Menu

Star on GitHub · 3.2k

2022

25,043 vulnerabilities published in 2022.

Results

10,650 of 25,043· Page 20/213
5.5
CVE-2022-42773

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

5.5
CVE-2022-42772

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

4.7
CVE-2022-42771

In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.

4.7
CVE-2022-42770

In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.

4.3
CVE-2022-42768

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

5.5
CVE-2022-42766

In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.

5.5
CVE-2022-42765

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

5.5
CVE-2022-42764

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

5.5
CVE-2022-42763

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

5.5
CVE-2022-42762

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

5.5
CVE-2022-42761

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

5.5
CVE-2022-42760

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

5.5
CVE-2022-42759

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

5.5
CVE-2022-42756

In sensor driver, there is a possible buffer overflow due to a missing bounds check. This could lead to local denial of

5.5
CVE-2022-42755

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

5.5
CVE-2022-42754

In npu driver, there is a memory corruption due to a use after free. This could lead to local denial of service in kerne

4.7
CVE-2022-39134

In audio driver, there is a use after free due to a race condition. This could lead to local denial of service in kernel

5.5
CVE-2022-39133

In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.

5.5
CVE-2022-39132

In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

5.5
CVE-2022-39131

In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of serv

5.5
CVE-2022-39130

In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local d

5.5
CVE-2022-39129

In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local d

5.5
CVE-2022-39106

In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

4.7
CVE-2022-40603

A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through

6.3
CVE-2022-46151

Querybook is an open source data querying UI. In affected versions user provided data is not escaped in the error field

6.1
CVE-2022-45990

A cross-site scripting (XSS) vulnerability in the component /signup_script.php of Ecommerce-Website v1.0 allows attacker

6.1
CVE-2022-45769

A cross-site scripting (XSS) vulnerability in ClicShopping_V3 v3.402 allows attackers to execute arbitrary web scripts o

5.4
CVE-2022-43706

Cross-site scripting (XSS) vulnerability in the Web UI of StackStorm versions prior to 3.8.0 allowed logged in users wit

5.3
CVE-2022-43557

The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, th

6.1
CVE-2022-43556

Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XSS in the text input field

6.5
CVE-2022-35260

curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white sp

6.5
CVE-2022-35256

The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated wit

6.5
CVE-2022-23143

ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an a

4.9
CVE-2022-42706

An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified throu

6.5
CVE-2022-42705

A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remo

5.4
CVE-2021-34181

Cross Site Scripting (XSS) vulnerability in TomExam 3.0 via p_name parameter to list.thtml.

6.5
CVE-2022-43516

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in

5.4
CVE-2022-43097

Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scriptin

4.4
CVE-2022-23467

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linu

5.5
CVE-2022-4293

Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.

5.3
CVE-2022-43515

Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addre

6.5
CVE-2022-3926

The WP OAuth Server (OAuth Authentication) WordPress plugin before 3.4.2 does not have CSRF check when regenerating secr

4.8
CVE-2022-3909

The Add Comments WordPress plugin through 1.0.1 does not sanitise and escape some of its settings, which could allow hig

4.8
CVE-2022-3892

The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.2 does not sanitize and escape Client IDs, which

4.8
CVE-2022-3838

The WPUpper Share Buttons WordPress plugin through 3.42 does not sanitise and escape some of its settings, which could a

4.8
CVE-2022-3837

The Uji Countdown WordPress plugin before 2.3.1 does not sanitise and escape some of its settings, which could allow hig

4.8
CVE-2022-3830

The WP Page Builder WordPress plugin through 1.2.8 does not sanitise and escape some of its settings, which could allow

6.5
CVE-2022-3677

The Advanced Import WordPress plugin before 1.3.8 does not have CSRF check when installing and activating plugins, which

4.8
CVE-2022-3426

The Advanced WP Columns WordPress plugin through 2.0.6 does not sanitise and escape some of its settings, which could al

5.5
CVE-2022-4269

A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirect

Test your stack for 2022issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.