tfg::GraphDefImporter::ConvertNodeDef\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35994](https://cve.now/CVE-2022-35994.md): \`CHECK\` fail in \`CollectiveGather\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35993](https://cve.now/CVE-2022-35993.md): \`CHECK\` fail in \`SetSize\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35992](https://cve.now/CVE-2022-35992.md): \`CHECK\` fail in \`TensorListFromTensor\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35991](https://cve.now/CVE-2022-35991.md): \`CHECK\` fail in \`TensorListScatter\` and \`TensorListScatterV2\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35999](https://cve.now/CVE-2022-35999.md): \`CHECK\` fail in \`Conv2DBackpropInput\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35998](https://cve.now/CVE-2022-35998.md): \`CHECK\` fail in \`EmptyTensorList\` in TensorFlow (CVSS 5.9, tensorflow)
- [CVE-2022-35997](https://cve.now/CVE-2022-35997.md): \`CHECK\` fail in \`tf.sparse.cross\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35995](https://cve.now/CVE-2022-35995.md): \`CHECK\` fail in \`AudioSummaryV2\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-36016](https://cve.now/CVE-2022-36016.md): \`CHECK\`-fail in \`tensorflow::full\_type::SubstituteFromAttrs\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-36005](https://cve.now/CVE-2022-36005.md): \`CHECK\` fail in \`FakeQuantWithMinMaxVarsGradient\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36004](https://cve.now/CVE-2022-36004.md): \`CHECK\` fail in \`tf.random.gamma\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36003](https://cve.now/CVE-2022-36003.md): \`CHECK\` fail in \`RandomPoissonV2\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36002](https://cve.now/CVE-2022-36002.md): \`CHECK\` fail in \`Unbatch\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-36001](https://cve.now/CVE-2022-36001.md): \`CHECK\` fail in \`DrawBoundingBoxes\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36026](https://cve.now/CVE-2022-36026.md): \`CHECK\` fail in \`QuantizeAndDequantizeV3\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36018](https://cve.now/CVE-2022-36018.md): \`CHECK\` fail in \`RaggedTensorToVariant\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-36019](https://cve.now/CVE-2022-36019.md): \`CHECK\` fail in \`FakeQuantWithMinMaxVarsPerChannel\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35990](https://cve.now/CVE-2022-35990.md): \`CHECK\` fail in \`FakeQuantWithMinMaxVarsPerChannelGradient\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35986](https://cve.now/CVE-2022-35986.md): Segfault in \`RaggedBincount\` in TensorFlow (CVSS 5.9, tensorflow)
- [CVE-2022-35987](https://cve.now/CVE-2022-35987.md): \`CHECK\` fail in \`DenseBincount\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35985](https://cve.now/CVE-2022-35985.md): \`CHECK\` fail in \`LRNGrad\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35984](https://cve.now/CVE-2022-35984.md): \`CHECK\` fail in \`ParameterizedTruncatedNormal\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35983](https://cve.now/CVE-2022-35983.md): \`CHECK\` fail in \`Save\` and \`SaveSlices\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-40757](https://cve.now/CVE-2022-40757.md): A Buffer Access with Incorrect Length Value vulnerablity in the TEE\_MACComputeFinal function in Samsung mTower through 0.3.0 allows a truste (no CVSS)
- [CVE-2022-40758](https://cve.now/CVE-2022-40758.md): A Buffer Access with Incorrect Length Value vulnerablity in the TEE\_CipherUpdate function in Samsung mTower through 0.3.0 allows a trusted a (no CVSS)
- [CVE-2022-40759](https://cve.now/CVE-2022-40759.md): A NULL pointer dereference issue in the TEE\_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger (no CVSS)
- [CVE-2022-40760](https://cve.now/CVE-2022-40760.md): A Buffer Access with Incorrect Length Value vulnerablity in the TEE\_MACUpdate function in Samsung mTower through 0.3.0 allows a trusted appl (no CVSS)
- [CVE-2022-40761](https://cve.now/CVE-2022-40761.md): The function tee\_obj\_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the (no CVSS)
