# CVEs published 2022-12-16

189 CVEs were published on December 16, 2022: 6 critical, 53 high. Days are UTC.

- [CVE-2022-23531](https://cve.now/CVE-2022-23531.md): Arbitrary file write when scanning a specially-crafted local PyPI package (CVSS 5.8, DataDog guarddog · guarddog)
- [CVE-2022-23530](https://cve.now/CVE-2022-23530.md): GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package (CVSS 5.8, DataDog guarddog · guarddog)
- [CVE-2022-23490](https://cve.now/CVE-2022-23490.md): Improper access control to polling votes (CVSS 4.3, bigbluebutton)
- [CVE-2022-3157](https://cve.now/CVE-2022-3157.md): Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack (CVSS 8.6, Rockwell Automation CompactLogix · Rockwell Automation C… +2)
- [CVE-2022-46670](https://cve.now/CVE-2022-46670.md): Rockwell Automation MicroLogix 1100 & 1400 Vulnerable to Cross-Site Scripting Attack (CVSS 7.1, Rockwell Automation MicroLogix 1100 & 1400 Controllers ·… +1)
- [CVE-2022-3166](https://cve.now/CVE-2022-3166.md): MicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition Attack (CVSS 7.5, Rockwell Automation MicroLogix)
- [CVE-2022-2966](https://cve.now/CVE-2022-2966.md): Delta Electronics DOPSoft Out-of-bounds Read (CVSS 3.3, Delta Electronics DOPSoft)
- [CVE-2022-41972](https://cve.now/CVE-2022-41972.md): Contiki-NG contains NULL Pointer Dereference in BLE L2CAP module (CVSS 2.9, contiki-ng)
- [CVE-2022-41964](https://cve.now/CVE-2022-41964.md): BigBlueButton contains Response leaks in anonymous polls (CVSS 5.7, bigbluebutton)
- [CVE-2022-4326](https://cve.now/CVE-2022-4326.md): Trellix xAgent permission bypass vulnerability (CVSS 5.5, Trellix xAgent)
- [CVE-2022-4555](https://cve.now/CVE-2022-4555.md): WP Shamsi \<= 4.1.0 - Missing Authorization to Arbitrary Plugin Deactivation (CVSS 6.5, wpvar WP Shamsi – افزونه تاریخ شمسی و فارسی ساز وردپرس)
- [CVE-2022-41963](https://cve.now/CVE-2022-41963.md): BigBlueButton contains Improper Preservation of Permissions for whiteboard (CVSS 2.7, bigbluebutton)
- [CVE-2022-46870](https://cve.now/CVE-2022-46870.md): Apache Zeppelin: Stored XSS in note permissions (CVSS 5.4, Apache Software Foundation Apache Zeppelin · org.apache.zep…)
- [CVE-2021-28655](https://cve.now/CVE-2021-28655.md): Apache Zeppelin: Arbitrary file deletion vulnerability (CVSS 6.5, Apache Software Foundation Apache Zeppelin · org.apache.zep…)
- [CVE-2022-41962](https://cve.now/CVE-2022-41962.md): BigBlueButton contains Incorrect Authorization for setting emoji status (CVSS 2.7, bigbluebutton)
- [CVE-2022-41961](https://cve.now/CVE-2022-41961.md): BigBlueButton subject to Ineffective user bans (CVSS 4.3, bigbluebutton)
- [CVE-2021-31650](https://cve.now/CVE-2021-31650.md): A SQL injection vulnerability in Sourcecodester Online Grading System 1.0 allows remote attackers to execute arbitrary SQL commands via the (CVSS 9.8)
- [CVE-2021-35252](https://cve.now/CVE-2021-35252.md): Common Key Vulnerability in Serv-U FTP Server (CVSS 7.5, SolarWinds Serv-U FTP Server)
- [CVE-2021-38241](https://cve.now/CVE-2021-38241.md): Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework. (CVSS 9.8)
- [CVE-2022-20199](https://cve.now/CVE-2022-20199.md): In multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a confused deputy. (CVSS 5.5, Android)
- [CVE-2022-20503](https://cve.now/CVE-2022-20503.md): In onCreate of WifiDppConfiguratorActivity.java, there is a possible way for a guest user to add a WiFi configuration due to a missing permi (CVSS 7.8, Android)
- [CVE-2022-20504](https://cve.now/CVE-2022-20504.md): In multiple locations of DreamManagerService.java, there is a missing permission check. (CVSS 6.7, Android)
- [CVE-2022-20505](https://cve.now/CVE-2022-20505.md): In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. (CVSS 6.7, Android)
- [CVE-2022-20506](https://cve.now/CVE-2022-20506.md): In onCreate of WifiDialogActivity.java, there is a missing permission check. (CVSS 7.8, Android)
