CVEs published December 16, 2022
189 CVEs were published on December 16, 2022: 6 critical, 53 high.
- Published
- 189
- Critical
- 6
- High
- 53
- Medium
- 106
- Low
- 23
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 16
Most affected products
- Android
- 136
- bigbluebutton
- 5
- NETGEAR Nighthawk WiFi6 Router
- 3
- Symantec Identity Governance and Administration
- 3
- Alinto SOGo
- 2
- Android · :linux_kernel:
- 2
- Apache Software Foundation Apache Zeppelin · org.apache.zep…
- 2
- DataDog guarddog · guarddog
- 2
- VMware vRealize Operations
- 2
- contiki-ng
- 1
Critical 6
- CVE-2021-31650A SQL injection vulnerability in Sourcecodester Online Grading System 1.0 allows remote attackers to execute arbitrary SQL commands via the
- CVE-2021-38241Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework.
- CVE-2022-37832Mutiny 7.2.0-10788 suffers from Hardcoded root password.
- CVE-2022-42529Product: AndroidVersions: Android kernelAndroid ID: A-235292841References: N/AAndroid
- CVE-2022-45796SHARP Multifunction Printer - Command InjectionSHARP multifunction printers
- CVE-2022-47377Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13.4 allows an unprivileged remote attacker toSICK SIM2000ST
High 53
- CVE-2022-3157Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service AttackRockwell Automation CompactLogix · Rockwell Automation C… +2
- CVE-2022-46670Rockwell Automation MicroLogix 1100 & 1400 Vulnerable to Cross-Site Scripting AttackRockwell Automation MicroLogix 1100 & 1400 Controllers ·… +1
- CVE-2022-3166MicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition AttackRockwell Automation MicroLogix
- CVE-2021-35252Common Key Vulnerability in Serv-U FTP ServerSolarWinds Serv-U FTP Server
- CVE-2022-20503In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration due to a missing permiAndroid
- CVE-2022-20506In onCreate of WifiDialogActivity.java, there is a missing permission check.Android
- CVE-2022-20507In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary code execution due to a missing bounds cAndroid
- CVE-2022-20508In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a permissions bypass.Android
- CVE-2022-20512In navigateUpTo of Task.java, there is a possible way to launch an intent handler with a mismatched intent due to improper input validation.Android
- CVE-2022-20516In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow.Android
- CVE-2022-20520In onCreate of various files, there is a possible tapjacking/overlay attack.Android
- CVE-2022-20522In getSlice of ProviderModelSlice.java, there is a missing permission check.Android
- CVE-2022-20524In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free.Android
- CVE-2022-20540In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free.Android
- CVE-2022-20545In bindArtworkAndColors of MediaControlPanel.java, there is a possible way to crash the phone due to improper input validation.Android
- CVE-2022-20547In multiple functions of AdapterService.java, there is a possible way to manipulate Bluetooth state due to a missing permission check.Android
- CVE-2022-20548In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation.Android
- CVE-2022-20550In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy.Android
- CVE-2022-20560Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/AAndroid
- CVE-2022-20561In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free.Android
- CVE-2022-20566In l2cap_chan_put of l2cap_core, there is a possible use after free due to improper locking.Android · :linux_kernel:
- CVE-2022-20567In pppol2tp_create of l2tp_ppp.c, there is a possible use after free due to a race condition.Android
- CVE-2022-20568In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free.Android
- CVE-2022-20582In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation.Android
- CVE-2022-20584In page_number of shared_mem.c, there is a possible code execution in secure world due to improper input validation.Android
- CVE-2022-20585In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation.Android
- CVE-2022-20586In valid_out_of_special_sec_dram_addr of drm_access_control.c, there is a possible EoP due to improper input validation.Android
- CVE-2022-20587In ppmp_validate_wsm of drm_fw.c, there is a possible EoP due to improper input validation.Android
- CVE-2022-20597In ppmpu_set of ppmpu.c, there is a possible EoP due to an integer overflow.Android
- CVE-2022-20598In sec_media_protect of media.c, there is a possible EoP due to an integer overflow.Android
- CVE-2022-20600In TBD of TBD, there is a possible out of bounds write due to memory corruption.Android
- CVE-2022-20601Product: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/AAndroid
- CVE-2022-20602Product: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/AAndroid
- CVE-2022-20603In SetDecompContextDb of RohcDeCompContextOfRbId.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20605In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2022-20607In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20610In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-25628An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4Symantec Identity Governance and Administration
- CVE-2022-26582PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow an attacker to gain root access through command injection in systool
- CVE-2022-3109An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of the return value of av_malloc() andFFmpeg
- CVE-2022-31707vRealize Operations (vROps) contains a privilege escalation vulnerability.VMware vRealize Operations
- CVE-2022-42524In sms_GetTpUdlIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-42527In cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check.Android
- CVE-2022-42531In mmu_map_for_fw of gs_ldfw_load.c, there is a possible mitigation bypass due to Permissive Memory Allocation.Android
- CVE-2022-42534In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input validation.Android
- CVE-2022-42544In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input valiAndroid
- CVE-2022-4563Freedom of the Press SecureDrop gpg-agent.conf symlinkFreedom of the Press SecureDrop
- CVE-2022-46109Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState.
