CVE-2022-30xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
717 records · Page 7 of 8
.NET and Visual Studio Information Disclosure Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure RTOS GUIX Studio Information Disclosure Vulnerability
UpdatedAzure RTOS GUIX Studio Remote Code Execution Vulnerability
UpdatedAzure RTOS GUIX Studio Remote Code Execution Vulnerability
UpdatedAzure RTOS GUIX Studio Remote Code Execution Vulnerability
UpdatedAzure RTOS GUIX Studio Remote Code Execution Vulnerability
UpdatedAzure RTOS GUIX Studio Remote Code Execution Vulnerability
UpdatedMicrosoft Office Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft Office Information Disclosure Vulnerability
UpdatedMicrosoft Office Information Disclosure Vulnerability
UpdatedWindows Credential Roaming Service Elevation of Privilege Vulnerability
UpdatedMicrosoft Photos App Remote Code Execution Vulnerability
UpdatedAV1 Video Extension Remote Code Execution Vulnerability
Updated- CVE-2022-30166: Local Security Authority Subsystem Service Elevation of Privilege Vulnerability 7.8 High
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
Updated Windows Kerberos Elevation of Privilege Vulnerability
UpdatedKerberos AppContainer Security Feature Bypass Vulnerability
UpdatedWindows Hyper-V Remote Code Execution Vulnerability
UpdatedWindows Kernel Information Disclosure Vulnerability
UpdatedWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Updated- CVE-2022-30160: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability 7.8 High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Updated Microsoft Office Information Disclosure Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedWindows Kernel Denial of Service Vulnerability
UpdatedMicrosoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability
UpdatedWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
UpdatedWindows Network Address Translation (NAT) Denial of Service Vulnerability
Updated- CVE-2022-30151: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.0 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Updated - CVE-2022-30150: Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability 7.5 High
Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability
Updated Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Updated- CVE-2022-30148: Windows Desired State Configuration (DSC) Information Disclosure Vulnerability 5.5 Medium
Windows Desired State Configuration (DSC) Information Disclosure Vulnerability
Updated Windows Installer Elevation of Privilege Vulnerability
UpdatedWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
UpdatedWindows Encrypting File System (EFS) Remote Code Execution Vulnerability
UpdatedWindows Bluetooth Service Remote Code Execution Vulnerability
UpdatedWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
UpdatedWindows File History Remote Code Execution Vulnerability
UpdatedWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
UpdatedWindows iSCSI Discovery Service Remote Code Execution Vulnerability
UpdatedWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
UpdatedWindows Print Spooler Elevation of Privilege Vulnerability
UpdatedExecutive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of this EOP vulnerability requires an attacker to gain remote code execution within a container. All Service Fabric and Docker versions are impacted.
UpdatedWindows Network File System Remote Code Execution Vulnerability
UpdatedWindows Media Center Elevation of Privilege Vulnerability
UpdatedMicrosoft Exchange Server Information Disclosure Vulnerability
Updated- CVE-2022-30133: Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability 9.8 Critical
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
Updated Windows Container Manager Service Elevation of Privilege Vulnerability
Updated- CVE-2022-30131: Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability 7.8 High
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
Updated .NET Framework Denial of Service Vulnerability
UpdatedVisual Studio Code Remote Code Execution Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability
UpdatedIn Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0
UpdatedAn improper authentication vulnerability exists in Rocket.Chat Mobile App <4.14.1.22788 that allowed an attacker with physical access to a mobile device to bypass local authentication (PIN code).
UpdatedA sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.
UpdatedA possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.
UpdatedThe “LANDesk(R) Management Agent” service exposes a socket and once connected, it is possible to launch commands only for signed executables. This is a security bug that allows a limited user to get escalated admin privileges on their system.