- [CVE-2022-20507](https://cve.now/CVE-2022-20507.md): In onMulticastListUpdateNotificationReceived of UwbEventManager.java, there is a possible arbitrary code execution due to a missing bounds c (CVSS 7.8, Android)
- [CVE-2022-20508](https://cve.now/CVE-2022-20508.md): In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a permissions bypass. (CVSS 7.8, Android)
- [CVE-2022-20509](https://cve.now/CVE-2022-20509.md): In mapGrantorDescr of MessageQueueBase.h, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-20510](https://cve.now/CVE-2022-20510.md): In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the notification streamin (CVSS 5.5, Android)
- [CVE-2022-20511](https://cve.now/CVE-2022-20511.md): In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check. (CVSS 5.5, Android)
- [CVE-2022-20512](https://cve.now/CVE-2022-20512.md): In navigateUpTo of Task.java, there is a possible way to launch an intent handler with a mismatched intent due to improper input validation. (CVSS 7.8, Android)
- [CVE-2022-20513](https://cve.now/CVE-2022-20513.md): In decrypt\_1\_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.5, Android)
- [CVE-2022-20514](https://cve.now/CVE-2022-20514.md): In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.cpp, there is a possi (CVSS 6.7, Android)
- [CVE-2022-20515](https://cve.now/CVE-2022-20515.md): In onPreferenceClick of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the Settings app due to a (CVSS 5.5, Android)
- [CVE-2022-20516](https://cve.now/CVE-2022-20516.md): In rw\_t3t\_act\_handle\_check\_ndef\_rsp of rw\_t3t.cc, there is a possible out of bounds read due to an integer overflow. (CVSS 7.5, Android)
- [CVE-2022-20517](https://cve.now/CVE-2022-20517.md): In getMessagesByPhoneNumber of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. (CVSS 5.5, Android)
- [CVE-2022-20518](https://cve.now/CVE-2022-20518.md): In query of MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. (CVSS 5.5, Android)
- [CVE-2022-20519](https://cve.now/CVE-2022-20519.md): In onCreate of AddAppNetworksActivity.java, there is a possible way for a guest user to configure WiFi networks due to a missing permission (CVSS 3.3, Android)
- [CVE-2022-20520](https://cve.now/CVE-2022-20520.md): In onCreate of various files, there is a possible tapjacking/overlay attack. (CVSS 7.8, Android)
- [CVE-2022-20521](https://cve.now/CVE-2022-20521.md): In sdpu\_find\_most\_specific\_service\_uuid of sdp\_utils.cc, there is a possible way to crash Bluetooth due to a missing null check. (CVSS 5.0, Android)
- [CVE-2022-20522](https://cve.now/CVE-2022-20522.md): In getSlice of ProviderModelSlice.java, there is a missing permission check. (CVSS 7.8, Android)
- [CVE-2022-20523](https://cve.now/CVE-2022-20523.md): In IncFs\_GetFilledRangesStartingFrom of incfs.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 6.1, Android)
- [CVE-2022-20524](https://cve.now/CVE-2022-20524.md): In compose of Vibrator.cpp, there is a possible arbitrary code execution due to a use after free. (CVSS 7.8, Android)
- [CVE-2022-20525](https://cve.now/CVE-2022-20525.md): In enforceVisualVoicemailPackage of PhoneInterfaceManager.java, there is a possible leak of visual voicemail package name due to a permissio (CVSS 3.3, Android)
- [CVE-2022-20526](https://cve.now/CVE-2022-20526.md): In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 3.3, Android)
- [CVE-2022-20527](https://cve.now/CVE-2022-20527.md): In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.5, Android)
- [CVE-2022-20528](https://cve.now/CVE-2022-20528.md): In findParam of HevcUtils.cpp there is a possible out of bounds read due to a missing bounds check. (CVSS 3.3, Android)
- [CVE-2022-20529](https://cve.now/CVE-2022-20529.md): In multiple locations of WifiDialogActivity.java, there is a possible limited lockscreen bypass due to a logic error in the code. (CVSS 2.4, Android)
