Browse CVEs

MEDIUM 6.7 CVE-2022-20504 In multiple locations of DreamManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and dismissa… Android Patch available Fix from $1,6002022-12-16 HIGH 7.8 CVE-2022-20506 In onCreate of WifiDialogActivity.java, there is a missing permission check. This could lead to local escalation of privilege from a guest user with … Android Patch available Fix from $1,9502022-12-16 HIGH 7.8 CVE-2022-20508 In onAttach of ConfigureWifiSettings.java, there is a possible way for a guest user to change WiFi settings due to a permissions bypass. This could l… Android Patch available Fix from $1,9502022-12-16 MEDIUM 5.5 CVE-2022-20510 In getNearbyNotificationStreamingPolicy of DevicePolicyManagerService.java, there is a possible way to learn about the notification streaming policy … Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.5 CVE-2022-20511 In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check. This could lead to local information disclosu… Android Patch available Fix from $1,6002022-12-16 MEDIUM 5.3 CVE-2022-4555 The WP Shamsi plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the deactivate() function hooked via in… Wp Shamsi 4.1.1+ Fix from $1,6002022-12-16 MEDIUM 6.5 CVE-2022-4501 The Mega Addons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the vc_saving_data function in versio… Mega Addons For Wpbakery Page Builder after 4.2.7 Fix from $1,6002022-12-14 HIGH 8.8 CVE-2022-4223EPSS 80% The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities such as pg_d… Pgadmin 4 6.17+ Fix from $1,9502022-12-13 HIGH 8.6 CVE-2022-41272 An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search (UDS) of SAP NetWeaver P… Netweaver Process Integration Mitigation only Fix from $1,9502022-12-13 CRITICAL 9.4 CVE-2022-41271 An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver Process Integration (PI) - vers… Netweaver Process Integration Mitigation only Fix from $2,3002022-12-13 MEDIUM 6.5 CVE-2022-3946 The Welcart e-Commerce WordPress plugin before 2.8.4 does not have authorisation and CSRF in an AJAX action, allowing any logged-in user to create, u… Welcart E Commerce 2.8.4+ Fix from $1,6002022-12-12 HIGH 8.1 CVE-2022-3999 The DPD Baltic Shipping WordPress plugin before 1.2.57 does not have authorisation and CSRF in an AJAX action, which could allow any authenticated us… Woocommerce Shipping after 1.2.11 Fix from $1,9502022-12-12 HIGH 7.5 CVE-2022-4366 Missing Authorization in GitHub repository lirantal/daloradius prior to master branch. Daloradius Patch available Fix from $1,9502022-12-08 HIGH 8.8 CVE-2022-43581 IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing autho… Content Navigator after 3.0.12 Fix from $1,9502022-12-07 MEDIUM 5.5 CVE-2022-42782 In wlan driver, there is a possible missing permission check, This could lead to local information disclosure. Android Mitigation only Fix from $1,6002022-12-06 HIGH 7.8 CVE-2022-42778 In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privi… Android No fix yet Fix from $1,9502022-12-06 HIGH 7.8 CVE-2022-42776 In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privileges ne… Android Mitigation only Fix from $1,9502022-12-06 HIGH 7.8 CVE-2022-42777 In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri… Android No fix yet Fix from $1,9502022-12-06 MEDIUM 5.5 CVE-2022-42766 In wlan driver, there is a possible missing permission check, This could lead to local information disclosure. Android No fix yet Fix from $1,6002022-12-06 HIGH 7.8 CVE-2022-39102 In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri… Android No fix yet Fix from $1,9502022-12-06 HIGH 7.8 CVE-2022-39098 In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri… Android Mitigation only Fix from $1,9502022-12-06 HIGH 7.8 CVE-2022-39099 In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri… Android Mitigation only Fix from $1,9502022-12-06 HIGH 7.8 CVE-2022-39100 In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri… Android No fix yet Fix from $1,9502022-12-06 HIGH 7.8 CVE-2022-39101 In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri… Android Mitigation only Fix from $1,9502022-12-06 HIGH 7.8 CVE-2022-39094 In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri… Android Mitigation only Fix from $1,9502022-12-06 HIGH 7.8 CVE-2022-39095 In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri… Android Mitigation only Fix from $1,9502022-12-06 HIGH 7.8 CVE-2022-39096 In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri… Android Mitigation only Fix from $1,9502022-12-06 HIGH 7.8 CVE-2022-39097 In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri… Android Mitigation only Fix from $1,9502022-12-06 HIGH 7.8 CVE-2022-39091 In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri… Android Mitigation only Fix from $1,9502022-12-06 HIGH 7.8 CVE-2022-39092 In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution pri… Android Mitigation only Fix from $1,9502022-12-06