Browse CVEs

MEDIUM 5.5 CVE-2022-42866 The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2… Ipados 9.2 / 13.1+ Fix from $1,6002022-12-15 MEDIUM 6.5 CVE-2022-42852 The issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.… Safari 9.2 / 15.7.2+ Fix from $1,6002022-12-15 MEDIUM 5.5 CVE-2022-42854 The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1. An app may be able to disclo… macOS 12.6.2+ Fix from $1,6002022-12-15 MEDIUM 5.5 CVE-2022-42843 This issue was addressed with improved data protection. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. … Ipados 9.2 / 16.2+ Fix from $1,6002022-12-15 MEDIUM 5.5 CVE-2022-3917 Improper access control of bootloader function was discovered in Motorola Mobility Motorola e20 prior to version RONS31.267-38-8 allows attacker with… Moto E20 Firmware Mitigation only Fix from $1,6002022-12-14 HIGH 7.5 CVE-2022-47410 An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.… Fp Newsletter 1.1.1 / 2.1.2+ Fix from $1,9502022-12-14 HIGH 7.5 CVE-2022-47411 An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.… Fp Newsletter 1.1.1 / 2.1.2+ Fix from $1,9502022-12-14 HIGH 7.5 CVE-2022-46355 A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204R… 6gk5204 0ba00 2mb2 Firmware 3.2.7+ Fix from $1,9502022-12-13 MEDIUM 5.5 CVE-2022-37930 A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary Flash Arrays which could pote… Sf100 Firmware 5.2.1.900+ Fix from $1,6002022-12-12 MEDIUM 5.3 CVE-2022-37909 Aruba has identified certain configurations of ArubaOS that can lead to sensitive information disclosure from the configured ESSIDs. The scenarios in… Sd Wan 6.5.4.22 / 8.6.0.17+ Fix from $1,6002022-12-12 HIGH 7.5 CVE-2022-23497 FreshRSS is a free, self-hostable RSS aggregator. User configuration files can be accessed by a remote user. In addition to user preferences, such co… Freshrss 1.20.2+ Fix from $1,9502022-12-09 MEDIUM 6.5 CVE-2022-23469 Traefik is an open source HTTP reverse proxy and load balancer. Versions prior to 2.9.6 are subject to a potential vulnerability in Traefik displayin… Traefik 2.9.6+ Fix from $1,6002022-12-08 MEDIUM 5.5 CVE-2022-39897 Exposure of Sensitive Information vulnerability in kernel prior to SMR Dec-2022 Release 1 allows attackers to access the kernel address information v… Android Mitigation only Fix from $1,6002022-12-08 MEDIUM 5.5 CVE-2022-42782 In wlan driver, there is a possible missing permission check, This could lead to local information disclosure. Android Mitigation only Fix from $1,6002022-12-06 MEDIUM 5.5 CVE-2022-42766 In wlan driver, there is a possible missing permission check, This could lead to local information disclosure. Android No fix yet Fix from $1,6002022-12-06 HIGH 7.5 CVE-2022-2827 AMI MegaRAC User Enumeration Vulnerability Megarac Sp X Mitigation only Fix from $1,9502022-12-05 CRITICAL 9.8 CVE-2022-32221 When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOP… Curl 7.86.0 / 12.6.3+ Fix from $2,3002022-12-05 MEDIUM 6.5 CVE-2022-41971 Nextcould Talk android is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.8, 13.0.10, 14.0.6, and 15.0.0, guests can continu… Nextcloud Talk 12.2.8 / 13.0.10+ Fix from $1,6002022-12-01 MEDIUM 5.5 CVE-2022-43901 IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.3 could disclose sensitive information. An authenticated local attacker could exploit… Websphere Automation For Ibm Cloud Pak For Watson Aiops 1.4.3+ Fix from $1,6002022-12-01 HIGH 7.5 CVE-2022-28607 An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information … Isic.lk after 2018-02-13 Fix from $1,9502022-12-01 MEDIUM 5.3 CVE-2022-1911 Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of… M Files Server 22.6.11534.4+ Fix from $1,6002022-11-30 HIGH 7.5 CVE-2022-4228 A vulnerability classified as problematic has been found in SourceCodester Book Store Management System 1.0. This affects an unknown part of the file… Book Store Management System No fix yet Fix from $1,9502022-11-30 MEDIUM 5.5 CVE-2022-41926 Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the receiver is not protected by broa… Talk 14.1.0+ Fix from $1,6002022-11-25 HIGH 7.5 CVE-2022-26885 When using tasks to read config files, there is a risk of database password disclosure. We recommend you upgrade to version 2.0.6 or higher. Dolphinscheduler 2.0.6+ Fix from $1,9502022-11-24 MEDIUM 5.5 CVE-2022-41946 pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `PreparedStatement.setText(int, InputStream)`… Postgresql Jdbc Driver 42.2.27 / 42.3.8+ Fix from $1,6002022-11-23 MEDIUM 5.3 CVE-2022-38113 This vulnerability discloses build and services versions in the server response header. Security Event Manager Mitigation only Fix from $1,6002022-11-23 HIGH 7.4 CVE-2022-41939 knative.dev/func is is a client library and CLI enabling the development and deployment of Kubernetes functions. Developers using a malicious or comp… Knative Func 1.8.1+ Fix from $1,9502022-11-19 HIGH 7.5 CVE-2022-42883 Sensitive Information Disclosure vulnerability discovered by Quiz And Survey Master plugin <= 7.3.10 on WordPress. Quiz And Survey Master after 7.3.10 Fix from $1,9502022-11-18 MEDIUM 5.3 CVE-2022-41618 Unauthenticated Error Log Disclosure vulnerability in Media Library Assistant plugin <= 3.00 on WordPress. Media Library Assistant 3.01+ Fix from $1,6002022-11-18 MEDIUM 6.5 CVE-2022-41655 Auth. (subscriber+) Sensitive Data Exposure vulnerability in Phone Orders for WooCommerce plugin <= 3.7.1 on WordPress. Phone Orders For Woocommerce 3.7.2+ Fix from $1,6002022-11-18