CVEs published November 1, 2022
211 CVEs were published on November 1, 2022: 10 critical, 81 high. 2 are now in CISA KEV.
- Published
- 211
- Critical
- 10
- High
- 81
- Medium
- 85
- Low
- 6
- Unrated
- 29
- Now in CISA KEV
- 2
- Fix available
- 144
Most affected products
- Apple macOS
- 40
- Google Chrome
- 30
- Apple macOS · Apple watchOS
- 20
- xen
- 19
- Apple macOS · Apple tvOS +1
- 15
- Axiomatic Bento4
- 9
- Apple iOS · Apple watchOS
- 5
- Apple iOS and iPadOS
- 5
- go-ibax · github.com/IBAX-io/go-ibax
- 5
- Apple iOS
- 4
Critical 10
- CVE-2022-41552Server-Side Request Forgery Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center AnalyzerHitachi Infrastructure Analytics Advisor · Hitachi Ops Cent…
- CVE-2022-2572In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keysOctopus Deploy Octopus Server
- CVE-2022-27582Password recovery vulnerability in SICK SIM4000 (PPC) Partnumber 1078787 allows an unprivileged remote attacker to gain access to the userleSICK SIM4000
- CVE-2022-27584Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlevel SICK SIM2000ST
- CVE-2022-27585Password recovery vulnerability in SICK SIM1000 FX Partnumber 1097816 and 1097817 with firmware version <1.6.0 allows an unprivileged remoteSICK SIM1000 FX
- CVE-2022-27586Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version <2.0.0 allows an unprivileged remote attacker to gaSICK SIM1004
- CVE-2022-32941The issue was addressed with improved bounds checks.Apple macOS
- CVE-2022-42808An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS · Apple tvOS +1
- CVE-2022-42813A certificate validation issue existed in the handling of WKWebView.Apple macOS · Apple tvOS +1
- CVE-2022-44542lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object destructor execution via
High 81
- CVE-2022-3780Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow deletDevolutions Remote Desktop Manager
- CVE-2022-3509Parsing issue in protobuf textformatGoogle ProtocolBuffers · com.google.protobuf:protobuf-ja… +1
- CVE-2022-3369Improper handling of registry symbolic links in Bitdefender EnginesBitdefender Engines
- CVE-2022-25885Denial of Service (DoS)muhammara · hummus
- CVE-2022-25892Denial of Service (DoS)muhammara · hummus
- CVE-2022-26709A use after free issue was addressed with improved memory management.Apple macOS · Apple watchOS
- CVE-2022-26710A use after free issue was addressed with improved memory management.Apple macOS · Apple watchOS
- CVE-2022-26716A memory corruption issue was addressed with improved state management.Apple macOS · Apple watchOS
- CVE-2022-26717A use after free issue was addressed with improved memory management.Apple macOS · Apple watchOS
- CVE-2022-26719A memory corruption issue was addressed with improved state management.Apple macOS · Apple watchOS
- CVE-2022-26730A memory corruption issue existed in the processing of ICC profiles.Apple macOS
- CVE-2022-26762A memory corruption issue was addressed with improved memory handling.Apple macOS
- CVE-2022-32794A logic issue was addressed with improved state management.Apple macOS
- CVE-2022-32865The issue was addressed with improved memory handling.Apple macOS
- CVE-2022-32866The issue was addressed with improved memory handling.Apple macOS · Apple watchOS
- CVE-2022-32887The issue was addressed with improved memory handling.Apple iOS
- CVE-2022-32888An out-of-bounds write issue was addressed with improved bounds checking.Apple macOS · Apple watchOS
- CVE-2022-32889The issue was addressed with improved memory handling.Apple iOS · Apple watchOS
- CVE-2022-32890A logic issue was addressed with improved checks.Apple macOS
- CVE-2022-32898The issue was addressed with improved memory handling.Apple macOS · Apple watchOS
- CVE-2022-32899The issue was addressed with improved memory handling.Apple macOS · Apple watchOS
- CVE-2022-32903A use after free issue was addressed with improved memory management.Apple iOS · Apple watchOS
- CVE-2022-32905This issue was addressed with improved validation of symlinks.Apple macOS
- CVE-2022-32907This issue was addressed with improved checks.Apple iOS · Apple watchOS
- CVE-2022-32910A logic issue was addressed with improved checks.Apple macOS
- CVE-2022-32914A use after free issue was addressed with improved memory management.Apple macOS · Apple watchOS
- CVE-2022-32915A type confusion issue was addressed with improved checks.Apple macOS
- CVE-2022-32922A use after free issue was addressed with improved memory management.Apple macOS