- CVE-2022-46135In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshe
- CVE-2022-46137AeroCMS v0.0.1 is vulnerable to Directory Traversal.
- CVE-2022-47208The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user input.NETGEAR Nighthawk WiFi6 Router
- CVE-2022-47209A support user exists on the device and appears to be a backdoor for Technical Support staff.NETGEAR Nighthawk WiFi6 Router
- CVE-2022-47210The default console presented to users over telnet (when enabled) is restricted to a subset of commands.NETGEAR Nighthawk WiFi6 Router
Medium, low and unrated 130
- CVE-2022-23531Arbitrary file write when scanning a specially-crafted local PyPI packageDataDog guarddog · guarddog
- CVE-2022-23530GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI packageDataDog guarddog · guarddog
- CVE-2022-23490Improper access control to polling votesbigbluebutton
- CVE-2022-2966Delta Electronics DOPSoft Out-of-bounds Read Delta Electronics DOPSoft
- CVE-2022-41972Contiki-NG contains NULL Pointer Dereference in BLE L2CAP modulecontiki-ng
- CVE-2022-41964BigBlueButton contains Response leaks in anonymous pollsbigbluebutton
- CVE-2022-4326Trellix xAgent permission bypass vulnerabilityTrellix xAgent
- CVE-2022-4555WP Shamsi <= 4.1.0 - Missing Authorization to Arbitrary Plugin Deactivationwpvar WP Shamsi – افزونه تاریخ شمسی و فارسی ساز وردپرس
- CVE-2022-41963BigBlueButton contains Improper Preservation of Permissions for whiteboardbigbluebutton
- CVE-2022-46870Apache Zeppelin: Stored XSS in note permissionsApache Software Foundation Apache Zeppelin · org.apache.zep…
- CVE-2021-28655Apache Zeppelin: Arbitrary file deletion vulnerabilityApache Software Foundation Apache Zeppelin · org.apache.zep…
- CVE-2022-41962BigBlueButton contains Incorrect Authorization for setting emoji statusbigbluebutton
- CVE-2022-41961BigBlueButton subject to Ineffective user bansbigbluebutton
- CVE-2022-20199In multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a confused deputy.Android
- CVE-2022-20504In multiple locations of DreamManagerService.java, there is a missing permission check.Android
- CVE-2022-20505In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error.Android
- CVE-2022-20509In mapGrantorDescr of MessageQueueBase.h, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20510In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the notification streaminAndroid
- CVE-2022-20511In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check.Android
- CVE-2022-20513In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20514In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.cpp, there is a possiAndroid
- CVE-2022-20515In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the Settings app due to aAndroid
- CVE-2022-20517In getMessagesByPhoneNumber of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection.Android
- CVE-2022-20518In query of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection.Android
- CVE-2022-20519In onCreate of AddAppNetworksActivity.java, there is a possible way for a guest user to configure WiFi networks due to a missing permission Android
- CVE-2022-20521In sdpu_find_most_specific_service_uuid of sdp_utils.cc, there is a possible way to crash Bluetooth due to a missing null check.Android
- CVE-2022-20523In IncFs_GetFilledRangesStartingFrom of incfs.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20525In enforceVisualVoicemailPackage of PhoneInterfaceManager.java, there is a possible leak of visual voicemail package name due to a permissioAndroid
- CVE-2022-20526In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20527In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20528In findParam of HevcUtils.cpp there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20529In multiple locations of WifiDialogActivity.java, there is a possible limited lockscreen bypass due to a logic error in the code.Android
- CVE-2022-20530In strings.xml, there is a possible permission bypass due to a misleading string.Android
- CVE-2022-20533In getSlice of WifiSlice.java, there is a possible way to connect a new WiFi network from the guest mode due to a missing permission check.Android
- CVE-2022-20535In registerLocalOnlyHotspotSoftApCallback of WifiManager.java, there is a possible way to determine whether an app is installed, without queAndroid
- CVE-2022-20536In registerBroadcastReceiver of RcsService.java, there is a possible way to change preferred TTY mode due to a missing permission check.Android
- CVE-2022-20537In createDialog of WifiScanModeActivity.java, there is a possible way for a Guest user to enable location-sensitive settings due to a missinAndroid
- CVE-2022-20538In getSmsRoleHolder of RoleService.java, there is a possible way to determine whether an app is installed, without query permissions, due toAndroid
- CVE-2022-20539In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20541In phNxpNciHal_ioctl of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20543In multiple locations, there is a possible display crash loop due to improper input validation.Android