- [CVE-2022-40762](https://cve.now/CVE-2022-40762.md): A Memory Allocation with Excessive Size Value vulnerablity in the TEE\_Realloc function in Samsung mTower through 0.3.0 allows a trusted appl (no CVSS)
- [CVE-2022-35989](https://cve.now/CVE-2022-35989.md): \`CHECK\` fail in \`MaxPool\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35988](https://cve.now/CVE-2022-35988.md): \`CHECK\` fail in \`tf.linalg.matrix\_rank\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35982](https://cve.now/CVE-2022-35982.md): Segfault in \`SparseBincount\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35981](https://cve.now/CVE-2022-35981.md): \`CHECK\` fail in \`FractionalMaxPoolGrad\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35979](https://cve.now/CVE-2022-35979.md): Segfault in \`QuantizedRelu\` and \`QuantizedRelu6\` (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35974](https://cve.now/CVE-2022-35974.md): Segfault in \`QuantizeDownAndShrinkRange\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35972](https://cve.now/CVE-2022-35972.md): Segfault in \`QuantizedBiasAdd\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35973](https://cve.now/CVE-2022-35973.md): Segfault in \`QuantizedMatMul\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-37258](https://cve.now/CVE-2022-37258.md): Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in npm-conv (no CVSS, steal)
- [CVE-2022-37251](https://cve.now/CVE-2022-37251.md): Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts. (no CVSS, craftcms/cms)
- [CVE-2022-35971](https://cve.now/CVE-2022-35971.md): \`CHECK\` fail in \`FakeQuantWithMinMaxVars\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35969](https://cve.now/CVE-2022-35969.md): \`CHECK\` fail in \`Conv2DBackpropInput\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35970](https://cve.now/CVE-2022-35970.md): Segfault in \`QuantizedInstanceNorm\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-37709](https://cve.now/CVE-2022-37709.md): Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing. (no CVSS)
- [CVE-2022-35968](https://cve.now/CVE-2022-35968.md): \`CHECK\` fail in \`AvgPoolGrad\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35966](https://cve.now/CVE-2022-35966.md): Segfault in \`QuantizedAvgPool\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35967](https://cve.now/CVE-2022-35967.md): Segfault in \`QuantizedAdd\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35194](https://cve.now/CVE-2022-35194.md): TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventoryView.php. (no CVSS)
- [CVE-2022-37247](https://cve.now/CVE-2022-37247.md): Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page. (no CVSS, craftcms/cms)
- [CVE-2022-35964](https://cve.now/CVE-2022-35964.md): Segfault in \`BlockLSTMGradV2\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35965](https://cve.now/CVE-2022-35965.md): Segfault in \`LowerBound\` and \`UpperBound\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29489](https://cve.now/CVE-2022-29489.md): WordPress Sucuri Security plugin \<= 1.8.33 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Sucuri Security)
- [CVE-2022-2332](https://cve.now/CVE-2022-2332.md): Honeywell SoftMaster Incorrect Permission Assignment for Critical Resource (CVSS 6.2, Honeywell SoftMaster)
- [CVE-2022-2333](https://cve.now/CVE-2022-2333.md): Honeywell SoftMaster Uncontrolled Search Path Element (CVSS 8.8, Honeywell SoftMaster)
- [CVE-2022-40755](https://cve.now/CVE-2022-40755.md): JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas\_image.c. (no CVSS)
- [CVE-2022-3217](https://cve.now/CVE-2022-3217.md): When logging in to a VBASE runtime project via Web-Remote, the product uses XOR with a static initial key to obfuscate login messages. (no CVSS, VISAM VBASE)
- [CVE-2022-28758](https://cve.now/CVE-2022-28758.md): Zoom On-Premise Deployments: Improper Access Control (CVSS 8.2, Zoom Video Communications Zoom On-Premise Meeting Connector…)
