CVE-2022-47xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

514 records · Page 3 of 6

• CVE-2022-47499: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. 4.4 Medium

  In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  Updated 2025-01-28
• CVE-2022-47498: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. 4.4 Medium

  In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  Updated 2025-01-28
• CVE-2022-47497: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. 4.4 Medium

  In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  Updated 2025-01-28
• CVE-2022-47496: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. 4.4 Medium

  In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  Updated 2025-01-28
• CVE-2022-47495: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. 4.4 Medium

  In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  Updated 2025-01-28
• CVE-2022-47494: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. 4.4 Medium

  In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  Updated 2025-01-28
• CVE-2022-47493: In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. 5.5 Medium

  In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  Updated 2025-01-28
• CVE-2022-47492: In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. 5.5 Medium

  In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  Updated 2025-01-28
• CVE-2022-47491: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. 4.4 Medium

  In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  Updated 2025-01-28
• CVE-2022-47490: In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. 5.5 Medium

  In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

  Updated 2025-01-28
• CVE-2022-47489: In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. 4.4 Medium

  In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  Updated 2025-01-28
• CVE-2022-47488: In spipe drive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. 4.4 Medium

  In spipe drive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  Updated 2025-01-28
• CVE-2022-47487: In thermal service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service local denial of service with no additional exe 5.5 Medium

  In thermal service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service local denial of service with no additional execution privileges.

  Updated 2025-01-28
• CVE-2022-47486: In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. 4.4 Medium

  In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  Updated 2025-01-28
• CVE-2022-47485: In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. 4.4 Medium

  In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  Updated 2025-01-28
• CVE-2022-47484: In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed. Unscored

  In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.

  Updated 2025-03-05
• CVE-2022-47483: In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed. 5.5 Medium

  In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.

  Updated 2025-03-05
• CVE-2022-47482: In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed. 5.5 Medium

  In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.

  Updated 2025-03-05
• CVE-2022-47481: In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed. 5.5 Medium

  In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.

  Updated 2025-03-05
• CVE-2022-47480: In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed. 5.5 Medium

  In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.

  Updated 2025-03-05
• CVE-2022-47479: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. 5.5 Medium

  In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  Updated 2025-03-06
• CVE-2022-47478: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. 5.5 Medium

  In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  Updated 2025-03-06
• CVE-2022-47477: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. 5.5 Medium

  In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  Updated 2025-03-06
• CVE-2022-47476: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. 5.5 Medium

  In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  Updated 2025-03-06
• CVE-2022-47475: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. 5.5 Medium

  In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  Updated 2025-03-06
• CVE-2022-47474: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. 5.5 Medium

  In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  Updated 2025-03-06
• CVE-2022-47473: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. Unscored

  In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  Updated 2025-03-05
• CVE-2022-47472: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. Unscored

  In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  Updated 2025-03-05
• CVE-2022-47471: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. 5.5 Medium

  In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

  Updated 2025-03-05
• CVE-2022-47470: In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed. 4.4 Medium

  In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed.

  Updated 2025-01-28
• CVE-2022-47469: In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed. 4.4 Medium

  In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed.

  Updated 2025-01-28
• CVE-2022-47468: In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. 5.5 Medium

  In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

  Updated 2025-02-10
• CVE-2022-47467: In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. 5.5 Medium

  In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

  Updated 2025-02-10
• CVE-2022-47466: In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. 5.5 Medium

  In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

  Updated 2025-02-10
• CVE-2022-47465: In vdsp service, there is a missing permission check. This could lead to local denial of service in vdsp service. 5.5 Medium

  In vdsp service, there is a missing permission check. This could lead to local denial of service in vdsp service.

  Updated 2025-02-11
• CVE-2022-47464: In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. 5.5 Medium

  In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

  Updated 2025-02-10
• CVE-2022-47463: In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service. 5.5 Medium

  In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

  Updated 2025-02-10
• CVE-2022-47462: In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed. Unscored

  In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.

