CVEs published November 9, 2022
179 CVEs were published on November 9, 2022: 16 critical, 89 high. 6 are now in CISA KEV.
- Published
- 179
- Critical
- 16
- High
- 89
- Medium
- 61
- Low
- 7
- Unrated
- 6
- Now in CISA KEV
- 6
- Fix available
- 118
Most affected products
- Microsoft Windows
- 38
- Huawei HarmonyOS · Huawei EMUI
- 19
- GitLab
- 12
- Google Chrome
- 12
- Samsung Mobile Devices
- 9
- InHand Networks InRouter302
- 6
- VMware Workspace ONE Assist
- 5
- WAGO 750-81xx/xxx-xxxFW · WAGO 750-82xx/xxx-xxx +4
- 4
- Microsoft 365 Apps for Enterprise · Microsoft Excel 2013… +2
- 3
- Microsoft Exchange Server 2013 Cumulative Update · Micro… +1
- 3
Critical 16
- CVE-2022-32588An out-of-bounds write vulnerability exists in the PICT parsing pctwread_14841 functionality of Accusoft ImageGear 20.0.Accusoft ImageGear
- CVE-2021-34569WAGO I/O-Check Service prone to Out-of-bounds WriteWAGO 750-81xx/xxx-xxxFW · WAGO 750-82xx/xxx-xxx +4
- CVE-2021-34566WAGO I/O-Check Service prone to Memory OverflowWAGO 750-81xx/xxx-xxxFW · WAGO 750-82xx/xxx-xxx +4
- CVE-2021-46851The DRM module has a vulnerability in verifying the secure memory attributes.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-31685VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability.VMware Workspace ONE Assist
- CVE-2022-31686VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability.VMware Workspace ONE Assist
- CVE-2022-31687VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability.VMware Workspace ONE Assist
- CVE-2022-31689VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability.VMware Workspace ONE Assist
- CVE-2022-3890Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had compromised the rendeGoogle Chrome
- CVE-2022-40797Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDEN_UPLOADS value in conf.json only blocks .ph
- CVE-2022-43058Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes
- CVE-2022-44551The iaware module has a vulnerability in thread security.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-44558The AMS module has a vulnerability of serialization/deserialization mismatch.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-44559The AMS module has a vulnerability of serialization/deserialization mismatch.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-44562The system framework layer has a vulnerability of serialization/deserialization mismatch.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-45062In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper.
High 89
- CVE-2022-27673Insufficient access controls in the AMD Link Android app may potentially result in information disclosure.AMD Link Android
- CVE-2022-23831Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential WindAMD μProf
- CVE-2022-27674Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to aAMD μProf
- CVE-2021-26360An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers.AMD Radeon RX 6000 Series & PRO W6000 Series
- CVE-2021-26391Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gaAMD Radeon RX 5000 Series & PRO W5000 Series · AMD Radeon R…
- CVE-2022-25932The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474.InHand Networks InRouter302
- CVE-2021-34579PHOENIX CONTACT: FL MGUARD DM version 1.12.0 and 1.13.0 Improper Privilege ManagementPHOENIX CONTACT FL MGUARD DM
- CVE-2022-41978WordPress Zoho CRM Lead Magnet plugin <= 1.7.5.8 - Auth. Arbitrary Options Update vulnerabilityZoho CRM Lead Magnet
- CVE-2021-34568WAGO I/O-Check Service prone to Allocation of Resources Without Limits or ThrottlingWAGO 750-81xx/xxx-xxxFW · WAGO 750-82xx/xxx-xxx +4
- CVE-2021-34567WAGO I/O-Check Service prone to Out-of-bounds ReadWAGO 750-81xx/xxx-xxxFW · WAGO 750-82xx/xxx-xxx +4
- CVE-2022-31253openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itselfopenSUSE Factory
- CVE-2021-46852The memory management module has the logic bypass vulnerability.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-3265A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prioGitLab
- CVE-2022-3446Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption viaGoogle Chrome
- CVE-2022-3448Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a user to engage in speciGoogle Chrome
- CVE-2022-3449Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who convinced a user to install a malicious extGoogle Chrome
- CVE-2022-3450Use after free in Peer Connection in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption Google Chrome
- CVE-2022-37966Windows Kerberos RC4-HMAC Elevation of Privilege VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2022-37967Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2022-37992Windows Group Policy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-38014Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege VulnerabilityMicrosoft Azure EFLOW · Microsoft Windows Subsystem for Lin…
- CVE-2022-38023Netlogon RPC Elevation of Privilege VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +2
- CVE-2022-3885Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2022-3886Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruptiGoogle Chrome
- CVE-2022-3887Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via Google Chrome
- CVE-2022-3888Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a Google Chrome
- CVE-2022-3889Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2022-39368Californium Failing DTLS handshakes causes Data Loss due to throttling blocking processing of recordseclipse-californium californium · org.eclipse.californium:s…
- CVE-2022-39880Improper input validation vulnerability in DualOutFocusViewer prior to SMR Nov-2022 Release 1 allows local attacker to perform an arbitrary Samsung Mobile Devices
- CVE-2022-39882Heap overflow vulnerability in sflacf_fal_bytes_peek function in libsmat.so library prior to SMR Nov-2022 Release 1 allows local attacker toSamsung Mobile Devices
- CVE-2022-41039Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-41044Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-41045Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41047Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-41048Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-41050Windows Extensible File Allocation Table Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41051Azure RTOS GUIX Studio Remote Code Execution VulnerabilityMicrosoft Azure RTOS GUIX Studio