- CVE-2022-32924The issue was addressed with improved memory handling.Apple macOS · Apple tvOS +1
- CVE-2022-32925An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS · Apple watchOS
- CVE-2022-32927The issue was addressed with improved memory handling.Apple iOS and iPadOS
- CVE-2022-32932The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple watchOS
- CVE-2022-32934The issue was addressed with improved memory handling.Apple macOS
- CVE-2022-32939The issue was addressed with improved bounds checks.Apple iOS and iPadOS
- CVE-2022-32940The issue was addressed with improved bounds checks.Apple macOS · Apple tvOS +1
- CVE-2022-32944A memory corruption issue was addressed with improved state management.Apple macOS · Apple tvOS +1
- CVE-2022-32947The issue was addressed with improved memory handling.Apple macOS · Apple watchOS
- CVE-2022-3304Use after free in CSS in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2022-3305Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruptioGoogle Chrome
- CVE-2022-3306Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruptioGoogle Chrome
- CVE-2022-3307Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2022-3308Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform Google Chrome
- CVE-2022-3373Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to perform an out of bounds memory write via a cGoogle Chrome
- CVE-2022-3602X.509 Email Address 4-byte Buffer OverflowOpenSSL · openssl-src
- CVE-2022-3723Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted Google Chrome
- CVE-2022-3786X.509 Email Address Variable Length Buffer OverflowOpenSSL · openssl-src
- CVE-2022-39369Service Hostname Discovery Exploitation in phpCASapereo phpCAS · apereo/phpcas
- CVE-2022-40839A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to
- CVE-2022-42252Apache Tomcat request smuggling via malformed content-lengthApache Software Foundation Apache Tomcat · org.apache.to… +1
- CVE-2022-42327x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and wrixen
- CVE-2022-42791A race condition was addressed with improved state handling.Apple macOS
- CVE-2022-42795A memory consumption issue was addressed with improved memory handling.Apple macOS · Apple watchOS
- CVE-2022-42796This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2022-42800This issue was addressed with improved checks.Apple macOS · Apple watchOS
- CVE-2022-42801A logic issue was addressed with improved checks.Apple macOS · Apple tvOS +1
- CVE-2022-42803A race condition was addressed with improved locking.Apple macOS · Apple tvOS +1
- CVE-2022-42806A race condition was addressed with improved locking.Apple macOS
- CVE-2022-42809The issue was addressed with improved memory handling.Apple macOS
- CVE-2022-42820A memory corruption issue was addressed with improved state management.Apple macOS
- CVE-2022-42823A type confusion issue was addressed with improved memory handling.Apple macOS · Apple tvOS +1
- CVE-2022-42827An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS
- CVE-2022-43081Fast Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /fastfood/purchase.php.
- CVE-2022-43083An arbitrary file upload vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary code vi
- CVE-2022-43085An arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a cra
- CVE-2022-43124Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=us
- CVE-2022-43125Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/m
- CVE-2022-43126Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/ma
- CVE-2022-43127Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/u
- CVE-2022-43221open5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c.
- CVE-2022-43222open5gs v2.4.11 was discovered to contain a memory leak in the component src/smf/pfcp-path.c.
- CVE-2022-43223open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c.
- CVE-2022-43328Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php.
- CVE-2022-43329Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php.
- CVE-2022-43330Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php.
- CVE-2022-43331Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php_action/printOrder.php.
- CVE-2022-43353Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view
- CVE-2022-43354Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/mana
- CVE-2022-43355Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.