  Updated 2025-03-05
• CVE-2022-47461: In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed. Unscored

  In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.

  Updated 2025-03-05
• CVE-2022-47460: In gpu device, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel. Unscored

  In gpu device, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel.

  Updated 2025-03-05
• CVE-2022-47459: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Unscored

  In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  Updated 2025-03-05
• CVE-2022-47458: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. 5.5 Medium

  In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  Updated 2025-03-05
• CVE-2022-47457: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Unscored

  In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  Updated 2025-03-05
• CVE-2022-47456: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Unscored

  In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  Updated 2025-03-05
• CVE-2022-47455: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Unscored

  In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  Updated 2025-03-05
• CVE-2022-47454: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Unscored

  In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  Updated 2025-03-12
• CVE-2022-47453: In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service. Unscored

  In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service.

  Updated 2025-03-05
• CVE-2022-47452: In gnss driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services. 5.5 Medium

  In gnss driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.

  Updated 2025-03-26
• CVE-2022-47451: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. 6.3 Medium

  In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

  Updated 2025-03-25
• CVE-2022-47450: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure. 5.5 Medium

  In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.

  Updated 2025-03-26
• CVE-2022-47449: WordPress Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS) 7.1 High

  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RexTheme Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD plugin <= 3.1.5 versions.

  Updated 2026-04-28
• CVE-2022-47448: WordPress xili-tidy-tags Plugin <= 1.12.03 is vulnerable to Cross Site Request Forgery (CSRF) 5.4 Medium

  Cross-Site Request Forgery (CSRF) vulnerability in dev.Xiligroup.Com - MS plugin <= 1.12.03 versions.

  Updated 2026-04-28
• CVE-2022-47447: WordPress WP-Advanced-Search Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF) 4.3 Medium

  Cross-Site Request Forgery (CSRF) vulnerability in Mathieu Chartier WordPress WP-Advanced-Search plugin <= 3.3.8 versions.

  Updated 2026-04-28
• CVE-2022-47446: WordPress Store Locator Plugin <= 3.98.7 is vulnerable to Cross Site Request Forgery (CSRF) 5.4 Medium

  Cross-Site Request Forgery (CSRF) vulnerability in Viadat Creations Store Locator for WordPress with Google Maps – LotsOfLocales plugin <= 3.98.7 versions.

  Updated 2026-04-28
• CVE-2022-47445: WordPress Be POPIA Compliant Plugin <= 1.2.0 is vulnerable to SQL Injection 8.2 High

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a through 1.2.0.

  Updated 2026-04-28
• CVE-2022-47444: WordPress ProfilePress Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS) 7.1 High

  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin <= 4.5.3 versions.

  Updated 2026-04-28
• CVE-2022-47443: WordPress Multi Rating Plugin <= 5.0.5 is vulnerable to Cross Site Request Forgery (CSRF) 4.3 Medium

  Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions.

  Updated 2026-04-28
• CVE-2022-47442: WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection 5.8 Medium

  Improper Neutralization of Formula Elements in a CSV File vulnerability in AyeCode Ltd UsersWP.This issue affects UsersWP: from n/a through 1.2.3.9.

  Updated 2026-04-28
• CVE-2022-47441: WordPress Charitable Plugin <= 1.7.0.10 is vulnerable to Cross Site Scripting (XSS) 7.1 High

  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Charitable Donations & Fundraising Team Donation Forms by Charitable plugin <= 1.7.0.10 versions.

  Updated 2026-04-28
• CVE-2022-47440: WordPress My Tickets Plugin <= 1.9.10 is vulnerable to Cross Site Request Forgery (CSRF) 4.3 Medium

  Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Tickets plugin <= 1.9.10 versions.

  Updated 2026-04-28
• CVE-2022-47439: WordPress Open Graphite Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS) 7.1 High

  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Rocket Apps Open Graphite plugin <= 1.6.0 versions.