- [CVE-2022-20530](https://cve.now/CVE-2022-20530.md): In strings.xml, there is a possible permission bypass due to a misleading string. (CVSS 5.3, Android)
- [CVE-2022-20533](https://cve.now/CVE-2022-20533.md): In getSlice of WifiSlice.java, there is a possible way to connect a new WiFi network from the guest mode due to a missing permission check. (CVSS 3.3, Android)
- [CVE-2022-20535](https://cve.now/CVE-2022-20535.md): In registerLocalOnlyHotspotSoftApCallback of WifiManager.java, there is a possible way to determine whether an app is installed, without que (CVSS 3.3, Android)
- [CVE-2022-20536](https://cve.now/CVE-2022-20536.md): In registerBroadcastReceiver of RcsService.java, there is a possible way to change preferred TTY mode due to a missing permission check. (CVSS 3.3, Android)
- [CVE-2022-20537](https://cve.now/CVE-2022-20537.md): In createDialog of WifiScanModeActivity.java, there is a possible way for a Guest user to enable location-sensitive settings due to a missin (CVSS 3.3, Android)
- [CVE-2022-20538](https://cve.now/CVE-2022-20538.md): In getSmsRoleHolder of RoleService.java, there is a possible way to determine whether an app is installed, without query permissions, due to (CVSS 5.5, Android)
- [CVE-2022-20539](https://cve.now/CVE-2022-20539.md): In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-20540](https://cve.now/CVE-2022-20540.md): In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. (CVSS 7.8, Android)
- [CVE-2022-20541](https://cve.now/CVE-2022-20541.md): In phNxpNciHal\_ioctl of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.2, Android)
- [CVE-2022-20543](https://cve.now/CVE-2022-20543.md): In multiple locations, there is a possible display crash loop due to improper input validation. (CVSS 2.3, Android)
- [CVE-2022-20544](https://cve.now/CVE-2022-20544.md): In onOptionsItemSelected of ManageApplications.java, there is a possible bypass of profile owner restrictions due to a missing permission ch (CVSS 4.4, Android)
- [CVE-2022-20545](https://cve.now/CVE-2022-20545.md): In bindArtworkAndColors of MediaControlPanel.java, there is a possible way to crash the phone due to improper input validation. (CVSS 7.5, Android)
- [CVE-2022-20546](https://cve.now/CVE-2022-20546.md): In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-20547](https://cve.now/CVE-2022-20547.md): In multiple functions of AdapterService.java, there is a possible way to manipulate Bluetooth state due to a missing permission check. (CVSS 7.8, Android)
- [CVE-2022-20548](https://cve.now/CVE-2022-20548.md): In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. (CVSS 7.8, Android)
- [CVE-2022-20549](https://cve.now/CVE-2022-20549.md): In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, Android)
- [CVE-2022-20550](https://cve.now/CVE-2022-20550.md): In Multiple Locations, there is a possibility to launch arbitrary protected activities due to a confused deputy. (CVSS 7.8, Android)
- [CVE-2022-20552](https://cve.now/CVE-2022-20552.md): In btif\_a2dp\_sink\_command\_ready of btif\_a2dp\_sink.cc, there is a possible out of bounds read due to a use after free. (CVSS 5.5, Android)
- [CVE-2022-20553](https://cve.now/CVE-2022-20553.md): In onCreate of LogAccessDialogActivity.java, there is a possible way to bypass a permission check due to a tapjacking/overlay attack. (CVSS 6.5, Android)
- [CVE-2022-20554](https://cve.now/CVE-2022-20554.md): In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. (CVSS 6.7, Android)
- [CVE-2022-20555](https://cve.now/CVE-2022-20555.md): In ufdt\_get\_node\_by\_path\_len of ufdt\_convert.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2022-20556](https://cve.now/CVE-2022-20556.md): In launchConfigNewNetworkFragment of NetworkProviderSettings.java, there is a possible way for the guest user to add a new WiFi network due (CVSS 3.3, Android)
