CVEs published October 14, 2022
186 CVEs were published on October 14, 2022: 21 critical, 72 high.
- Published
- 186
- Critical
- 21
- High
- 72
- Medium
- 72
- Low
- 13
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 21
Most affected products
- Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- 38
- Huawei HarmonyOS · Huawei EMUI
- 30
- Adobe ColdFusion
- 13
- Adobe Dimension
- 9
- Adobe Acrobat Reader
- 6
- gocd
- 4
- Huawei HarmonyOS
- 4
- OpenHarmony
- 4
- Android
- 3
- FBX SDK
- 3
Critical 21
- CVE-2022-35698Adobe Commerce Stored XSS Arbitrary code executionAdobe Magento Commerce · magento/community-edition +1
- CVE-2022-35711Adobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe ColdFusion
- CVE-2022-35690Adobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution VulnerabilityAdobe ColdFusion
- CVE-2022-35712Adobe ColdFusion ODBC Agent Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe ColdFusion
- CVE-2022-35710Adobe ColdFusion ODBC Server Stack-based Buffer Overflow Remote Code Execution VulnerabilityAdobe ColdFusion
- CVE-2022-38418Adobe ColdFusion Application Server Directory Traversal Remote Code Execution VulnerabilityAdobe ColdFusion
- CVE-2022-32177Gin-vue-admin - Unrestricted File Uploadgin-vue-admin
- CVE-2021-46839The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause maliciHuawei HarmonyOS · Huawei EMUI
- CVE-2021-46840The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerabilitHuawei HarmonyOS · Huawei EMUI
- CVE-2022-37602Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js.grunt-karma
- CVE-2022-38980The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of thiHuawei HarmonyOS
- CVE-2022-38982The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked.Huawei HarmonyOS
- CVE-2022-38983The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary codeHuawei HarmonyOS · Huawei EMUI
- CVE-2022-38986The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulneHuawei HarmonyOS · Huawei EMUI
- CVE-2022-39311Compromised agents may be able to execute remote code on GoCD Servergocd
- CVE-2022-41436An issue in OXHOO TP50 OXH1.50 allows unauthenticated attackers to access the administrative panel via browsing to the URL http://device_ip/
- CVE-2022-41477A security issue was discovered in WeBid <=1.2.2.
- CVE-2022-41578The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41580The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause maliciousHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41581The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause maliciousHuawei HarmonyOS · Huawei EMUI
- CVE-2022-42064Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell.
High 72
- CVE-2022-38448Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-38444Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-38446Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-38442Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-38445Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-38447Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-38441Adobe Dimension GLB File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-38440Adobe Dimension SKP File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Dimension
- CVE-2022-42339Adobe Acrobat Reader DC XFA Parsing Stack Overflow Remote Code ExecutionAdobe Acrobat Reader
- CVE-2022-38450Adobe Acrobat Reader DC XFA Parsing Stack Overflow Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-42341Adobe ColdFusion Improper Restriction of XML External Entity Reference Arbitrary file system readAdobe ColdFusion
- CVE-2022-38424Adobe ColdFusion Application Server Directory Traversal Arbitrary file system writeAdobe ColdFusion
- CVE-2022-42340Adobe ColdFusion Improper Input Validation Arbitrary file system readAdobe ColdFusion
- CVE-2022-38422Adobe ColdFusion Application Server Directory Traversal Information Disclosure VulnerabilityAdobe ColdFusion
- CVE-2022-38421Adobe ColdFusion Application Server Directory Traversal Remote Code Execution VulnerabilityAdobe ColdFusion
- CVE-2022-38419Adobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system readAdobe ColdFusion
- CVE-2022-38420Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-serviceAdobe ColdFusion
- CVE-2022-41623WordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerabilityVillatheme ALD - AliExpress Dropshipping and Fulfillment fo…
- CVE-2022-28759Zoom On-Premise Deployments: Improper Access ControlZoom Video Communications Zoom On-Premise Meeting Connector…
- CVE-2022-28762Debugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOSZoom Video Communications Zoom Client for Meetings for MacOS
- CVE-2022-42463Softbus_server in communication subsystem has a authenication bypass vulnerability in a callback handler function. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary co ...OpenHarmony