  Updated 2026-04-28
• CVE-2022-47438: WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS) 5.9 Medium

  Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions.

  Updated 2026-04-28
• CVE-2022-47437: WordPress WSB Brands Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS) 5.9 Medium

  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Branko Borilovic WSB Brands plugin <= 1.1.8 versions.

  Updated 2026-04-28
• CVE-2022-47436: WordPress Yatra Plugin <= 2.1.14 is vulnerable to Cross Site Scripting (XSS) 5.9 Medium

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MantraBrain Yatra allows Stored XSS.This issue affects Yatra: from n/a through 2.1.14.

  Updated 2026-04-28
• CVE-2022-47435: WordPress WP-OliveCart Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS) 5.9 Medium

  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Olive Design WP-OliveCart plugin <= 1.1.3 versions.

  Updated 2026-04-28
• CVE-2022-47434: WordPress PB SEO Friendly Images Plugin <= 4.0.5 is vulnerable to Cross Site Scripting (XSS) 5.9 Medium

  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PB SEO Friendly Images plugin <= 4.0.5 versions.

  Updated 2026-04-28
• CVE-2022-47433: WordPress Multi Rating Plugin <= 5.0.5 is vulnerable to Cross Site Scripting (XSS) 7.1 High

  Unauth. Reflected Cross-Site Scripting vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions.

  Updated 2026-04-28
• CVE-2022-47432: WordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to SQL Injection 6.7 Medium

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kemal YAZICI - PluginPress Shortcode IMDB allows SQL Injection.This issue affects Shortcode IMDB: from n/a through 6.0.8.

  Updated 2026-04-28
• CVE-2022-47431: WordPress Open RDW kenteken voertuiginformatie Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS) 7.1 High

  Reflected Cross-Site Scripting (XSS) vulnerability in Tussendoor internet & marketing Open RDW kenteken voertuiginformatie plugin <= 2.0.14 versions.

  Updated 2026-04-28
• CVE-2022-47430: WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection 6.7 Medium

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar The School Management – Education & Learning Management allows SQL Injection.This issue affects The School Management – Education & Learning Management: from n/a through 4.1.

  Updated 2026-04-28
• CVE-2022-47429: WordPress Coming Soon Landing Page and Maintenance Mode WordPress Plugin plugin <= 2.2.0 - Broken Access Control 5.3 Medium

  Missing Authorization vulnerability in 8Degree Themes Coming Soon Landing Page and Maintenance Mode WordPress Plugin allows Retrieve Embedded Sensitive Data.This issue affects Coming Soon Landing Page and Maintenance Mode WordPress Plugin: from n/a through 2.2.0.

  Updated 2026-04-28
• CVE-2022-47428: WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection 6.7 Medium

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL Injection.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.7.

  Updated 2026-04-28
• CVE-2022-47427: WordPress My Calendar Plugin <= 3.3.24.1 is vulnerable to Cross Site Request Forgery (CSRF) 5.4 Medium

  Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.3.24.1 versions.

  Updated 2026-04-28
• CVE-2022-47426: WordPress Neshan Maps Plugin <= 1.1.4 is vulnerable to SQL Injection 6.0 Medium

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Neshan Maps Platform Neshan Maps neshan-maps allows SQL Injection.This issue affects Neshan Maps: from n/a through 1.1.4.

  Updated 2026-04-28
• CVE-2022-47425: WordPress ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin <= 3.4.10 - Broken Access Control 4.3 Medium

  Missing Authorization vulnerability in Repute Infosystems ARMember allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ARMember: from n/a through 3.4.10.

  Updated 2026-04-28
• CVE-2022-47424: WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF) 5.4 Medium

  Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allows Cross-Site Request Forgery.This issue affects ARMember: from n/a through 4.0.5; ARMember Premium: from n/a before 6.7.1.

  Updated 2026-04-28
• CVE-2022-47423: WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS) 5.9 Medium

  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions.