- [CVE-2022-35963](https://cve.now/CVE-2022-35963.md): \`CHECK\` failures in \`FractionalAvgPoolGrad\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35960](https://cve.now/CVE-2022-35960.md): \`CHECK\` failure in \`TensorListReserve\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35959](https://cve.now/CVE-2022-35959.md): \`CHECK\` failures in \`AvgPool3DGrad\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35952](https://cve.now/CVE-2022-35952.md): \`CHECK\` failures in \`UnbatchGradOp\` in TensorFlow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35940](https://cve.now/CVE-2022-35940.md): Int overflow in \`RaggedRangeOp\` in Tensoflow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35941](https://cve.now/CVE-2022-35941.md): \`CHECK\` failure in \`AvgPoolOp\` in Tensorflow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-35937](https://cve.now/CVE-2022-35937.md): OOB read in \`Gather\_nd\` op in TensorFlow Lite (CVSS 7.0, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35939](https://cve.now/CVE-2022-35939.md): Out of bounds write in \`scatter\_nd\` op in TensorFlow Lite (CVSS 7.0, tensorflow · tensorflow-cpu +1)
- [CVE-2020-25491](https://cve.now/CVE-2020-25491.md): 6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting (XSS) via the /rpc/membership/setProfile DisplayName field, which is mishandled w (no CVSS)
- [CVE-2022-35935](https://cve.now/CVE-2022-35935.md): \`CHECK\` failure in \`SobolSample\` via missing validation in TensorFlow (CVSS 5.9, tensorflow · tensorflow-gpu +1)
- [CVE-2022-35938](https://cve.now/CVE-2022-35938.md): OOB read in \`Gather\_nd\` op in TensorFlow Lite Micro (CVSS 7.0, tensorflow)
- [CVE-2022-35934](https://cve.now/CVE-2022-35934.md): \`CHECK\` failure in tf.reshape in Tensorflow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2022-38611](https://cve.now/CVE-2022-38611.md): Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a (no CVSS)
- [CVE-2022-38621](https://cve.now/CVE-2022-38621.md): Doufox v0.0.4 was discovered to contain a remote code execution (RCE) vulnerability via the edit file page. (no CVSS)
- [CVE-2022-3214](https://cve.now/CVE-2022-3214.md): Delta Electronics DIAEnergy Use of Hard-coded Credentials (CVSS 9.8, Delta Electronics DIAEnergy)
- [CVE-2022-39063](https://cve.now/CVE-2022-39063.md): When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment Respons (no CVSS, Open5GS)
- [CVE-2020-36601](https://cve.now/CVE-2020-36601.md): Out-of-bounds write vulnerability in the kernel modules. (no CVSS, Huawei EMUI · Huawei Magic UI)
- [CVE-2020-36600](https://cve.now/CVE-2020-36600.md): Out-of-bounds write vulnerability in the power consumption module. (no CVSS, Huawei EMUI · Huawei Magic UI)
- [CVE-2022-39003](https://cve.now/CVE-2022-39003.md): Buffer overflow vulnerability in the video framework. (no CVSS, Huawei EMUI · Huawei Magic UI)
- [CVE-2021-40019](https://cve.now/CVE-2021-40019.md): Out-of-bounds heap read vulnerability in the HW\_KEYMASTER module. (no CVSS, Huawei EMUI)
- [CVE-2021-40023](https://cve.now/CVE-2021-40023.md): Configuration defects in the secure OS module. (no CVSS, Huawei EMUI)
- [CVE-2022-39010](https://cve.now/CVE-2022-39010.md): The HwChrService module has a vulnerability in permission control. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-39009](https://cve.now/CVE-2022-39009.md): The WLAN module has a vulnerability in permission verification. (CVSS 9.8, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-39001](https://cve.now/CVE-2022-39001.md): The number identification module has a path traversal vulnerability. (CVSS 7.5, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-39007](https://cve.now/CVE-2022-39007.md): The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privile (CVSS 9.8, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38999](https://cve.now/CVE-2022-38999.md): The AOD module has the improper update of reference count vulnerability. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38997](https://cve.now/CVE-2022-38997.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-38996](https://cve.now/CVE-2022-38996.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38995](https://cve.now/CVE-2022-38995.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38994](https://cve.now/CVE-2022-38994.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38992](https://cve.now/CVE-2022-38992.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38991](https://cve.now/CVE-2022-38991.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38979](https://cve.now/CVE-2022-38979.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-38978](https://cve.now/CVE-2022-38978.