- CVE-2022-43362Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parameter at loan_by_class
- CVE-2022-43989Password recovery vulnerability in SICK SIM2x00 (ARM) Partnumber 1092673 and 1081902 with firmware version < 1.2.0 allows an unprivileged reSICK SIM2x00
- CVE-2022-43990Password recovery vulnerability in SICK SIM1012 Partnumber 1098146 with firmware version <2.2.0 allows an unprivileged remote attacker to gaSICK SIM1012
Medium, low and unrated 120
- CVE-2022-3781Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop ManageDevolutions Remote Desktop Manager · Devolutions Server
- CVE-2020-4099HCL Verse for Android is susceptible to an APK signing key check vulnerabilityHCL Software HCL Verse for Android
- CVE-2022-41553Information Exposure Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center AnalyzerHitachi Infrastructure Analytics Advisor · Hitachi Ops Cent…
- CVE-2022-3191Information Exposure Vulnerability in Hitachi Ops Center AnalyzerHitachi Ops Center Analyzer
- CVE-2020-36605File Permissions Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer, Hitachi Ops Center ViewpointHitachi Infrastructure Analytics Advisor · Hitachi Ops C… +1
- CVE-2022-22658An input validation issue was addressed with improved input validation.Apple iOS
- CVE-2022-22677A logic issue in the handling of concurrent media was addressed with improved state handling.Apple macOS
- CVE-2022-23738Incomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo filesGitHub Enterprise Server
- CVE-2022-31777Apache Spark XSS vulnerability in log viewer UI JavascriptApache Software Foundation Apache Spark · pyspark +5
- CVE-2022-32827A memory corruption issue was addressed with improved state management.Apple macOS
- CVE-2022-32835This issue was addressed with improved entitlements.Apple iOS · Apple watchOS
- CVE-2022-32858The issue was addressed with improved memory handling.Apple macOS · Apple watchOS
- CVE-2022-32859A logic issue was addressed with improved state management.Apple iOS
- CVE-2022-32862This issue was addressed with improved data protection.Apple macOS
- CVE-2022-32867This issue was addressed with improved data protection.Apple macOS
- CVE-2022-32870A logic issue was addressed with improved state management.Apple macOS · Apple watchOS
- CVE-2022-32875A logic issue was addressed with improved state management.Apple macOS · Apple watchOS
- CVE-2022-32877A configuration issue was addressed with additional restrictions.Apple macOS
- CVE-2022-32879A logic issue was addressed with improved state management.Apple macOS · Apple watchOS
- CVE-2022-32881A logic issue was addressed with improved restrictions.Apple macOS · Apple watchOS
- CVE-2022-32892An access issue was addressed with improvements to the sandbox.Apple macOS
- CVE-2022-32895A race condition was addressed with improved state handling.Apple macOS
- CVE-2022-32904An access issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2022-32909The issue was addressed with improved handling of caches.Apple iOS
- CVE-2022-32913The issue was addressed with additional restrictions on the observability of app states.Apple macOS · Apple watchOS
- CVE-2022-32918This issue was addressed with improved data protection.Apple macOS
- CVE-2022-32923A correctness issue in the JIT was addressed with improved checks.Apple macOS · Apple tvOS +1
- CVE-2022-32926The issue was addressed with improved bounds checks.Apple macOS · Apple tvOS +1
- CVE-2022-32928A logic issue was addressed with improved restrictions.Apple macOS · Apple watchOS
- CVE-2022-32929A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS
- CVE-2022-32935A lock screen issue was addressed with improved state management.Apple macOS
- CVE-2022-32936An out-of-bounds read was addressed with improved input validation.Apple macOS
- CVE-2022-32938A parsing issue in the handling of directory paths was addressed with improved path validation.Apple macOS
- CVE-2022-32946This issue was addressed with improved entitlements.Apple iOS and iPadOS
- CVE-2022-3309Use after free in assistant in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to engage in Google Chrome
- CVE-2022-3310Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the userGoogle Chrome
- CVE-2022-3311Use after free in import in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentiallGoogle Chrome
- CVE-2022-3312Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass manGoogle Chrome
- CVE-2022-3313Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to spoof security UI via a crafted HTGoogle Chrome
- CVE-2022-3314Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentialGoogle Chrome
- CVE-2022-3315Type confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2022-3316Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass secuGoogle Chrome
- CVE-2022-3317Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypassGoogle Chrome
- CVE-2022-3318Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user Google Chrome
- CVE-2022-3370Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption vGoogle Chrome
- CVE-2022-3443Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restGoogle Chrome
- CVE-2022-3444Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restGoogle Chrome
- CVE-2022-34662Apache DolphinScheduler prior to 3.0.0 allows path traversalApache Software Foundation Apache DolphinScheduler · org.ap…
- CVE-2022-3652Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted Google Chrome
- CVE-2022-3653Heap buffer overflow in Vulkan in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via Google Chrome
- CVE-2022-3654Use after free in Layout in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2022-3655Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a maliciGoogle Chrome
- CVE-2022-3656Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass file system restrictGoogle Chrome
- CVE-2022-3657Use after free in Extensions in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extensiGoogle Chrome
