Menu

Star on GitHub · 3.2k

2022

25,043 vulnerabilities published in 2022.

Results

9,682 of 25,043· Page 75/194
7.5
CVE-2022-20308

In hostapd, there is a possible insecure configuration due to an insecure default value. This could lead to remote denia

7.6
CVE-2022-20302

In Settings, there is a possible way to bypass factory reset protections due to a sandbox escape. This could lead to loc

7.8
CVE-2022-20297

In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could le

7.8
CVE-2022-20292

In Settings, there is a possible way to bypass factory reset protections due to a logic error in the code. This could le

7.8
CVE-2022-20286

In Connectivity, there is a possible bypass the restriction of starting activity from background due to a logic error in

8.8
CVE-2022-20283

In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code executi

7.8
CVE-2022-20282

In AppWidget, there is a possible way to start an activity from the background due to a missing permission check. This c

7.8
CVE-2022-20281

In Core, there is a possible way to start an activity from the background due to a missing permission check. This could

7.8
CVE-2022-20274

In Keyguard, there is a missing permission check. This could lead to local escalation of privilege and prevention of scr

7.8
CVE-2022-20271

In PermissionController, there is a possible way to grant some permissions without user consent due to misleading or ins

7.8
CVE-2022-20268

In RestrictionsManager, there is a possible way to send a broadcast that should be restricted to system apps due to a pe

7.8
CVE-2022-20258

In Bluetooth, there is a possible way to bypass compiler exploit mitigations due to a configuration error. This could le

8.8
CVE-2022-20254

In Wi-Fi, there is a permissions bypass. This could lead to local escalation of privilege from the guest user with no ad

7.2
CVE-2021-44720

In Ivanti Pulse Secure Pulse Connect Secure (PCS) before 9.1R12, the administrator password is stored in the HTML source

7.8
CVE-2022-35677

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffe

7.8
CVE-2022-35676

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffe

7.8
CVE-2022-35675

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Use After Free v

7.8
CVE-2022-35674

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds r

7.8
CVE-2022-35673

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds r

7.8
CVE-2022-35667

Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are

7.8
CVE-2022-35666

Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are

7.8
CVE-2022-35665

Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are

7.8
CVE-2022-34263

Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by a Use After Free vulnerability

7.8
CVE-2022-34260

Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds write vulnerab

7.8
CVE-2022-34235

Adobe Premiere Elements version 2020v20 (and earlier) is affected by an Uncontrolled Search Path Element which could lea

7.1
CVE-2022-28754

Zoom On-Premise Meeting Connector MMR before version 4.8.129.20220714 contains an improper access control vulnerability.

7.1
CVE-2022-28753

Zoom On-Premise Meeting Connector MMR before version 4.8.129.20220714 contains an improper access control vulnerability.

7.5
CVE-2022-28750

Zoom On-Premise Meeting Connector Zone Controller (ZC) before version 4.8.20220419.112 fails to properly parse STUN erro

7.5
CVE-2022-20408

Product: AndroidVersions: Android kernelAndroid ID: A-204782372References: N/A

7.5
CVE-2022-20407

Product: AndroidVersions: Android kernelAndroid ID: A-210916981References: N/A

7.5
CVE-2022-20406

Product: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/A

7.5
CVE-2022-20404

Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A

7.5
CVE-2022-20401

In SAEMM_RetrievEPLMNList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to a missing bounds c

7.8
CVE-2022-20383

In AllocateInternalBuffers of g3aa_buffer_allocator.cc, there is a possible out of bounds write due to an integer overfl

7.5
CVE-2022-20380

Product: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/A

7.5
CVE-2022-20375

In LteRrcNrProAsnDecode of LteRrcNr_Codec.c, there is a possible out of bounds read due to a missing bounds check. This

7.5
CVE-2022-20370

Product: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/A

7.8
CVE-2022-20368

Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel

7.8
CVE-2022-20250

In Messaging, there is a possible way to attach files to a message without proper access checks due to improper input va

7.8
CVE-2022-20248

In Settings, there is a possible way to connect to an open network bypassing DISALLOW_CONFIG_WIFI restriction due to a l

7.5
CVE-2022-20247

In Media, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information di

7.8
CVE-2022-20246

In WindowManager, there is a possible bypass of the restrictions for starting activities from the background due to an i

7.5
CVE-2022-20244

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

7.8
CVE-2022-20180

In several functions of mali_gralloc_reference.cpp, there is a possible arbitrary code execution due to a missing bounds

8.3
CVE-2021-22289

Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version >=4.0 may allow

7.3
CVE-2022-2766

A vulnerability was found in SourceCodester Loan Management System. It has been rated as critical. Affected by this issu

7.5
CVE-2022-38161

The Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other platforms, allows unrestri

7.5
CVE-2022-38155

TEE_Malloc in Samsung mTower through 0.3.0 allows a trusted application to achieve Excessive Memory Allocation via a lar

7.5
CVE-2022-38150

In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically

8.8
CVE-2022-37024

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils

Test your stack for 2022issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.