- CVE-2022-20544In onOptionsItemSelected of ManageApplications.java, there is a possible bypass of profile owner restrictions due to a missing permission chAndroid
- CVE-2022-20546In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20549In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2022-20552In btif_a2dp_sink_command_ready of btif_a2dp_sink.cc, there is a possible out of bounds read due to a use after free.Android
- CVE-2022-20553In onCreate of LogAccessDialogActivity.java, there is a possible way to bypass a permission check due to a tapjacking/overlay attack.Android
- CVE-2022-20554In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free.Android
- CVE-2022-20555In ufdt_get_node_by_path_len of ufdt_convert.c, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20556In launchConfigNewNetworkFragment of NetworkProviderSettings.java, there is a possible way for the guest user to add a new WiFi network due Android
- CVE-2022-20557In MessageQueueBase of MessageQueueBase.h, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20558In registerReceivers of DeviceCapabilityListener.java, there is a possible way to change preferred TTY mode due to a permissions bypass.Android
- CVE-2022-20559In revokeOwnPermissionsOnKill of PermissionManager.java, there is a possible way to determine whether an app is installed, without query perAndroid
- CVE-2022-20562In various functions of ap_input_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code.Android
- CVE-2022-20563In TBD of ufdt_convert, there is a possible out of bounds read due to memory corruption.Android
- CVE-2022-20564In _ufdt_output_strtab_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2022-20569In thermal_cooling_device_stats_update of thermal_sysfs.c, there is a possible out of bounds write due to improper input validation.Android
- CVE-2022-20570Product: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/AAndroid
- CVE-2022-20571In extract_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free.Android
- CVE-2022-20572In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check.Android · :linux_kernel:
- CVE-2022-20574In sec_sysmmu_info of drm_fw.c, there is a possible out of bounds read due to improper input validation.Android
- CVE-2022-20575In read_ppmpu_info of drm_fw.c, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2022-20576In externalOnRequest of rilapplication.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20577In OemSimAuthRequest::encode of wlandata.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20578In RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption.Android
- CVE-2022-20579In RadioImpl::setCdmaBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption.Android
- CVE-2022-20580In ufdt_do_one_fixup of ufdt_overlay.c, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2022-20581In the Pixel camera driver, there is a possible use after free due to a logic error in the code.Android
- CVE-2022-20583In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation.Android
- CVE-2022-20588In sysmmu_map of sysmmu.c, there is a possible EoP due to a precondition check failure.Android
- CVE-2022-20589In valid_va_secbuf_check of drm_access_control.c, there is a possible ID due to improper input validation.Android
- CVE-2022-20590In valid_va_sec_mfc_check of drm_access_control.c, there is a possible information disclosure due to improper input validation.Android
- CVE-2022-20591In ppmpu_set of ppmpu.c, there is a possible information disclosure due to a logic error in the code.Android
- CVE-2022-20592In ppmp_validate_secbuf of drm_fw.c, there is a possible information disclosure due to improper input validation.Android
- CVE-2022-20593In pop_descriptor_string of BufferDescriptor.h, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20594In updateStart of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20595In getWpcAuthChallengeResponse of WirelessCharger.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20596In sendChunk of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-20599In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check.Android
- CVE-2022-20604In SAECOMM_SetDcnIdForPlmn of SAECOMM_DbManagement.c, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20606In SAEMM_MiningCodecTableWithMsgIE of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-20608In Pixel cellular firmware, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2022-20609In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-25626An unauthenticated user can access Identity Manager’s management console specific page URLs.Symantec Identity Governance and Administration
- CVE-2022-25627An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in SySymantec Identity Governance and Administration
- CVE-2022-26579PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow a root privileged attacker to install unsigned packages.