- [CVE-2022-20557](https://cve.now/CVE-2022-20557.md): In MessageQueueBase of MessageQueueBase.h, there is a possible out of bounds read due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-20558](https://cve.now/CVE-2022-20558.md): In registerReceivers of DeviceCapabilityListener.java, there is a possible way to change preferred TTY mode due to a permissions bypass. (CVSS 3.3, Android)
- [CVE-2022-20559](https://cve.now/CVE-2022-20559.md): In revokeOwnPermissionsOnKill of PermissionManager.java, there is a possible way to determine whether an app is installed, without query per (CVSS 3.3, Android)
- [CVE-2022-20560](https://cve.now/CVE-2022-20560.md): Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A (CVSS 7.5, Android)
- [CVE-2022-20561](https://cve.now/CVE-2022-20561.md): In TBD of aud\_hal\_tunnel.c, there is a possible memory corruption due to a use after free. (CVSS 7.8, Android)
- [CVE-2022-20562](https://cve.now/CVE-2022-20562.md): In various functions of ap\_input\_processor.c, there is a possible way to record audio during a phone call due to a logic error in the code. (CVSS 3.3, Android)
- [CVE-2022-20563](https://cve.now/CVE-2022-20563.md): In TBD of ufdt\_convert, there is a possible out of bounds read due to memory corruption. (CVSS 6.7, Android)
- [CVE-2022-20564](https://cve.now/CVE-2022-20564.md): In \_ufdt\_output\_strtab\_to\_fdt of ufdt\_convert.c, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, Android)
- [CVE-2022-20566](https://cve.now/CVE-2022-20566.md): In l2cap\_chan\_put of l2cap\_core, there is a possible use after free due to improper locking. (CVSS 7.8, Android · :linux\_kernel:)
- [CVE-2022-20567](https://cve.now/CVE-2022-20567.md): In pppol2tp\_create of l2tp\_ppp.c, there is a possible use after free due to a race condition. (CVSS 7.4, Android)
- [CVE-2022-20568](https://cve.now/CVE-2022-20568.md): In (TBD) of (TBD), there is a possible way to corrupt kernel memory due to a use after free. (CVSS 7.8, Android)
- [CVE-2022-20569](https://cve.now/CVE-2022-20569.md): In thermal\_cooling\_device\_stats\_update of thermal\_sysfs.c, there is a possible out of bounds write due to improper input validation. (CVSS 6.7, Android)
- [CVE-2022-20570](https://cve.now/CVE-2022-20570.md): Product: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/A (CVSS 5.5, Android)
- [CVE-2022-20571](https://cve.now/CVE-2022-20571.md): In extract\_metadata of dm-android-verity.c, there is a possible way to corrupt kernel memory due to a use after free. (CVSS 6.7, Android)
- [CVE-2022-20572](https://cve.now/CVE-2022-20572.md): In verity\_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. (CVSS 6.7, Android · :linux\_kernel:)
- [CVE-2022-20574](https://cve.now/CVE-2022-20574.md): In sec\_sysmmu\_info of drm\_fw.c, there is a possible out of bounds read due to improper input validation. (CVSS 5.5, Android)
- [CVE-2022-20575](https://cve.now/CVE-2022-20575.md): In read\_ppmpu\_info of drm\_fw.c, there is a possible out of bounds read due to an incorrect bounds check. (CVSS 5.5, Android)
- [CVE-2022-20576](https://cve.now/CVE-2022-20576.md): In externalOnRequest of rilapplication.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-20577](https://cve.now/CVE-2022-20577.md): In OemSimAuthRequest::encode of wlandata.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-20578](https://cve.now/CVE-2022-20578.md): In RadioImpl::setGsmBroadcastConfig of ril\_service\_legacy.cpp, there is a possible stack clash leading to memory corruption. (CVSS 6.7, Android)
- [CVE-2022-20579](https://cve.now/CVE-2022-20579.md): In RadioImpl::setCdmaBroadcastConfig of ril\_service\_legacy.cpp, there is a possible stack clash leading to memory corruption. (CVSS 6.7, Android)
- [CVE-2022-20580](https://cve.now/CVE-2022-20580.md): In ufdt\_do\_one\_fixup of ufdt\_overlay.c, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, Android)
- [CVE-2022-20581](https://cve.now/CVE-2022-20581.md): In the Pixel camera driver, there is a possible use after free due to a logic error in the code. (CVSS 6.7, Android)