- CVE-2022-41052Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-41053Windows Kerberos Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-41054Windows Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41056Network Policy Server (NPS) RADIUS Protocol Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-41057Windows HTTP.sys Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41058Windows Network Address Translation (NAT) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-41061Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office 201… +8
- CVE-2022-41062Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server 2013 Service Pack… +2
- CVE-2022-41063Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel 2013… +2
- CVE-2022-41073Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41078Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2022-41079Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2022-41080Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2022-41085Azure CycleCloud Elevation of Privilege VulnerabilityMicrosoft Azure CycleCloud
- CVE-2022-41088Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-41092Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41093Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41095Windows Digital Media Receiver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41096Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41100Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41101Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41102Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41106Microsoft Excel Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel 2013… +2
- CVE-2022-41107Microsoft Office Graphics Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2022-41109Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41113Windows Win32 Kernel Subsystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41114Windows Bind Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41118Windows Scripting Languages Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-41119Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio
- CVE-2022-41120Microsoft Windows System Monitor (Sysmon) Elevation of Privilege VulnerabilityMicrosoft Windows Sysmon
- CVE-2022-41123Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2022-41125Windows CNG Key Isolation Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41128Windows Scripting Languages Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-43031DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add Administrator account
- CVE-2022-43277Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ip/youthappam/php_action/editFile.php.
- CVE-2022-43278Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the categoriesId parameter at /php_action/fetchSe
- CVE-2022-43290Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editcategory.php.
- CVE-2022-43291Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editclient.php.
- CVE-2022-43292Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /youthappam/editfood.php.
- CVE-2022-43310An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when sea
- CVE-2022-44546The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-44547The Display Service module has a UAF vulnerability.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-44549The LBS module has a vulnerability in geofencing API access.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-44550The graphics display module has a UAF vulnerability when traversing graphic layers.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-44552The lock screen module has defects introduced in the design process.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-44554The power module has a vulnerability in permission verification.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-44555The DDMP/ODMF module has a service hijacking vulnerability.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-44557The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-44561The preset launcher module has a permission verification vulnerability.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-45059An issue was discovered in Varnish Cache 7.x before 7.1.2 and 7.2.x before 7.2.1.
- CVE-2022-45060An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1.
- CVE-2022-45061An issue was discovered in Python before 3.11.1.libpython · python +1
Medium, low and unrated 74
- CVE-2022-44590WordPress Simple Video Embedder plugin <= 2.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityJames Lao Simple Video Embedder
- CVE-2022-23824IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosureAMD Processors
- CVE-2021-26392Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with priAMD Radeon RX 5000 Series & PRO W5000 Series · AMD Radeo… +4
- CVE-2020-12930Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially lAMD Radeon RX 5000 Series & PRO W5000 Series · AMD Ryzen… +2
- CVE-2021-26393Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with pAMD Radeon RX 5000 Series & PRO W5000 Series · AMD Radeo… +3
- CVE-2020-12931Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentiallAMD Radeon RX 5000 Series & PRO W5000 Series · AMD Ryzen… +2
- CVE-2022-30543A leftover debug code vulnerability exists in the console infct functionality of InHand Networks InRouter302 V3.5.45.InHand Networks InRouter302
- CVE-2022-29888A leftover debug code vulnerability exists in the httpd port 4444 upload.cgi functionality of InHand Networks InRouter302 V3.5.45.InHand Networks InRouter302
- CVE-2022-29481A leftover debug code vulnerability exists in the console nvram functionality of InHand Networks InRouter302 V3.5.45.InHand Networks InRouter302
- CVE-2022-28689A leftover debug code vulnerability exists in the console support functionality of InHand Networks InRouter302 V3.5.45.InHand Networks InRouter302
- CVE-2022-26023A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45.InHand Networks InRouter302
- CVE-2022-0031Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR EnginePalo Alto Networks Cortex XSOAR
- CVE-2021-34577Hardcoded credentials in Kaden PICOFLUX AiRKaden PICOFLUX AiR
- CVE-2022-43488WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 - Cross-Site Request Forgery (CSRF) vulnerabilityAlgolPlus Advanced Dynamic Pricing for WooCommerce
- CVE-2022-2761An information disclosure issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15GitLab
- CVE-2022-29836Post-Auth Path Traversal Vulnerability Allows to Custom Package Installation via HTTP APIWestern Digital My Cloud Home · SanDisk ibi
- CVE-2022-31688VMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS) vulnerability.VMware Workspace ONE Assist
