Skip to content

CVE-2022-39xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

577 records · Page 5 of 6

CVE-2022-39185: EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. 9.8 Critical
EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented hard-coded privileged user.
Updated 2025-04-08
CVE-2022-39184: EXFO - BV-10 Performance Endpoint Unit Authentication bypass 9.8 Critical
EXFO - BV-10 Performance Endpoint Unit authentication bypass User can manually manipulate access enabling authentication bypass.
Updated 2025-04-08
CVE-2022-39183: Moodle Plugin - SAML Auth Open Redirect 6.5 Medium
Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors.
Updated 2025-04-08
CVE-2022-39182: H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation 4.9 Medium
H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation.Version 1.6 is vulnerable to privilege escalation which may allow a malicious actor to gain system privileges.
Updated 2025-04-08
CVE-2022-39181: GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS) 6.1 Medium
GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS). Type 1: Reflected XSS (or Non-Persistent) - The server reads data directly from the HTTP request and reflects it back in the HTTP response. Reflected XSS exploits occur when an attacker causes a victim to supply dangerous content to a vulnerable web application, which is then reflected back to the victim and executed by the web
Updated 2025-04-29
CVE-2022-39180: College Management System v1.0 - SQL Injection (SQLi) 9.8 Critical
College Management System v1.0 - SQL Injection (SQLi). By inserting SQL commands to the username and password fields in the login.php page
Updated 2025-04-29
CVE-2022-39179: College Management System v1.0 - Authenticated remote code execution 7.2 High
College Management System v1.0 - Authenticated remote code execution. An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) can upload .php file that contains malicious code via student.php file.
Updated 2025-04-28
CVE-2022-39178: Webvendome - webvendome Internal Server IP Disclosure 5.3 Medium
Webvendome - webvendome Internal Server IP Disclosure. Send GET Request to the request which is shown in the picture. Internal Server IP and Full path disclosure.
Updated 2025-04-28
CVE-2022-39177: BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c. 8.8 High
BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c.
Updated 2026-04-15
CVE-2022-39176: BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len. 8.8 High
BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.
Updated 2026-04-15
CVE-2022-39173: In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During th 7.5 High
In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. This occurs when an attacker supposedly resumes a previous TLS session. During the resumption Client Hello a Hello Retry Request must be triggered. Both Client Hellos are required to contain a list of duplicate cipher suites to trigger the buffer overflow. In total, two Client Hellos have to be sent:
Updated 2025-05-20
CVE-2022-39172: A stored XSS in the process overview (bersicht zugewiesener Vorgaenge) in mbsupport openVIVA c2 20220101 allows a remote, authenticated, low-privileged attacker to execute arbitrar 5.4 Medium
A stored XSS in the process overview (bersicht zugewiesener Vorgaenge) in mbsupport openVIVA c2 20220101 allows a remote, authenticated, low-privileged attacker to execute arbitrary code in the victim's browser via name field of a process.
Updated 2024-09-09
CVE-2022-39170: libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c. Unscored
libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.
Updated 2024-08-03
CVE-2022-39168: IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. IBM X-Force ID: 235422. 4.6 Medium
IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. IBM X-Force ID: 235422.
Updated 2025-05-20
CVE-2022-39167: IBM Spectrum Virtualize information disclosure 5.9 Medium
IBM Spectrum Virtualize 8.5, 8.4, 8.3, 8.2, and 7.8, under certain configurations, could disclose sensitive information to an attacker using man-in-the-middle techniques. IBM X-Force ID: 235408.
Updated 2025-04-02
CVE-2022-39166: IBM Security Guardium information disclosure 4.4 Medium
IBM Security Guardium 11.4 could allow a privileged user to obtain sensitive information inside of an HTTP response. IBM X-Force ID: 235405.
Updated 2025-04-15
CVE-2022-39165: IBM AIX denial of service 6.2 Medium
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service. IBM X-Force ID: 235183.
Updated 2025-04-15
CVE-2022-39164: IBM AIX denial of service 6.2 Medium
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 235181.
Updated 2025-04-10
CVE-2022-39163: IBM Cognos Controller HTTP response smuggling 4.7 Medium
IBM Cognos Controller 11.0.0 through 11.1.0 is vulnerable to a Client-Side Desync (CSD) attack where an attacker could exploit a desynchronized browser connection that could lead to further cross-site scripting (XSS) attacks.