- [CVE-2022-20582](https://cve.now/CVE-2022-20582.md): In ppmp\_unprotect\_mfcfw\_buf of drm\_fw.c, there is a possible out of bounds write due to improper input validation. (CVSS 7.8, Android)
- [CVE-2022-20583](https://cve.now/CVE-2022-20583.md): In ppmp\_unprotect\_mfcfw\_buf of drm\_fw.c, there is a possible out of bounds write due to improper input validation. (CVSS 6.7, Android)
- [CVE-2022-20584](https://cve.now/CVE-2022-20584.md): In page\_number of shared\_mem.c, there is a possible code execution in secure world due to improper input validation. (CVSS 7.8, Android)
- [CVE-2022-20585](https://cve.now/CVE-2022-20585.md): In valid\_out\_of\_special\_sec\_dram\_addr of drm\_access\_control.c, there is a possible EoP due to improper input validation. (CVSS 7.8, Android)
- [CVE-2022-20586](https://cve.now/CVE-2022-20586.md): In valid\_out\_of\_special\_sec\_dram\_addr of drm\_access\_control.c, there is a possible EoP due to improper input validation. (CVSS 7.8, Android)
- [CVE-2022-20587](https://cve.now/CVE-2022-20587.md): In ppmp\_validate\_wsm of drm\_fw.c, there is a possible EoP due to improper input validation. (CVSS 7.8, Android)
- [CVE-2022-20588](https://cve.now/CVE-2022-20588.md): In sysmmu\_map of sysmmu.c, there is a possible EoP due to a precondition check failure. (CVSS 6.7, Android)
- [CVE-2022-20589](https://cve.now/CVE-2022-20589.md): In valid\_va\_secbuf\_check of drm\_access\_control.c, there is a possible ID due to improper input validation. (CVSS 4.4, Android)
- [CVE-2022-20590](https://cve.now/CVE-2022-20590.md): In valid\_va\_sec\_mfc\_check of drm\_access\_control.c, there is a possible information disclosure due to improper input validation. (CVSS 5.5, Android)
- [CVE-2022-20591](https://cve.now/CVE-2022-20591.md): In ppmpu\_set of ppmpu.c, there is a possible information disclosure due to a logic error in the code. (CVSS 5.5, Android)
- [CVE-2022-20592](https://cve.now/CVE-2022-20592.md): In ppmp\_validate\_secbuf of drm\_fw.c, there is a possible information disclosure due to improper input validation. (CVSS 5.5, Android)
- [CVE-2022-20593](https://cve.now/CVE-2022-20593.md): In pop\_descriptor\_string of BufferDescriptor.h, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2022-20594](https://cve.now/CVE-2022-20594.md): In updateStart of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-20595](https://cve.now/CVE-2022-20595.md): In getWpcAuthChallengeResponse of WirelessCharger.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2022-20596](https://cve.now/CVE-2022-20596.md): In sendChunk of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-20597](https://cve.now/CVE-2022-20597.md): In ppmpu\_set of ppmpu.c, there is a possible EoP due to an integer overflow. (CVSS 7.8, Android)
- [CVE-2022-20598](https://cve.now/CVE-2022-20598.md): In sec\_media\_protect of media.c, there is a possible EoP due to an integer overflow. (CVSS 7.8, Android)
- [CVE-2022-20599](https://cve.now/CVE-2022-20599.md): In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-20600](https://cve.now/CVE-2022-20600.md): In TBD of TBD, there is a possible out of bounds write due to memory corruption. (CVSS 7.8, Android)
- [CVE-2022-20601](https://cve.now/CVE-2022-20601.md): Product: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/A (CVSS 7.5, Android)
- [CVE-2022-20602](https://cve.now/CVE-2022-20602.md): Product: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/A (CVSS 7.5, Android)
- [CVE-2022-20603](https://cve.now/CVE-2022-20603.md): In SetDecompContextDb of RohcDeCompContextOfRbId.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.2, Android)
- [CVE-2022-20604](https://cve.now/CVE-2022-20604.md): In SAECOMM\_SetDcnIdForPlmn of SAECOMM\_DbManagement.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.5, Android)
- [CVE-2022-20605](https://cve.now/CVE-2022-20605.md): In SAECOMM\_CopyBufferBytes of SAECOMM\_Utility.c, there is a possible out of bounds read due to an incorrect bounds check. (CVSS 7.5, Android)