- CVE-2022-42488Startup subsystem missed permission validation in param service. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services.OpenHarmony
- CVE-2022-36803The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permissiAtlassian Jira Align
- CVE-2021-0699In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2021-27406PerFact OpenVPN-ClientPerFact OpenVPN-Client
- CVE-2022-20397In SitRilClient_OnResponse of SitRilSe.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-2780In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to initiate an SMB requesOctopus Deploy Octopus Server
- CVE-2022-2963A vulnerability found in jasper.jasper
- CVE-2022-2985In music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-32149Denial of service via crafted Accept-Language header in golang.org/x/text/languagegolang.org/x/text/language · golang.org/x/text
- CVE-2022-3495SourceCodester Simple Online Public Access Catalog Admin Login sql injectionSourceCodester Simple Online Public Access Catalog
- CVE-2022-37603A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.loader-utils
- CVE-2022-38669In soundrecorder service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38670In soundrecorder service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38698In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38977The HwAirlink module has a heap overflow vulnerability.Successful exploitation of this vulnerability may cause out-of-bounds writes, resultiHuawei HarmonyOS
- CVE-2022-38981The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage.Huawei HarmonyOS
- CVE-2022-38984The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability Huawei HarmonyOS · Huawei EMUI
- CVE-2022-38985The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidenHuawei HarmonyOS · Huawei EMUI
- CVE-2022-38998The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability Huawei HarmonyOS · Huawei EMUI
- CVE-2022-39011The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulneHuawei HarmonyOS · Huawei EMUI
- CVE-2022-39064An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e.Ikea TRÅDFRI smart lighting system
- CVE-2022-39080In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39107In Soundrecorder service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39108In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39109In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39110In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39111In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39117In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-41302An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK version 2020.FBX SDK
- CVE-2022-41303A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FBX SDK 2020 version caFBX SDK
- CVE-2022-41304An Out-Of-Bounds Write Vulnerability in Autodesk FBX SDK 2020 version and prior may lead to code execution through maliciously crafted FBX fFBX SDK
- CVE-2022-41305A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by wrSubassembly Composer
- CVE-2022-41306A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write accAutodesk® Design Review
- CVE-2022-41307A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by reSubassembly Composer
- CVE-2022-41308A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by reSubassembly Composer
- CVE-2022-41416Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /user/update_b
- CVE-2022-41535Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/manag
- CVE-2022-41536Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/manag
- CVE-2022-41538Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /Wedding-Management-PHP/admin/photos_
- CVE-2022-41539Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/users_add.php.
- CVE-2022-41576The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41577The kernel server has a vulnerability of not verifying the length of the data transferred in the user space.Successful exploitation of this Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41582The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41583The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability wilHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41584The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41585The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-41586The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41588The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integriHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41589The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affectHuawei HarmonyOS · Huawei EMUI
- CVE-2022-42070Online Birth Certificate Management System version 1.0 is vulnerable to Cross Site Request Forgery (CSRF).