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-38989](https://cve.now/CVE-2022-38989.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38988](https://cve.now/CVE-2022-38988.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-39005](https://cve.now/CVE-2022-39005.md): The MPTCP module has the memory leak vulnerability. (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-39004](https://cve.now/CVE-2022-39004.md): The MPTCP module has the memory leak vulnerability. (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-38987](https://cve.now/CVE-2022-38987.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-39006](https://cve.now/CVE-2022-39006.md): The MPTCP module has the race condition vulnerability. (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-38993](https://cve.now/CVE-2022-38993.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-38990](https://cve.now/CVE-2022-38990.md): The secure OS module has configuration defects. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-39000](https://cve.now/CVE-2022-39000.md): The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps to (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2021-46836](https://cve.now/CVE-2021-46836.md): Implementation of the WLAN module interfaces has the information disclosure vulnerability. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2021-40024](https://cve.now/CVE-2021-40024.md): Implementation of the WLAN module interfaces has the information disclosure vulnerability. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-39008](https://cve.now/CVE-2022-39008.md): The NFC module has bundle serialization/deserialization vulnerabilities. (CVSS 9.1, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-35664](https://cve.now/CVE-2022-35664.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30681](https://cve.now/CVE-2022-30681.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30684](https://cve.now/CVE-2022-30684.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-34218](https://cve.now/CVE-2022-34218.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30686](https://cve.now/CVE-2022-30686.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30682](https://cve.now/CVE-2022-30682.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30680](https://cve.now/CVE-2022-30680.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30685](https://cve.now/CVE-2022-30685.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30678](https://cve.now/CVE-2022-30678.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-30683](https://cve.now/CVE-2022-30683.md): AEM Violation of Secure Design Principles Security feature bypass (CVSS 5.3, Adobe Experience Manager)
- [CVE-2022-30677](https://cve.now/CVE-2022-30677.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-38417](https://cve.now/CVE-2022-38417.md): Adobe InDesign SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2022-38416](https://cve.now/CVE-2022-38416.md): Adobe InDesign SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2022-30676](https://cve.now/CVE-2022-30676.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-38413](https://cve.now/CVE-2022-38413.md): Adobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2022-38415](https://cve.now/CVE-2022-38415.md): Adobe InDesign PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2022-30675](https://cve.now/CVE-2022-30675.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-38414](https://cve.now/CVE-2022-38414.md): Adobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2022-30673](https://cve.now/CVE-2022-30673.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-30674](https://cve.now/CVE-2022-30674.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-30672](https://cve.now/CVE-2022-30672.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-28855](https://cve.now/CVE-2022-28855.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-28857](https://cve.now/CVE-2022-28857.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-30671](https://cve.now/CVE-2022-30671.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-28854](https://cve.now/CVE-2022-28854.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-28856](https://cve.now/CVE-2022-28856.md): Adobe InDesign 2022 Out-of-Bound Read Memory leak (CVSS 5.5, Adobe InDesign)