- CVE-2022-26580PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow the execution of specific command injections on selected binaries in
- CVE-2022-26581PAX A930 device with PayDroid_7.1.1_Virgo_V04.3.26T1_20210419 can allow an unauthorized attacker to perform privileged actions through the e
- CVE-2022-31708vRealize Operations (vROps) contains a broken access control vulnerability.VMware vRealize Operations
- CVE-2022-36223In Emby Server 4.6.7.0, the playlist name field is vulnerable to XSS stored where it is possible to steal the administrator access token and
- CVE-2022-38106Cross-Site Scripting Vulnerability in Serv-U Web ClientSolarWinds Serv-U File Server
- CVE-2022-38756CVE-2022-38756 vulnerability in GW Web prior to 18.4.2Micro Focus GroupWise Web
- CVE-2022-4130A blind site-to-site request forgery vulnerability was found in Satellite server.Satellite Server
- CVE-2022-42501In HexString2Value of util.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-42502In FacilityLock::Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-42503In ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to a missing Android
- CVE-2022-42504In CallDialReqData::encodeCallNumber of callreqdata.cpp, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2022-42505In ProtocolMiscBuilder::BuildSetSignalReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to an incorrectAndroid
- CVE-2022-42506In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-42507In ProtocolSimBuilder::BuildSimUpdatePb3gEntry of protocolsimbuilder.cpp, there is a possible out of bounds write due to a missing bounds chAndroid
- CVE-2022-42508In ProtocolCallBuilder::BuildSendUssd of protocolcallbuilder.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-42509In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-42510In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validation.Android
- CVE-2022-42511In EmbmsSessionData::encode of embmsdata.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-42512In VsimOperationDataExt::encode of vsimdata.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-42513In ProtocolEmbmsBuilder::BuildSetSession of protocolembmsbuilder.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-42514In ProtocolImsBuilder::BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-42515In MiscService::DoOemSetRtpPktlossThreshold of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-42516In ProtocolSimBuilderLegacy::BuildSimGetGbaAuth of protocolsimbuilderlegacy.cpp, there is a possible out of bounds read due to a missing bouAndroid
- CVE-2022-42517In MiscService::DoOemSetTcsFci of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-42518In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-42519In CdmaBroadcastSmsConfigsRequestData::encode of cdmasmsdata.cpp, there is a possible stack clash leading to memory corruption.Android
- CVE-2022-42520In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free.Android
- CVE-2022-42521In encode of wlandata.cpp, there is a possible out of bounds write due to improper input validation.Android
- CVE-2022-42522In DoSetCarrierConfig of miscservice.cpp, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2022-42523In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2022-42525In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2022-42526In ConvertUtf8ToUcs2 of radio_hal_utils.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-42530In Pixel firmware, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-42532In Pixel firmware, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2022-42535In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection.Android
- CVE-2022-42542In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-42543In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2022-4556Alinto SOGo Identity SOGoUserDefaults.m _migrateMailIdentities cross site scriptingAlinto SOGo
- CVE-2022-4558Alinto SOGo Folder/Mail NSString+Utilities.m cross site scriptingAlinto SOGo
- CVE-2022-4559INEX IPX-Manager list.foil.php cross site scriptingINEX IPX-Manager
- CVE-2022-4560Joget wflow-core UniversalTheme.java getInternalJsCssLib cross site scriptingJoget
- CVE-2022-4561SemanticDrilldown Extension GET Parameter SDBrowseDataPage.php printFilterLine cross site scriptingSemanticDrilldown Extension
- CVE-2022-4564University of Central Florida Materia API Controller api.php before cross-site request forgeryUniversity of Central Florida Materia
- CVE-2022-4565Dromara HuTool cn.hutool.core.util.ZipUtil.java resource consumptionDromara HuTool · cn.hutool:hutool-core
- CVE-2022-4566y_project RuoYi GenController sql injectiony_project RuoYi