CVE-2022-23xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
796 records · Page 6 of 8
Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local files.
UpdatedWikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages.
UpdatedWikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious file using the image upload form through index.php.
UpdatedFulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection.
UpdatedHMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php.
UpdatedHMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php.
Updated- CVE-2022-23364: HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php. Unscored
HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php.
Updated Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via index.php.
UpdatedEasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement.
Updatedmozilo2.0 was discovered to be vulnerable to directory traversal attacks via the parameter curent_dir.
UpdatedAn issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).
UpdatedBigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.
UpdatedBigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).
UpdatedBigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.
UpdatedBigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.
UpdatedBigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.
UpdatedBigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.
UpdatedThe Hyland Onbase Application Server releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.1000 are vulnerable to a username enumeration vulnerability. An attacker can obtain valid users based on the response returned for invalid and valid users by sending a POST login request to the /mobilebroker/ServiceToBroker.svc/Json/Connect endpoint. This can lead to user enumeration
UpdatedJoplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.
UpdatedDedeCMS v5.7.87 was discovered to contain a SQL injection vulnerability in article_coonepage_rule.php via the ids parameter.
UpdatedS-CMS v5.0 was discovered to contain a SQL injection vulnerability in member_pay.php via the O_id parameter.
UpdatedMetinfo v7.5.0 was discovered to contain a SQL injection vulnerability in language_general.class.php via doModifyParameter.
UpdatedThe Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.
UpdatedCommand injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field.
UpdatedIn DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information and can change the administrator password.
UpdatedA remote code execution (RCE) vulnerability in HelloWorldAddonController.java of jpress v4.2.0 allows attackers to execute arbitrary code via a crafted JAR package.
UpdatedA vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via uploading malicious files.
UpdatedA design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node, which can purge all of pending transactions in a victim node's memory pool and then occupy the memory pool to prevent new transactions from entering the pool, resulting in a denial of
UpdatedA design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service (DoS).
UpdatedA persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the XMPie UStore application on version 12.3.7244.0.
UpdatedXMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into the application and exfiltrate sensitive information from the database.
UpdatedA segmentation fault during PCF file parsing in pcf2bdf versions >=1.05 allows an attacker to trigger a program crash via a specially crafted PCF font file. This crash affects the availability of the software and dependent downstream components.
UpdatedA heap-buffer-overflow in pcf2bdf, versions >= 1.05 allows an attacker to trigger unsafe memory access via a specially crafted PCF font file. This out-of-bound read may lead to an application crash, information disclosure via program memory or other context-dependent impact.
UpdatedCobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL.
UpdatedAn issue was discovered in taoCMS v3.0.2. There is an arbitrary file read vulnerability that can read any files via admin.php?action=file&ctrl=download&path=../../1.txt.
UpdatedMCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do.
UpdatedMCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do.
UpdatedA vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application "Online Help" in affected product contains a Cross-Site Scripting (XSS) vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious link.
Updated- CVE-2022-23308: valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. 7.5 High
valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
Updated CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
UpdatedBy design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate the SQL by entering crafted strings into input fields or headers of an application that are logged allowing unintended SQL queries to be exe
UpdatedThe implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9495.
UpdatedThe implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exists because of an incomplete fix for CVE-2019-9494.
UpdatedJMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBindingName configuration causing JMSSink to perform JNDI requests that result in remote code execution in a similar fashi
UpdatedHEVC Video Extensions Remote Code Execution Vulnerability
UpdatedRaw Image Extension Remote Code Execution Vulnerability
UpdatedWindows PDEV Elevation of Privilege Vulnerability
UpdatedWindows NT OS Kernel Elevation of Privilege Vulnerability
Updated- CVE-2022-23297: Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability 5.5 Medium
Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
Updated Windows Installer Elevation of Privilege Vulnerability
UpdatedRaw Image Extension Remote Code Execution Vulnerability
UpdatedWindows Event Tracing Remote Code Execution Vulnerability
UpdatedWindows Fast FAT File System Driver Elevation of Privilege Vulnerability
UpdatedMicrosoft Power BI Spoofing Vulnerability
UpdatedWindows DWM Core Library Elevation of Privilege Vulnerability
UpdatedWindows Inking COM Elevation of Privilege Vulnerability
UpdatedWindows DWM Core Library Elevation of Privilege Vulnerability
UpdatedWindows ALPC Elevation of Privilege Vulnerability
Updated- CVE-2022-23286: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 7.0 High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Updated Remote Desktop Client Remote Code Execution Vulnerability
UpdatedWindows Print Spooler Elevation of Privilege Vulnerability
UpdatedWindows ALPC Elevation of Privilege Vulnerability
UpdatedPaint 3D Remote Code Execution Vulnerability
Updated- CVE-2022-23281: Windows Common Log File System Driver Information Disclosure Vulnerability 5.5 Medium
Windows Common Log File System Driver Information Disclosure Vulnerability
Updated Microsoft Outlook for Mac Security Feature Bypass Vulnerability
UpdatedWindows ALPC Elevation of Privilege Vulnerability
UpdatedMicrosoft Defender for Endpoint Spoofing Vulnerability
UpdatedMicrosoft Exchange Server Remote Code Execution Vulnerability
UpdatedSQL Server for Linux Containers Elevation of Privilege Vulnerability
UpdatedMicrosoft Dynamics GP Remote Code Execution Vulnerability
UpdatedMicrosoft Dynamics GP Elevation Of Privilege Vulnerability
UpdatedMicrosoft Dynamics GP Elevation Of Privilege Vulnerability
UpdatedMicrosoft Dynamics GP Elevation Of Privilege Vulnerability
Updated- CVE-2022-23270: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability 8.1 High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Updated Microsoft Dynamics GP Spoofing Vulnerability
UpdatedWindows Hyper-V Denial of Service Vulnerability
Updated.NET and Visual Studio Denial of Service Vulnerability
UpdatedMicrosoft Defender for IoT Elevation of Privilege Vulnerability
UpdatedMicrosoft Defender for IoT Remote Code Execution Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Spoofing Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Tampering Vulnerability
UpdatedMicrosoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
UpdatedMicrosoft Edge for Android Spoofing Vulnerability
UpdatedWindows Hyper-V Remote Code Execution Vulnerability
UpdatedAzure Data Explorer Spoofing Vulnerability
UpdatedMicrosoft OneDrive for Android Security Feature Bypass Vulnerability
UpdatedMicrosoft Power BI Information Disclosure Vulnerability
Updated- CVE-2022-23253: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability 6.5 Medium
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Updated Microsoft Office Information Disclosure Vulnerability
Updated- CVE-2022-23242: TeamViewer Linux - Deletion command not properly executed after process crash 6.3 Medium
TeamViewer Linux versions before 15.28 do not properly execute a deletion command for the connection password in case of a process crash. Knowledge of the crash event and the TeamViewer ID as well as either possession of the pre-crash connection password or local authenticated access to the machine would have allowed to establish a remote connection by reusing the not properly deleted connection p
Updated Clustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are susceptible to a vulnerability which could allow an authenticated remote attacker to arbitrarily modify or delete WORM data prior to the end of the retention period.
UpdatedActive IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows unauthorized users to update EMS Subscriptions via unspecified vectors.
UpdatedActive IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows administrative users to perform a Stored Cross-Site Scripting (XSS) attack.
UpdatedLinux deployments of StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.2 deployed with a Linux kernel version less than 4.7.0 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to view limited metrics information and modify alert email recipients and content.
UpdatedE-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an attacker to redirect users to malicious websites.
UpdatedE-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible only to privileged users.
UpdatedActive IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Active IQ Unified Manager specific information via AutoSupport telemetry data that is sent even when AutoSupport has been disabled.
UpdatedSnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext HANA credentials.
Updated