- [CVE-2022-28852](https://cve.now/CVE-2022-28852.md): Adobe InDesign 2022 Out-of-Bound Write Arbitrary code execution (CVSS 7.8, Adobe InDesign)
- [CVE-2022-28853](https://cve.now/CVE-2022-28853.md): Adobe InDesign 2022 Out-of-Bound Write Arbitrary code execution (CVSS 7.8, Adobe InDesign)
- [CVE-2022-38434](https://cve.now/CVE-2022-38434.md): Adobe Photoshop SVG File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38432](https://cve.now/CVE-2022-38432.md): Adobe Photoshop SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38433](https://cve.now/CVE-2022-38433.md): Adobe Photoshop SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38426](https://cve.now/CVE-2022-38426.md): Adobe Photoshop U3D File Parsing Uninitialized Variable Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38428](https://cve.now/CVE-2022-38428.md): Adobe Photoshop DCM File Parsing Use-After-Free Information Disclosure Vulnerability (CVSS 5.5, Adobe Photoshop)
- [CVE-2022-38429](https://cve.now/CVE-2022-38429.md): Adobe Photoshop SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38431](https://cve.now/CVE-2022-38431.md): Adobe Photoshop SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-35713](https://cve.now/CVE-2022-35713.md): Adobe Photoshop U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38427](https://cve.now/CVE-2022-38427.md): Adobe Photoshop U3D File Parsing Uninitialized Variable Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38430](https://cve.now/CVE-2022-38430.md): Adobe Photoshop MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop)
- [CVE-2022-38401](https://cve.now/CVE-2022-38401.md): Adobe InCopy PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2022-38407](https://cve.now/CVE-2022-38407.md): Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe InCopy)
- [CVE-2022-38405](https://cve.now/CVE-2022-38405.md): Adobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2022-38406](https://cve.now/CVE-2022-38406.md): Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe InCopy)
- [CVE-2022-38404](https://cve.now/CVE-2022-38404.md): Adobe InCopy SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2022-38402](https://cve.now/CVE-2022-38402.md): Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2022-38403](https://cve.now/CVE-2022-38403.md): Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2022-38410](https://cve.now/CVE-2022-38410.md): Adobe Illustrator EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Illustrator)
- [CVE-2022-38408](https://cve.now/CVE-2022-38408.md): Adobe Illustrator Improper Input Validation Arbitrary code execution (CVSS 7.8, Adobe Illustrator)
- [CVE-2022-38409](https://cve.now/CVE-2022-38409.md): Adobe Illustrator EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Illustrator)
- [CVE-2022-38411](https://cve.now/CVE-2022-38411.md): Adobe Animate SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Animate)
- [CVE-2022-38412](https://cve.now/CVE-2022-38412.md): Adobe Animate SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Animate)
- [CVE-2021-42597](https://cve.now/CVE-2021-42597.md): A Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Storage Unit Rental Management System PHP 8.0.10 , Apache 2.4.14, SURMS (no CVSS)
- [CVE-2022-3225](https://cve.now/CVE-2022-3225.md): Improper Control of Dynamically-Managed Code Resources in budibase/budibase (CVSS 8.8, budibase/budibase · @budibase/worker +2)
- [CVE-2021-41731](https://cve.now/CVE-2021-41731.md): Cross Site Scripting (XSS vulnerability exists in )Sourcecodester News247 News Magazine (CMS) PHP 5.6 or higher and MySQL 5.7 or higher via (no CVSS)
- [CVE-2022-37775](https://cve.now/CVE-2022-37775.md): Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History via (no CVSS)
- [CVE-2022-36402](https://cve.now/CVE-2022-36402.md): There is an int overflow vulnerability in vmwgfx driver (CVSS 6.3, Linux kernel)
- [CVE-2022-35193](https://cve.now/CVE-2022-35193.md): TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php. (no CVSS)
- [CVE-2022-35195](https://cve.now/CVE-2022-35195.md): TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php (no CVSS)