- CVE-2022-3280An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an GitLab
- CVE-2022-3285Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 aGitLab
- CVE-2022-3413Incorrect authorization during display of Audit Events in GitLab EE affecting all versions from 14.5 prior to 15.3.5, 15.4 prior to 15.4.4, GitLab
- CVE-2022-3445Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2022-3447Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the conteGoogle Chrome
- CVE-2022-3483An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions starting from 15.4 beforeGitLab
- CVE-2022-3486An open redirect vulnerability in GitLab EE/CE affecting all versions from 9.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5GitLab
- CVE-2022-3706Improper authorization in GitLab CE/EE affecting all versions from 7.14 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 alloGitLab
- CVE-2022-3726Lack of sand-boxing of OpenAPI documents in GitLab CE/EE affecting all versions from 12.6 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prGitLab
- CVE-2022-3793An improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15GitLab
- CVE-2022-38015Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-3818An uncontrolled resource consumption issue when parsing URLs in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, aGitLab
- CVE-2022-3819An improper authorization issue in GitLab CE/EE affecting all versions from 15.0 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15GitLab
- CVE-2022-39306Grafana contains Improper Input Validationgrafana · github.com/grafana/grafana
- CVE-2022-39307Grafana subject to Exposure of Sensitive Information resulting in User enumeration via forget passwordgrafana · github.com/grafana/grafana
- CVE-2022-39879Improper authorization vulnerability in?CallBGProvider prior to SMR Nov-2022 Release 1 allows local attacker to grant permission for accessiSamsung Mobile Devices
- CVE-2022-39881Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to reSamsung Mobile Devices
- CVE-2022-39883Improper authorization vulnerability in StorageManagerService prior to SMR Nov-2022 Release 1 allows local attacker to call privileged API.Samsung Mobile Devices
- CVE-2022-39884Improper access control vulnerability in IImsService prior to SMR Nov-2022 Release 1 allows local attacker to access to Call information.Samsung Mobile Devices
- CVE-2022-39885Improper access control vulnerability in BootCompletedReceiver_CMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attackeSamsung Mobile Devices
- CVE-2022-39886Improper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022 Release 1 allows local attacker to access Samsung Mobile Devices
- CVE-2022-39887Improper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to configurSamsung Mobile Devices
- CVE-2022-39889Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to accessSamsung Mobile GalaxyWatch4Plugin
- CVE-2022-39890Improper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get sensitive information.Samsung Mobile Samsung Billing
- CVE-2022-39891Heap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to version 4.0.41.3 allows attacker to get informaSamsung Mobile Editor Lite
- CVE-2022-39892Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature.Samsung Mobile Samsung Pass
- CVE-2022-39893Sensitive information exposure vulnerability in FmmBaseModel in Galaxy Buds Pro Manage prior to version 4.1.22092751 allows local attackers Samsung Mobile Galaxy Buds Pro Manager
- CVE-2022-41049Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-41055Windows Human Interface Device Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-41060Microsoft Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +5
- CVE-2022-41064.NET Framework Information Disclosure VulnerabilityMicrosoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 ·… +3
- CVE-2022-41066Microsoft Dynamics Business Central Information Disclosure VulnerabilityMicrosoft Dynamics 365 Business Central Spring 2019 Upda… +2
- CVE-2022-41086Windows Group Policy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-41090Windows Point-to-Point Tunneling Protocol Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-41091Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-41097Network Policy Server (NPS) RADIUS Protocol Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-41098Windows GDI+ Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-41099BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-41103Microsoft Word Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +5
- CVE-2022-41104Microsoft Excel Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Excel 2013… +2
- CVE-2022-41105Microsoft Excel Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office
- CVE-2022-41116Windows Point-to-Point Tunneling Protocol Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-41122Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server 2013 Service Pack… +2
- CVE-2022-42964Exponential ReDoS in pymatgen leads to denial of servicepymatgen
- CVE-2022-42965Exponential ReDoS in snowflake-connector-python leads to denial of servicesnowflake-connector-python
- CVE-2022-42966Exponential ReDoS in cleo leads to denial of servicecleo
- CVE-2022-43118A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted pa
- CVE-2022-43119A cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts or HTML via a crafted
- CVE-2022-43120A cross-site scripting (XSS) vulnerability in the /panel/fields/add component of Intelliants Subrion CMS v4.2.1 allows attackers to execute intelliants/subrion
- CVE-2022-43121A cross-site scripting (XSS) vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitraryintelliants/subrion
- CVE-2022-43320FeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /web/admin/index.php?feehi/cms
- CVE-2022-43321Shopwind v3.4.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the component /common/library/Page.php.
- CVE-2022-44244An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator.lin-cms · io.github.talelin:lin-cms-core
- CVE-2022-44548There is a vulnerability in permission verification during the Bluetooth pairing process.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-44553The HiView module has a vulnerability of not filtering third-party apps out when the HiView module traverses to invoke the system provider.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-44560The launcher module has an Intent redirection vulnerability.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-44563There is a race condition vulnerability in SD upgrade mode.Huawei HarmonyOS · Huawei EMUI