  Updated 2026-04-28
• CVE-2022-47422: WordPress WordPress Stripe Donation and Payment Plugin Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF) 4.3 Medium

  Cross-Site Request Forgery (CSRF) vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin <= 3.1.5 versions.

  Updated 2026-04-28
• CVE-2022-47421: WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS) 5.9 Medium

  Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember (free), Repute InfoSystems ARMember (premium) plugins.

  Updated 2026-04-28
• CVE-2022-47420: WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection 6.4 Medium

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Online ADA Accessibility Suite by Online ADA allows SQL Injection.This issue affects Accessibility Suite by Online ADA: from n/a through 4.12.

  Updated 2026-04-28
• CVE-2022-47419: Mayan EDMS Tag XSS 5.4 Medium

  An XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system.

  Updated 2025-03-25
• CVE-2022-47418: LogicalDOC Document Version Comment Stored XSS 5.4 Medium

  LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document version comments.

  Updated 2025-03-25
• CVE-2022-47417: LogicalDOC Document File Name Stored XSS 5.4 Medium

  LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the document file name.

  Updated 2025-03-25
• CVE-2022-47416: LogicalDOC Chat Stored XSS 5.4 Medium

  LogicalDOC Enterprise is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app chat system.

  Updated 2025-03-25
• CVE-2022-47415: LogicalDOC Messaging Stored XSS 5.4 Medium

  LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app messaging system (both subject and message bodies).

  Updated 2025-03-25
• CVE-2022-47414: CVE-2022-47414 5.4 Medium

  If an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document "note" functionality.

  Updated 2025-03-25
• CVE-2022-47413: CVE-2022-47413 5.4 Medium

  Given a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or "Type II") XSS condition.

  Updated 2025-03-25
• CVE-2022-47412: ONLYOFFICE Workspace Search Stored XSS 5.4 Medium

  Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition.

  Updated 2025-03-25
• CVE-2022-47411: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for T 9.1 Critical

  An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via unsubscribeAction operations.

  Updated 2025-04-21
• CVE-2022-47410: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for T 9.1 Critical

  An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via createAction operations.

  Updated 2025-04-21
• CVE-2022-47409: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for T 9.1 Critical

  An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Attackers can unsubscribe everyone via a series of modified subscription UIDs in deleteAction operations.

  Updated 2025-04-21
• CVE-2022-47408: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for T 9.1 Critical

  An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. There is a CAPTCHA bypass that can lead to subscribing many people.

  Updated 2025-04-21
• CVE-2022-47407: An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3. An attacker can continue the quiz of a different user. In do 6.5 Medium

  An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3. An attacker can continue the quiz of a different user. In doing so, the attacker can view that user's answers and modify those answers.

  Updated 2025-04-21
• CVE-2022-47406: An issue was discovered in the fe_change_pwd (aka Change password for frontend users) extension before 2.0.5, and 3.x before 3.0.3, for TYPO3. The extension fails to revoke existin 5.4 Medium

  An issue was discovered in the fe_change_pwd (aka Change password for frontend users) extension before 2.0.5, and 3.x before 3.0.3, for TYPO3. The extension fails to revoke existing sessions for the current user when the password has been changed.

  Updated 2025-04-21
• CVE-2022-47405: Not used Rejected

  Not used

  Updated 2025-03-17 · Rejected record
• CVE-2022-47404: Not used Rejected

  Not used

  Updated 2025-03-17 · Rejected record
• CVE-2022-47403: Not used Rejected

  Not used

  Updated 2025-03-17 · Rejected record
• CVE-2022-47402: Not used Rejected

  Not used

  Updated 2025-03-17 · Rejected record
• CVE-2022-47401: Not used Rejected

  Not used

  Updated 2025-03-17 · Rejected record
• CVE-2022-47400: Not used Rejected

  Not used

  Updated 2025-03-17 · Rejected record

Search a CVE ID or check dependency files →