- [CVE-2022-20606](https://cve.now/CVE-2022-20606.md): In SAEMM\_MiningCodecTableWithMsgIE of SAEMM\_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.9, Android)
- [CVE-2022-20607](https://cve.now/CVE-2022-20607.md): In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. (CVSS 8.8, Android)
- [CVE-2022-20608](https://cve.now/CVE-2022-20608.md): In Pixel cellular firmware, there is a possible out of bounds read due to an incorrect bounds check. (CVSS 5.5, Android)
- [CVE-2022-20609](https://cve.now/CVE-2022-20609.md): In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.5, Android)
- [CVE-2022-20610](https://cve.now/CVE-2022-20610.md): In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. (CVSS 8.8, Android)
- [CVE-2022-25626](https://cve.now/CVE-2022-25626.md): An unauthenticated user can access Identity Manager’s management console specific page URLs. (CVSS 5.3, Symantec Identity Governance and Administration)
- [CVE-2022-25627](https://cve.now/CVE-2022-25627.md): An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Sy (CVSS 6.7, Symantec Identity Governance and Administration)
- [CVE-2022-25628](https://cve.now/CVE-2022-25628.md): An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4 (CVSS 8.8, Symantec Identity Governance and Administration)
- [CVE-2022-26579](https://cve.now/CVE-2022-26579.md): PAX A930 device with PayDroid\_7.1.1\_Virgo\_V04.3.26T1\_20210419 can allow a root privileged attacker to install unsigned packages. (CVSS 6.0)
- [CVE-2022-26580](https://cve.now/CVE-2022-26580.md): PAX A930 device with PayDroid\_7.1.1\_Virgo\_V04.3.26T1\_20210419 can allow the execution of specific command injections on selected binaries in (no CVSS)
- [CVE-2022-26581](https://cve.now/CVE-2022-26581.md): PAX A930 device with PayDroid\_7.1.1\_Virgo\_V04.3.26T1\_20210419 can allow an unauthorized attacker to perform privileged actions through the e (CVSS 5.2)
- [CVE-2022-26582](https://cve.now/CVE-2022-26582.md): PAX A930 device with PayDroid\_7.1.1\_Virgo\_V04.3.26T1\_20210419 can allow an attacker to gain root access through command injection in systool (CVSS 7.8)
- [CVE-2022-3109](https://cve.now/CVE-2022-3109.md): An issue was discovered in the FFmpeg package, where vp3\_decode\_frame in libavcodec/vp3.c lacks check of the return value of av\_malloc() and (CVSS 7.5, FFmpeg)
- [CVE-2022-31707](https://cve.now/CVE-2022-31707.md): vRealize Operations (vROps) contains a privilege escalation vulnerability. (CVSS 7.2, VMware vRealize Operations)
- [CVE-2022-31708](https://cve.now/CVE-2022-31708.md): vRealize Operations (vROps) contains a broken access control vulnerability. (CVSS 4.9, VMware vRealize Operations)
- [CVE-2022-36223](https://cve.now/CVE-2022-36223.md): In Emby Server 4.6.7.0, the playlist name field is vulnerable to XSS stored where it is possible to steal the administrator access token and (CVSS 6.1)
- [CVE-2022-37832](https://cve.now/CVE-2022-37832.md): Mutiny 7.2.0-10788 suffers from Hardcoded root password. (CVSS 9.8)
- [CVE-2022-38106](https://cve.now/CVE-2022-38106.md): Cross-Site Scripting Vulnerability in Serv-U Web Client (CVSS 5.4, SolarWinds Serv-U File Server)
- [CVE-2022-38756](https://cve.now/CVE-2022-38756.md): CVE-2022-38756 vulnerability in GW Web prior to 18.4.2 (CVSS 4.3, Micro Focus GroupWise Web)
- [CVE-2022-4130](https://cve.now/CVE-2022-4130.md): A blind site-to-site request forgery vulnerability was found in Satellite server. (CVSS 4.5, Satellite Server)
- [CVE-2022-42501](https://cve.now/CVE-2022-42501.md): In HexString2Value of util.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-42502](https://cve.now/CVE-2022-42502.md): In FacilityLock::Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-42503](https://cve.now/CVE-2022-42503.md): In ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to a missing (CVSS 6.7, Android)