- [CVE-2022-40337](https://cve.now/CVE-2022-40337.md): OASES (aka Open Aviation Strategic Engineering System) 8.8.0.2 allows attackers to execute arbitrary code via the Open Print Folder menu. (no CVSS)
- [CVE-2021-42948](https://cve.now/CVE-2021-42948.md): HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, al (no CVSS)
- [CVE-2022-37248](https://cve.now/CVE-2022-37248.md): Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via src/helpers/Cp.php. (no CVSS, craftcms/cms)
- [CVE-2022-38877](https://cve.now/CVE-2022-38877.md): Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php\_action/editProductImage.php?id=1. (CVSS 7.2)
- [CVE-2022-38878](https://cve.now/CVE-2022-38878.md): School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/event/index.php?view=edit&id=. (CVSS 7.2)
- [CVE-2022-37250](https://cve.now/CVE-2022-37250.md): Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting (XSS) in /admin/myaccount. (CVSS 5.4, craftcms/cms)
- [CVE-2022-38832](https://cve.now/CVE-2022-38832.md): School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department/index.php?view=edit (CVSS 7.2)
- [CVE-2022-38833](https://cve.now/CVE-2022-38833.md): School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/modstudent/index.php?view=view (CVSS 7.2)
- [CVE-2021-42949](https://cve.now/CVE-2021-42949.md): The component controlla\_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attack (CVSS 9.8)
- [CVE-2022-38829](https://cve.now/CVE-2022-38829.md): Tenda RX9\_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg. (no CVSS)
- [CVE-2022-38830](https://cve.now/CVE-2022-38830.md): Tenda RX9\_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setIPv6Status. (no CVSS)
- [CVE-2022-38831](https://cve.now/CVE-2022-38831.md): Tenda RX9\_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/SetNetControlList (no CVSS)
- [CVE-2022-38823](https://cve.now/CVE-2022-38823.md): In TOTOLINK T6 V4.1.5cu.709\_B20210518, there is a hard coded password for root in /etc/shadow.sample. (no CVSS)
- [CVE-2022-38826](https://cve.now/CVE-2022-38826.md): In TOTOLINK T6 V4.1.5cu.709\_B20210518, there is an execute arbitrary command in cstecgi.cgi. (no CVSS)
- [CVE-2022-38827](https://cve.now/CVE-2022-38827.md): TOTOLINK T6 V4.1.5cu.709\_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi (no CVSS)
- [CVE-2022-38828](https://cve.now/CVE-2022-38828.md): TOTOLINK T6 V4.1.5cu.709\_B20210518 is vulnerable to command injection via cstecgi.cgi (no CVSS)
- [CVE-2022-3176](https://cve.now/CVE-2022-3176.md): Use-after-free in io\_uring in Linux Kernel (CVSS 7.8, Linux Kernel)
- [CVE-2022-38808](https://cve.now/CVE-2022-38808.md): ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface. (no CVSS)
- [CVE-2022-38843](https://cve.now/CVE-2022-38843.md): EspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload malicious file with any extension to the server (no CVSS)
- [CVE-2022-38844](https://cve.now/CVE-2022-38844.md): CSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system commands via creating contacts with payloa (no CVSS)
- [CVE-2022-38845](https://cve.now/CVE-2022-38845.md): Cross Site Scripting in Import feature in EspoCRM 7.1.8 allows remote users to run malicious JavaScript in victim s browser via sending craf (no CVSS)
- [CVE-2022-38846](https://cve.now/CVE-2022-38846.md): EspoCRM version 7.1.8 is vulnerable to Missing Secure Flag allowing the browser to send plain text cookies over an insecure channel (HTTP). (no CVSS)
- [CVE-2022-3223](https://cve.now/CVE-2022-3223.md): Cross-site Scripting (XSS) - Stored in jgraph/drawio (CVSS 4.3, jgraph/drawio)
- [CVE-2022-40152](https://cve.now/CVE-2022-40152.md): Stack Buffer Overflow in Woodstox (CVSS 6.5, xstream Woodstox · com.fasterxml.woodstox:woodstox-core)
- [CVE-2022-40151](https://cve.now/CVE-2022-40151.md): Stack Buffer Overflow in xstream (CVSS 6.5, xstream · com.thoughtworks.xstream:xstream)
- [CVE-2022-2913](https://cve.now/CVE-2022-2913.md): Login No Captcha reCAPTCHA \< 1.7 - IP Check Bypass (CVSS 4.3, Login No Captcha reCAPTCHA)
- [CVE-2022-2912](https://cve.now/CVE-2022-2912.md): Craw Data \<= 1.0.0 - Server Side Request Forgery (CVSS 4.3, Craw Data)
- [CVE-2022-2877](https://cve.now/CVE-2022-2877.md): Titan Anti-spam & Security \< 7.3.1 - Protection Bypass due to IP Spoofing (no CVSS, Titan Anti-spam & Security)