Updated 2025-08-15
CVE-2022-39161: IBM WebSphere Application Server information disclosure 4.8 Medium
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and IBM WebSphere Application Server Liberty, when configured to communicate with the Web Server Plug-ins for IBM WebSphere Application Server, could allow an authenticated user to conduct spoofing attacks. A man-in-the-middle attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive informat
Updated 2025-02-12
CVE-2022-39160: IBM Cognos Analytics cross-site scripting 6.1 Medium
IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 235064.
Updated 2025-04-17
CVE-2022-39159: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none. Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.
Updated 2022-12-30 · Rejected record
CVE-2022-39158: A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGE 5.3 Medium
A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M2200NC, RUGGEDCOM M969, RUGGEDCOM M969F, RUGGEDCOM M969NC, RUGGEDCOM RMC30, RUGGEDCOM RMC30NC, RUGGEDCOM RMC8388 V4.X, RUGGED
Updated 2025-08-12
CVE-2022-39157: A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.0 (All versions >= V34.0.252 < V34.0.254), Parasolid V34.1 (All versions < V34.1.24 7.8 High
A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.0 (All versions >= V34.0.252 < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V34.1 (All versions >= V34.1.242 < V34.1.244), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.0 (All versions >= V35.0.170 < V35.0.184), Simcenter Femap (All versions < V2023.1). The affected ap
Updated 2025-04-21
CVE-2022-39156: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2024-08-03
CVE-2022-39155: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2024-08-03
CVE-2022-39154: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2024-08-03
CVE-2022-39153: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2024-08-03
CVE-2022-39152: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2024-08-03
CVE-2022-39151: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 7.8 High
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2025-06-05
CVE-2022-39150: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2024-08-03
CVE-2022-39149: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2024-08-03
CVE-2022-39148: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2024-08-03
CVE-2022-39147: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2024-08-03
CVE-2022-39146: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2024-08-03
CVE-2022-39145: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2024-08-03
CVE-2022-39144: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2024-08-03
CVE-2022-39143: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2024-08-03
CVE-2022-39142: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.25 Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Parasolid V35.0 (All versions >= V35.0.161 < V35.0.164), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V20
Updated 2024-08-03
CVE-2022-39141: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The affected application is vulnerable to out of bounds read past the end of an a
Updated 2024-08-03
CVE-2022-39140: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The affected application contains an out of bounds write past the end of an alloc
Updated 2024-08-03
CVE-2022-39139: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The affected application contains an out of bounds write past the end of an alloc
Updated 2024-08-03
CVE-2022-39138: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The affected application contains an out of bounds write past the end of an alloc
Updated 2024-08-03
CVE-2022-39137: A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid Unscored
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The affected application is vulnerable to out of bounds read past the end of an a
Updated 2024-08-03
CVE-2022-39136: A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < 7.8 High
A vulnerability has been identified in JT2Go (All versions < V14.1.0.4), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.7), Teamcenter Visualization V13.3 (All versions >= V13.3.0.7 < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.3), Teamcenter Visualization V14.1 (All versions < V14.1.0.4). The affected appl
Updated 2025-04-21
CVE-2022-39135: Apache Calcite: potential XEE attacks Unscored
Apache Calcite 1.22.0 introduced the SQL operators EXISTS_NODE, EXTRACT_XML, XML_TRANSFORM and EXTRACT_VALUE do not restrict XML External Entity references in their configuration, making them vulnerable to a potential XML External Entity (XXE) attack. Therefore any client exposing these operators, typically by using Oracle dialect (the first three) or MySQL dialect (the last one), is affected by t
Updated 2024-08-03
CVE-2022-39134: In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel. 4.7 Medium
In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel.
Updated 2025-04-24
CVE-2022-39133: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. 5.5 Medium
In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Updated 2025-04-24
CVE-2022-39132: In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-04-24
CVE-2022-39131: In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. 5.5 Medium
In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel.