- [CVE-2022-42504](https://cve.now/CVE-2022-42504.md): In CallDialReqData::encodeCallNumber of callreqdata.cpp, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, Android)
- [CVE-2022-42505](https://cve.now/CVE-2022-42505.md): In ProtocolMiscBuilder::BuildSetSignalReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to an incorrect (CVSS 6.7, Android)
- [CVE-2022-42506](https://cve.now/CVE-2022-42506.md): In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-42507](https://cve.now/CVE-2022-42507.md): In ProtocolSimBuilder::BuildSimUpdatePb3gEntry of protocolsimbuilder.cpp, there is a possible out of bounds write due to a missing bounds ch (CVSS 6.7, Android)
- [CVE-2022-42508](https://cve.now/CVE-2022-42508.md): In ProtocolCallBuilder::BuildSendUssd of protocolcallbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-42509](https://cve.now/CVE-2022-42509.md): In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-42510](https://cve.now/CVE-2022-42510.md): In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validation. (CVSS 6.7, Android)
- [CVE-2022-42511](https://cve.now/CVE-2022-42511.md): In EmbmsSessionData::encode of embmsdata.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-42512](https://cve.now/CVE-2022-42512.md): In VsimOperationDataExt::encode of vsimdata.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2022-42513](https://cve.now/CVE-2022-42513.md): In ProtocolEmbmsBuilder::BuildSetSession of protocolembmsbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-42514](https://cve.now/CVE-2022-42514.md): In ProtocolImsBuilder::BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2022-42515](https://cve.now/CVE-2022-42515.md): In MiscService::DoOemSetRtpPktlossThreshold of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2022-42516](https://cve.now/CVE-2022-42516.md): In ProtocolSimBuilderLegacy::BuildSimGetGbaAuth of protocolsimbuilderlegacy.cpp, there is a possible out of bounds read due to a missing bou (CVSS 4.4, Android)
- [CVE-2022-42517](https://cve.now/CVE-2022-42517.md): In MiscService::DoOemSetTcsFci of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2022-42518](https://cve.now/CVE-2022-42518.md): In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-42519](https://cve.now/CVE-2022-42519.md): In CdmaBroadcastSmsConfigsRequestData::encode of cdmasmsdata.cpp, there is a possible stack clash leading to memory corruption. (CVSS 6.7, Android)
- [CVE-2022-42520](https://cve.now/CVE-2022-42520.md): In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. (CVSS 6.7, Android)
- [CVE-2022-42521](https://cve.now/CVE-2022-42521.md): In encode of wlandata.cpp, there is a possible out of bounds write due to improper input validation. (CVSS 6.7, Android)
- [CVE-2022-42522](https://cve.now/CVE-2022-42522.md): In DoSetCarrierConfig of miscservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. (CVSS 4.4, Android)
- [CVE-2022-42523](https://cve.now/CVE-2022-42523.md): In fillSetupDataCallInfo\_V1\_6 of ril\_service\_1\_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, Android)
- [CVE-2022-42524](https://cve.now/CVE-2022-42524.md): In sms\_GetTpUdlIe of sms\_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 7.5, Android)
- [CVE-2022-42525](https://cve.now/CVE-2022-42525.md): In fillSetupDataCallInfo\_V1\_6 of ril\_service\_1\_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, Android)
- [CVE-2022-42526](https://cve.now/CVE-2022-42526.md): In ConvertUtf8ToUcs2 of radio\_hal\_utils.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-42527](https://cve.now/CVE-2022-42527.md): In cd\_SsParseMsg of cd\_SsCodec.c, there is a possible crash due to a missing null check. (CVSS 7.5, Android)
- [CVE-2022-42529](https://cve.now/CVE-2022-42529.md): Product: AndroidVersions: Android kernelAndroid ID: A-235292841References: N/A (CVSS 9.8, Android)