- [CVE-2022-2887](https://cve.now/CVE-2022-2887.md): WP Server Health Stats \< 1.7.0 - Admin+ Stored Cross-Site Scripting (no CVSS, WP Server Health Stats)
- [CVE-2022-2799](https://cve.now/CVE-2022-2799.md): Affiliates Manager \< 2.9.14 - Admin+ Stored Cross-Site Scripting (no CVSS, Affiliates Manager)
- [CVE-2022-2798](https://cve.now/CVE-2022-2798.md): Affiliates Manager \< 2.9.14 - Affiliate CSV Injection (no CVSS, Affiliates Manager)
- [CVE-2022-2737](https://cve.now/CVE-2022-2737.md): WP STAGING \< 2.9.18 - Admin+ Stored Cross-Site Scripting (no CVSS, WP STAGING – Backup Duplicator & Migration)
- [CVE-2022-2669](https://cve.now/CVE-2022-2669.md): WP Taxonomy Import \<= 1.0.4 - Reflected Cross-Site Scripting (CVSS 6.1, WP Taxonomy Import)
- [CVE-2022-2654](https://cve.now/CVE-2022-2654.md): Classima \< 2.1.11 - Reflected Cross-Site Scripting (CVSS 6.1, Classified Listing – Classified ads & Business Directory… +3)
- [CVE-2022-2655](https://cve.now/CVE-2022-2655.md): Classified Listing Pro \< 2.0.20 - Reflected Cross-Site Scripting (no CVSS, Classified Listing Pro - Classified ads & Business Director…)
- [CVE-2022-2635](https://cve.now/CVE-2022-2635.md): Autoptimize \< 3.1.1 - Admin+ Stored Cross Site Scripting (no CVSS, Autoptimize)
- [CVE-2022-2575](https://cve.now/CVE-2022-2575.md): WBW Currency Switcher for WooCommerce \< 1.6.6 - Admin+ Stored XSS (no CVSS, WBW Currency Switcher for WooCommerce)
- [CVE-2022-2351](https://cve.now/CVE-2022-2351.md): Post SMTP \< 2.1.4 - Admin+ Stored Cross-Site Scripting (no CVSS, Post SMTP Mailer/Email Log)
- [CVE-2022-1194](https://cve.now/CVE-2022-1194.md): Mobile Events Manager \< 1.4.8 - Admin+ CSV Injection (no CVSS, Mobile Events Manager)
- [CVE-2022-25708](https://cve.now/CVE-2022-25708.md): Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile (CVSS 9.8, Qualcomm Snapdragon Connectivity, Snapdragon Mobile)
- [CVE-2022-25706](https://cve.now/CVE-2022-25706.md): Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdr (CVSS 8.2, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25696](https://cve.now/CVE-2022-25696.md): Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Sna (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25693](https://cve.now/CVE-2022-25693.md): Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile (CVSS 8.4, Qualcomm Snapdragon Connectivity, Snapdragon Mobile)
- [CVE-2022-25690](https://cve.now/CVE-2022-25690.md): Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdr (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25686](https://cve.now/CVE-2022-25686.md): Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25688](https://cve.now/CVE-2022-25688.md): Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25670](https://cve.now/CVE-2022-25670.md): Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25669](https://cve.now/CVE-2022-25669.md): Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25656](https://cve.now/CVE-2022-25656.md): Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payloa (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25654](https://cve.now/CVE-2022-25654.md): Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snap (CVSS 6.7, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2022-25652](https://cve.now/CVE-2022-25652.md): Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking (CVSS 9.0, Qualcomm Snapdragon Wired Infrastructure and Networking)
- [CVE-2022-25653](https://cve.now/CVE-2022-25653.md): Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity, Snapdragon (CVSS 6.8, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2022-22105](https://cve.now/CVE-2022-22105.md): Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdr (CVSS 9.4, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2022-22095](https://cve.now/CVE-2022-22095.md): Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock i (CVSS 8.4, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2022-22094](https://cve.now/CVE-2022-22094.md): memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon (CVSS 7.8, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2022-22093](https://cve.now/CVE-2022-22093.md): Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from (CVSS 7.8, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2022-22092](https://cve.now/CVE-2022-22092.md): Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdrago (CVSS 7.8, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2022-22091](https://cve.now/CVE-2022-22091.md): Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapd (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-22081](https://cve.now/CVE-2022-22081.md): Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearabl (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdrag…)