Updated 2025-04-24
CVE-2022-39130: In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-04-24
CVE-2022-39129: In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-04-24
CVE-2022-39128: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-05-14
CVE-2022-39127: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-05-14
CVE-2022-39126: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-05-14
CVE-2022-39125: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-05-14
CVE-2022-39124: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-05-14
CVE-2022-39123: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-05-14
CVE-2022-39122: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-05-14
CVE-2022-39121: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-05-14
CVE-2022-39120: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-05-15
CVE-2022-39119: In network service, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed Unscored
In network service, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
Updated 2024-08-03
CVE-2022-39118: In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-04-10
CVE-2022-39117: In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. 8.1 High
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Updated 2025-05-15
CVE-2022-39116: In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-04-10
CVE-2022-39115: In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed. 5.5 Medium
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
Updated 2025-05-15
CVE-2022-39114: In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed. 5.5 Medium
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
Updated 2025-05-15
CVE-2022-39113: In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed. 5.5 Medium
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
Updated 2025-05-15
CVE-2022-39112: In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed. 5.5 Medium
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
Updated 2025-05-15
CVE-2022-39111: In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed. 7.8 High
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
Updated 2025-05-15
CVE-2022-39110: In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed. 7.8 High
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
Updated 2025-05-15
CVE-2022-39109: In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed. 7.8 High
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
Updated 2025-05-15
CVE-2022-39108: In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed. 7.8 High
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
Updated 2025-05-15
CVE-2022-39107: In Soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in Soundrecorder service with no additional execution privileges needed. 7.8 High
In Soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in Soundrecorder service with no additional execution privileges needed.
Updated 2025-05-15
CVE-2022-39106: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-04-24
CVE-2022-39105: In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. 5.5 Medium
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.
Updated 2025-05-15
CVE-2022-39104: In contacts service, there is a missing permission check. This could lead to local denial of service in Contacts service with no additional execution privileges needed. 5.5 Medium
In contacts service, there is a missing permission check. This could lead to local denial of service in Contacts service with no additional execution privileges needed.
Updated 2025-04-10
CVE-2022-39103: In Gallery service, there is a missing permission check. This could lead to local denial of service in Gallery service with no additional execution privileges needed. 5.5 Medium
In Gallery service, there is a missing permission check. This could lead to local denial of service in Gallery service with no additional execution privileges needed.
Updated 2025-05-15
CVE-2022-39102: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed. 7.8 High
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Updated 2025-04-24
CVE-2022-39101: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed. 7.8 High
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Updated 2025-04-24
CVE-2022-39100: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed. 7.8 High
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Updated 2025-04-24
CVE-2022-39099: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed. 7.8 High
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Updated 2025-04-23
CVE-2022-39098: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed. 7.8 High
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Updated 2025-04-23
CVE-2022-39097: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed. 7.8 High
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Updated 2025-04-23
CVE-2022-39096: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed. 7.8 High
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Updated 2025-04-23
CVE-2022-39095: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed. 7.8 High
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Updated 2025-04-23
CVE-2022-39094: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed. 7.8 High
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Updated 2025-04-23
CVE-2022-39093: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed. 7.8 High
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Updated 2025-04-23
CVE-2022-39092: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed. 7.8 High
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Updated 2025-04-23
CVE-2022-39091: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed. 7.8 High
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Updated 2025-04-23
CVE-2022-39090: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed. 7.8 High
In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Updated 2025-04-23
CVE-2022-39089: In mlog service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. 4.4 Medium
In mlog service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
Updated 2025-01-28
CVE-2022-39088: In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. 6.7 Medium
In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.
Updated 2025-04-10
CVE-2022-39087: In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. 6.7 Medium
In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.
Updated 2025-04-10
CVE-2022-39086: In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. 6.7 Medium
In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.
Updated 2025-04-10
CVE-2022-39085: In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. 6.7 Medium
In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.
Updated 2025-04-10
CVE-2022-39084: In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. 6.7 Medium
In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.
Updated 2025-04-10
CVE-2022-39083: In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. 6.7 Medium
In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.
Updated 2025-04-10
CVE-2022-39082: In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. 6.7 Medium
In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.
Updated 2025-04-10
CVE-2022-39081: In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. 6.7 Medium
In network service, there is a missing permission check. This could lead to local escalation of privilege with System execution privileges needed.
Updated 2025-04-10

Search a CVE ID or check dependency files →