CVE-2022-33xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
502 records · Page 3 of 6
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
UpdatedWindows Kerberos Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Remote Code Execution Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Remote Code Execution Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedWindows Partition Management Driver Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedWindows Kerberos Elevation of Privilege Vulnerability
UpdatedAzure Batch Node Agent Elevation of Privilege Vulnerability
UpdatedWindows TCP/IP Driver Denial of Service Vulnerability
UpdatedXbox Live Save Service Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedAzure Site Recovery Elevation of Privilege Vulnerability
UpdatedSystem Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability
UpdatedMicrosoft Defender for Endpoint Tampering Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability
UpdatedWindows GDI+ Remote Code Execution Vulnerability
Updated- CVE-2022-33634: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability 8.1 High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Updated Skype for Business and Lync Remote Code Execution Vulnerability
UpdatedMicrosoft Office Security Feature Bypass Vulnerability
UpdatedMicrosoft Excel Security Feature Bypass Vulnerability
UpdatedMultiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/set_sys_time/` API is affected by a command injection vulnerability.
UpdatedMultiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/remove/` API is affected by a command injection vulnerability.
UpdatedMultiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/remove_sniffer_raw_log/` API is affected by a command injection vulnerability.
UpdatedMultiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/config_rollback/` API is affected by a command injection vulnerability.
UpdatedMultiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/clear_tools_log/` API is affected by command injection vulnerability.
UpdatedImproper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "29" and prior, Mitsubishi Electric Corporation ME
UpdatedActive Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is liste
UpdatedCross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interface, Refrigerator, HEMS adapter, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTILATOR, Rice cooker, Mitsubishi Electric HEMS control adapter, Energy Recovery Ventilator, Smart Switch and Air Purifier) allows a remote unauthenticated attacker to execute an malicious scri
UpdatedCleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE, HEMS adapter, Wi-Fi Interface, Air Conditioning, Induction hob, Mitsubishi Electric HEMS Energy Measurement Unit, Refrigerator, Remote control with Wi-Fi Interface, BATHROOM THERMO VENTI
UpdatedDeserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, and Mitsubishi Electric MC Works64 versions 4.04E and prior a
UpdatedOut-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric GENESIS32 versions 9.7 and prior, Mitsubishi Electric Ic
UpdatedDeserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric GENESIS32 versions 9.7 and prior, Mitsubi
UpdatedInclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, and Mitsubishi Electric MC Works64 ver
UpdatedDeserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, and Mitsubishi Electric MC Works64 versions 4.04E and prior a
UpdatedDeserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, and Mitsubishi Electric MC Works64 versions 4.04E and prior a
UpdatedMultiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_sdk_file/` API is affected by command injection vulnerability.
UpdatedMultiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_https_cert_file/` API is affected by command injection vulnerability.
UpdatedMultiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/action/import_cert_file/` API is affected by command injection vulnerability.
UpdatedBrowse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Address Book via unspecified vectors.
UpdatedThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused
Updated · Rejected recordTransient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.
UpdatedMemory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
UpdatedTransient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.
UpdatedTransient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.
UpdatedTransient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.
UpdatedTransient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue.
UpdatedMemory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
UpdatedMemory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM.
UpdatedMemory corruption in Automotive Android OS due to improper input validation.
UpdatedTransient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.
Updated- CVE-2022-33298: Use after free in Modem 6.7 Medium
Memory corruption due to use after free in Modem while modem initialization.
Updated Information disclosure due to buffer overread in Linux sensors
UpdatedMemory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.
UpdatedInformation disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.
UpdatedTransient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.
UpdatedMemory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it.
UpdatedInformation disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
UpdatedTransient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.
UpdatedMemory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
UpdatedMemory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.
UpdatedInformation disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
UpdatedTransient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
UpdatedTransient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
UpdatedInformation disclosure due to buffer over-read in WLAN while parsing BTM action frame.
UpdatedInformation disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.
UpdatedMemory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.
UpdatedMemory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames.
UpdatedMemory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.
Updated- CVE-2022-33279: Stack based buffer overflow in WLAN 9.8 Critical
Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.
Updated Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.
Updated