- CVE-2022-3658Use after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed an attacker who convinced a useGoogle Chrome
- CVE-2022-3659Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engagGoogle Chrome
- CVE-2022-3660Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 107.0.5304.62 allowed a remote attacker to hide the coGoogle Chrome
- CVE-2022-3661Insufficient data validation in Extensions in Google Chrome prior to 107.0.5304.62 allowed a remote attacker who had compromised the rendereGoogle Chrome
- CVE-2022-3789Tim Campus Confession Wall share.php sql injectionTim Campus Confession Wall
- CVE-2022-3797eolinker apinto-dashboard login redirecteolinker apinto-dashboard
- CVE-2022-3798IBAX go-ibax tablesInfo sql injectiongo-ibax · github.com/IBAX-io/go-ibax
- CVE-2022-3799IBAX go-ibax tablesInfo sql injectiongo-ibax · github.com/IBAX-io/go-ibax
- CVE-2022-3800IBAX go-ibax rowsInfo sql injectiongo-ibax · github.com/IBAX-io/go-ibax
- CVE-2022-3801IBAX go-ibax rowsInfo sql injectiongo-ibax · github.com/IBAX-io/go-ibax
- CVE-2022-3802IBAX go-ibax rowsInfo sql injectiongo-ibax · github.com/IBAX-io/go-ibax
- CVE-2022-3803eolinker apinto-dashboard cross site scriptingeolinker apinto-dashboard
- CVE-2022-3804eolinker apinto-dashboard login cross site scriptingeolinker apinto-dashboard
- CVE-2022-3807Axiomatic Bento4 Incomplete Fix CVE-2019-13238 resource consumptionAxiomatic Bento4
- CVE-2022-3809Axiomatic Bento4 mp4tag Mp4Tag.cpp ParseCommandLine denial of serviceAxiomatic Bento4
- CVE-2022-3810Axiomatic Bento4 mp42hevc Mp42Hevc.cpp AP4_File denial of serviceAxiomatic Bento4
- CVE-2022-3812Axiomatic Bento4 mp4encrypt AP4_ContainerAtom memory leakAxiomatic Bento4
- CVE-2022-3813Axiomatic Bento4 mp4edit memory leakAxiomatic Bento4
- CVE-2022-3814Axiomatic Bento4 mp4decrypt memory leakAxiomatic Bento4
- CVE-2022-3815Axiomatic Bento4 mp4decrypt memory leakAxiomatic Bento4
- CVE-2022-3816Axiomatic Bento4 mp4decrypt memory leakAxiomatic Bento4
- CVE-2022-3817Axiomatic Bento4 mp4mux memory leakAxiomatic Bento4
- CVE-2022-42309Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during xen
- CVE-2022-42310Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guestxen
- CVE-2022-42311Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/xen
- CVE-2022-42312Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/xen
- CVE-2022-42313Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/xen
- CVE-2022-42314Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/xen
- CVE-2022-42315Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/xen
- CVE-2022-42316Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/xen
- CVE-2022-42317Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/xen
- CVE-2022-42318Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/xen
- CVE-2022-42319Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might need to allocate quitxen
- CVE-2022-42320Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid.xen
- CVE-2022-42321Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations (e.g.xen
- CVE-2022-42322Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains xen
- CVE-2022-42323Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains xen
- CVE-2022-42324Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision.xen
- CVE-2022-42325Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explaxen
- CVE-2022-42326Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explaxen
- CVE-2022-42788A permissions issue existed.Apple macOS
- CVE-2022-42789An issue in code signature validation was addressed with improved checks.Apple macOS
- CVE-2022-42790A logic issue was addressed with improved state management.Apple macOS
- CVE-2022-42793An issue in code signature validation was addressed with improved checks.Apple macOS
- CVE-2022-42798The issue was addressed with improved memory handling.Apple macOS · Apple tvOS +1
- CVE-2022-42799The issue was addressed with improved UI handling.Apple macOS · Apple tvOS +1
- CVE-2022-42810The issue was addressed with improved memory handling.Apple macOS · Apple tvOS
- CVE-2022-42811An access issue was addressed with additional sandbox restrictions.Apple macOS · Apple tvOS +1
- CVE-2022-42814A logic issue was addressed with improved checks.Apple macOS
- CVE-2022-42815This issue was addressed with improved data protection.Apple macOS
- CVE-2022-42817A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple watchOS
- CVE-2022-42818This issue was addressed with improved data protection.Apple macOS
- CVE-2022-42819An access issue was addressed with improved access restrictions.Apple macOS
- CVE-2022-42824A logic issue was addressed with improved state management.Apple macOS · Apple tvOS +1
- CVE-2022-42825This issue was addressed by removing additional entitlements.Apple macOS · Apple tvOS +1
- CVE-2022-42829A use after free issue was addressed with improved memory management.Apple macOS
- CVE-2022-42830The issue was addressed with improved memory handling.Apple macOS
- CVE-2022-42831A race condition was addressed with improved locking.Apple macOS
- CVE-2022-42832A race condition was addressed with improved locking.Apple macOS
- CVE-2022-43076A cross-site scripting (XSS) vulnerability in /admin/edit-admin.php of Web-Based Student Clearance System v1.0 allows attackers to execute a
- CVE-2022-43078A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Web-Based Student Clearance System v1.0 allows attackers to execute arbi
- CVE-2022-43079A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scrip
- CVE-2022-43082A cross-site scripting (XSS) vulnerability in /fastfood/purchase.php of Fast Food Ordering System v1.0 allows attackers to execute arbitrary
- CVE-2022-43084A cross-site scripting (XSS) vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary web
- CVE-2022-43086Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via update_customer.php.
- CVE-2022-43361Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component pop_chart.ph