- [CVE-2022-22089](https://cve.now/CVE-2022-22089.md): Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, (CVSS 8.4, Qualcomm Snapdragon Connectivity, Snapdragon Mobile, Snapdr…)
- [CVE-2022-22074](https://cve.now/CVE-2022-22074.md): Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-22066](https://cve.now/CVE-2022-22066.md): Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Sn (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-23560](https://cve.now/CVE-2020-23560.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions\_W+0x000000000001bcab. (no CVSS)
- [CVE-2020-23559](https://cve.now/CVE-2020-23559.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions\_W+0x0000000000007d7f. (no CVSS)
- [CVE-2020-23558](https://cve.now/CVE-2020-23558.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions\_W+0x0000000000007f4b. (no CVSS)
- [CVE-2020-23557](https://cve.now/CVE-2020-23557.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions\_W+0x000000000000755d. (no CVSS)
- [CVE-2020-23556](https://cve.now/CVE-2020-23556.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28. (no CVSS)
- [CVE-2020-23555](https://cve.now/CVE-2020-23555.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e. (no CVSS)
- [CVE-2020-23554](https://cve.now/CVE-2020-23554.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20. (no CVSS)
- [CVE-2020-23553](https://cve.now/CVE-2020-23553.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33. (no CVSS)
- [CVE-2020-23552](https://cve.now/CVE-2020-23552.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e62. (no CVSS)
- [CVE-2020-23551](https://cve.now/CVE-2020-23551.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30. (no CVSS)
- [CVE-2020-23550](https://cve.now/CVE-2020-23550.md): IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e82. (no CVSS)
- [CVE-2022-36536](https://cve.now/CVE-2022-36536.md): An issue in the component post\_applogin.php of Super Flexible Software GmbH & Co. (no CVSS)
- [CVE-2022-36533](https://cve.now/CVE-2022-36533.md): Super Flexible Software GmbH & Co. (no CVSS)
- [CVE-2022-36532](https://cve.now/CVE-2022-36532.md): Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE\_EDITOR privileges to upload an (no CVSS)
- [CVE-2022-35415](https://cve.now/CVE-2022-35415.md): An improper input validation in NI System Configuration Manager before 22.5 may allow a privileged user to potentially enable escalation of (no CVSS)
- [CVE-2022-34002](https://cve.now/CVE-2022-34002.md): The ‘document’ parameter of PDS Vista 7’s /application/documents/display.aspx page is vulnerable to a Local File Inclusion vulnerability whi (no CVSS)
- [CVE-2022-26959](https://cve.now/CVE-2022-26959.md): There are two full (read/write) Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application. (CVSS 10.0)
- [CVE-2021-40017](https://cve.now/CVE-2021-40017.md): The HW\_KEYMASTER module lacks the validity check of the key format. (no CVSS, HarmonyOS;EMUI)
- [CVE-2022-2863](https://cve.now/CVE-2022-2863.md): WPvivid Backup \< 0.9.76 - Admin+ Arbitrary File Read (no CVSS, Migration, Backup, Staging – WPvivid)
- [CVE-2022-36534](https://cve.now/CVE-2022-36534.md): Super Flexible Software GmbH & Co. (no CVSS)
- [CVE-2022-39002](https://cve.now/CVE-2022-39002.md): Double free vulnerability in the storage module. (no CVSS, HarmonyOS;EMUI;Magic UI)
- [CVE-2022-40149](https://cve.now/CVE-2022-40149.md): Stack Buffer Overflow in Jettison (CVSS 6.5, Jettison · org.codehaus.jettison:jettison)
- [CVE-2022-40150](https://cve.now/CVE-2022-40150.md): Stack Buffer Overflow in Jettison (CVSS 6.5, Jettison · org.codehaus.jettison:jettison)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-09-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.