- CVE-2022-42234There is a file inclusion vulnerability in the template management module in UCMS 1.6
Medium, low and unrated 93
- CVE-2022-38443Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Dimension
- CVE-2022-35689Adobe Commerce Improper Access Control Security feature bypassAdobe Magento Commerce · magento/community-edition +1
- CVE-2022-38437Adobe Acrobat Reader Use After Free Memory leakAdobe Acrobat Reader
- CVE-2022-38449Adobe Acrobat Reader DC JP2 File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-35691Adobe Acrobat Reader NULL Pointer Dereference Application denial-of-serviceAdobe Acrobat Reader
- CVE-2022-42342Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-38423Adobe ColdFusion Application Server Directory Traversal Information Disclosure VulnerabilityAdobe ColdFusion
- CVE-2022-28761Zoom On-Premise Deployments: Improper Access ControlZoom Video Communications Zoom On-Premise Meeting Connector…
- CVE-2022-28760Zoom On-Premise Deployments: Improper Access ControlZoom Video Communications Zoom On-Premise Meeting Connector…
- CVE-2022-42464Kernel memory pool override in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information including kernel pointer, which could be used in furth ...OpenHarmony
- CVE-2022-41686Out-of-bound memory read and write in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The proc ...OpenHarmony
- CVE-2022-36802The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access internaAtlassian Jira Align
- CVE-2021-22685Cassia Networks Access Controller Path TraversalCassia Networks Access Controller
- CVE-2022-20464In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code.Android
- CVE-2022-2850A flaw was found In 389-ds-base.389-ds-base
- CVE-2022-2879Unbounded memory consumption when reading headers in archive/tarGo standard library archive/tar · stdlib
- CVE-2022-2880Incorrect sanitization of forwarded query parameters in net/http/httputilGo standard library net/http/httputil · stdlib
- CVE-2022-2984In jpg driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-3439Allocation of Resources Without Limits or Throttling in ikus060/rdiffwebikus060/rdiffweb · rdiffweb
- CVE-2022-3479A vulnerability found in nss.nss
- CVE-2022-3496SourceCodester Human Resource Management System Admin Panel employeeadd.php access controlSourceCodester Human Resource Management System
- CVE-2022-3497SourceCodester Human Resource Management System Master List cross site scriptingSourceCodester Human Resource Management System
- CVE-2022-3502Human Resource Management System Leave cross site scriptingHuman Resource Management System
- CVE-2022-3503SourceCodester Purchase Order Management System Supplier cross site scriptingSourceCodester Purchase Order Management System
- CVE-2022-3504SourceCodester Sanitization Management System sql injectionSourceCodester Sanitization Management System
- CVE-2022-35040OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b5567.
- CVE-2022-35041OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b558f.
- CVE-2022-35042OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x4adb11.
- CVE-2022-35043OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c08a6.
- CVE-2022-35044OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x617087.
- CVE-2022-35045OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0d63.
- CVE-2022-35046OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0466.
- CVE-2022-35047OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05aa.
- CVE-2022-35048OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0b2c.
- CVE-2022-35049OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b03b5.
- CVE-2022-3505SourceCodester Sanitization Management System cross site scriptingSourceCodester Sanitization Management System
- CVE-2022-35050OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b04de.
- CVE-2022-35051OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b55af.
- CVE-2022-35052OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b84b1.
- CVE-2022-35053OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x61731f.
- CVE-2022-35054OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6171b2.
- CVE-2022-35055OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0473.
- CVE-2022-35056OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b0478.
- CVE-2022-35058OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b05ce.
- CVE-2022-35059OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6c0414.
- CVE-2022-3506Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wpbarrykooij/related-posts-for-wp
- CVE-2022-38671In camera driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38672In face detect driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38673In face detect driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38676In gpu driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38677In cell service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38679In music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38687In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38688In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38689In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38690In camera driver, there is a possible memory corruption due to improper locking.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38697In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39065A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled wiIkea TRÅDFRI gateway system
- CVE-2022-39103In Gallery service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39105In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39112In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39113In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39114In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39115In Music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39120In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39121In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39122In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39123In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39124In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39125In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39126In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39127In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39128In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39308GoCD API authentication of user access tokens subject to timing attack during comparisongocd
- CVE-2022-39309GoCD server secret encryption/decryption key leaked to agents during material serializationgocd
- CVE-2022-39310Malicious agent may be able to impersonate another agent in GoCDgocd
- CVE-2022-41587Uncaptured exceptions in the home screen module.EMUI
- CVE-2022-41592The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).SuccessfHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41593The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).SuccessfHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41594The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).SuccessfHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41595The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).SuccessfHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41597The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).SuccessfHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41598The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).SuccessfHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41600The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).SuccessfHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41601The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).SuccessfHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41602The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).SuccessfHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41603The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA).SuccessfHuawei HarmonyOS · Huawei EMUI
- CVE-2022-41715Memory exhaustion when compiling regular expressions in regexp/syntaxGo standard library regexp/syntax · stdlib
- CVE-2022-42066Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php.
- CVE-2022-42067Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference (IDOR) vulnerability
- CVE-2022-42069Online Birth Certificate Management System version 1.0 suffers from a persistent Cross Site Scripting (XSS) vulnerability.
- CVE-2022-42071Online Birth Certificate Management System version 1.0 suffers from a Cross Site Scripting (XSS) Vulnerability.
- CVE-2022-42232Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=delete_storage.