UpdatedXSS in /dashboard/blocks/stacks/view_details/ - old browsers only. When using an older browser with built-in XSS protection disabled, insufficient sanitation where built urls are outputted can be exploited for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 to allow XSS. This cannot be exploited in modern-day web browsers due to an automatic input escape mechanism. Concrete CMS Secu
UpdatedXSS in /dashboard/reports/logs/view - old browsers only. When using Internet Explorer with the XSS protection disabled, insufficient sanitation where built urls are outputted can be exploited for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2. This cannot be exploited in modern-day web browsers due to an automatic input escape mechanism. Concrete CMS Security team ranked this vulne
UpdatedTitle for CVE: XSS in /dashboard/system/express/entities/forms/save_control/[GUID]: old browsers only.Description: When using Internet Explorer with the XSS protection disabled, editing a form control in an express entities form for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 can allow XSS. This cannot be exploited in modern-day web browsers due to an automatic input escape mech
UpdatedConcrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 allow traversal in /index.php/ccm/system/file/upload which could result in an Arbitrary File Delete exploit. This was remediated by sanitizing /index.php/ccm/system/file/upload to ensure Concrete doesn’t allow traversal and by changing isFullChunkFilePresent to have an early false return when input doesn't match expectations.Concrete C
UpdatedUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in the given URL used atrailing dot while not using one when it built the HSTS cache. Or the otherway around - by having the trailing dot in the HSTS cache and *not* using thetrailing dot in the
UpdatedA heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462_FW_261_DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS.
Updated- CVE-2022-30113: Electronic mall system 1.0_build20200203 is affected vulnerable to SQL Injection. Unscored
Electronic mall system 1.0_build20200203 is affected vulnerable to SQL Injection.
Updated Due to the use of an insecure algorithm for rolling codes in MCK Smartlock 1.0, allows attackers to unlock the mechanism via replay attacks.
UpdatedThe file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaScript inside of this image/svg+xml file will be executed in the users' browser.
UpdatedIn Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp, which is accessible before and after configuring the device, exhibits multiple remote command injection vulnerabilities. The following parameters in the [form name] form; [list vulnerable parameters], are not properly sanitized after being submitted to the web interface in a POST request. With specially crafted parameters,
UpdatedEllieGrid Android Application version 3.4.1 is vulnerable to Code Injection. The application appears to evaluate user input as code (remote).
UpdatedCommand injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vulnerable parameter.
UpdatedNETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length parameters.
UpdatedENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting.
UpdatedIn TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation.
UpdatedWBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php.
UpdatedWBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via \admin\pages\sections_save.php namesection2 parameters.
UpdatedGIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.
UpdatedA use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.
Updatedftcms <=2.1 was discovered to be vulnerable to code execution attacks .
Updated- CVE-2022-30062: ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php Unscored
ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php
Updated ftcms <=2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp.
Updatedftcms <=2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php
UpdatedShopwind <=v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php.
UpdatedShopwind <=v3.4.2 was discovered to contain a Arbitrary File Download vulnerability via the neirong parameter at \backend\controllers\DbController.php.
UpdatedShopwind <=v3.4.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability.
UpdatedPrime95 30.7 build 9 suffers from a Buffer Overflow vulnerability that could lead to Remote Code Execution.
UpdatedIn Covid 19 Travel Pass Management 1.0, the code parameter is vulnerable to SQL injection attacks.
UpdatedIn Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks.
UpdatedIn Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks.
UpdatedGnuboard 5.55 and 5.56 is vulnerable to Cross Site Scripting (XSS) via bbs/member_confirm.php.
UpdatedA Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter.
UpdatedMingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter.
UpdatedMingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter.
UpdatedAn issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap out-of-bounds read.
UpdatedTenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to achieve the effect of router denial of service.
UpdatedXunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add function in cron.php.
UpdatedMA Lighting grandMA2 Light has a password of root for the root account. NOTE: The vendor's position is that the product was designed for isolated networks. Also, the successor product, grandMA3, is not affected by this vulnerability.
UpdatedFlower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down Celery task nodes.
UpdatedTenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status() in httpd module.
UpdatedDradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token.
Updated