- [CVE-2022-42530](https://cve.now/CVE-2022-42530.md): In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2022-42531](https://cve.now/CVE-2022-42531.md): In mmu\_map\_for\_fw of gs\_ldfw\_load.c, there is a possible mitigation bypass due to Permissive Memory Allocation. (CVSS 7.8, Android)
- [CVE-2022-42532](https://cve.now/CVE-2022-42532.md): In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2022-42534](https://cve.now/CVE-2022-42534.md): In trusty\_ffa\_mem\_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input validation. (CVSS 7.8, Android)
- [CVE-2022-42535](https://cve.now/CVE-2022-42535.md): In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. (CVSS 5.5, Android)
- [CVE-2022-42542](https://cve.now/CVE-2022-42542.md): In phNxpNciHal\_core\_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2022-42543](https://cve.now/CVE-2022-42543.md): In fdt\_path\_offset\_namelen of fdt\_ro.c, there is a possible out of bounds read due to an incorrect bounds check. (CVSS 4.4, Android)
- [CVE-2022-42544](https://cve.now/CVE-2022-42544.md): In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input vali (CVSS 7.8, Android)
- [CVE-2022-4556](https://cve.now/CVE-2022-4556.md): Alinto SOGo Identity SOGoUserDefaults.m \_migrateMailIdentities cross site scripting (CVSS 3.5, Alinto SOGo)
- [CVE-2022-4558](https://cve.now/CVE-2022-4558.md): Alinto SOGo Folder/Mail NSString+Utilities.m cross site scripting (CVSS 3.5, Alinto SOGo)
- [CVE-2022-4559](https://cve.now/CVE-2022-4559.md): INEX IPX-Manager list.foil.php cross site scripting (CVSS 3.5, INEX IPX-Manager)
- [CVE-2022-4560](https://cve.now/CVE-2022-4560.md): Joget wflow-core UniversalTheme.java getInternalJsCssLib cross site scripting (CVSS 3.5, Joget)
- [CVE-2022-4561](https://cve.now/CVE-2022-4561.md): SemanticDrilldown Extension GET Parameter SDBrowseDataPage.php printFilterLine cross site scripting (CVSS 3.5, SemanticDrilldown Extension)
- [CVE-2022-4563](https://cve.now/CVE-2022-4563.md): Freedom of the Press SecureDrop gpg-agent.conf symlink (CVSS 7.8, Freedom of the Press SecureDrop)
- [CVE-2022-4564](https://cve.now/CVE-2022-4564.md): University of Central Florida Materia API Controller api.php before cross-site request forgery (CVSS 4.3, University of Central Florida Materia)
- [CVE-2022-4565](https://cve.now/CVE-2022-4565.md): Dromara HuTool cn.hutool.core.util.ZipUtil.java resource consumption (CVSS 4.3, Dromara HuTool · cn.hutool:hutool-core)
- [CVE-2022-4566](https://cve.now/CVE-2022-4566.md): y\_project RuoYi GenController sql injection (CVSS 5.5, y\_project RuoYi)
- [CVE-2022-45796](https://cve.now/CVE-2022-45796.md): SHARP Multifunction Printer - Command Injection (CVSS 9.1, SHARP multifunction printers)
- [CVE-2022-46109](https://cve.now/CVE-2022-46109.md): Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState. (CVSS 7.5)
- [CVE-2022-46135](https://cve.now/CVE-2022-46135.md): In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit\_post , through which we can upload webshe (CVSS 7.2)
- [CVE-2022-46137](https://cve.now/CVE-2022-46137.md): AeroCMS v0.0.1 is vulnerable to Directory Traversal. (CVSS 7.5)
- [CVE-2022-47208](https://cve.now/CVE-2022-47208.md): The “puhttpsniff” service, which runs by default, is susceptible to command injection due to improperly sanitized user input. (CVSS 8.8, NETGEAR Nighthawk WiFi6 Router)
- [CVE-2022-47209](https://cve.now/CVE-2022-47209.md): A support user exists on the device and appears to be a backdoor for Technical Support staff. (CVSS 8.8, NETGEAR Nighthawk WiFi6 Router)
- [CVE-2022-47210](https://cve.now/CVE-2022-47210.md): The default console presented to users over telnet (when enabled) is restricted to a subset of commands. (CVSS 7.8, NETGEAR Nighthawk WiFi6 Router)
- [CVE-2022-47377](https://cve.now/CVE-2022-47377.md): Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version \<1.13.4 allows an unprivileged remote attacker to (CVSS 9.8, SICK SIM2000ST)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-12-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.