stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2022-21904 (severity: HIGH, weakness: NVD-CWE-Other)
Windows GDI Information Disclosure Vulnerability
CVE-2022-21905 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Hyper-V Security Feature Bypass Vulnerability
CVE-2022-21906 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Defender Application Control Security Feature Bypass Vulnerability
CVE-2022-21907 (severity: CRITICAL, weakness: NVD-CWE-Other)
HTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2022-21908 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Installer Elevation of Privilege Vulnerability
CVE-2022-2191 (severity: HIGH, weakness: CWE-404)
In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release ByteBuffers from configured ByteBufferPool in case of error code paths.
CVE-2022-21910 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Cluster Port Driver Elevation of Privilege Vulnerability
CVE-2022-21911 (severity: HIGH, weakness: NVD-CWE-Other)
.NET Framework Denial of Service Vulnerability
CVE-2022-21912 (severity: HIGH, weakness: NVD-CWE-Other)
DirectX Graphics Kernel Remote Code Execution Vulnerability
CVE-2022-21913 (severity: HIGH, weakness: NVD-CWE-Other)
Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass
CVE-2022-21914 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2022-21915 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows GDI+ Information Disclosure Vulnerability
CVE-2022-21916 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-21917 (severity: HIGH, weakness: CWE-787)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-21918 (severity: MEDIUM, weakness: NVD-CWE-Other)
DirectX Graphics Kernel File Denial of Service Vulnerability
CVE-2022-21919 (severity: HIGH, weakness: CWE-59)
Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2022-2192 (severity: HIGH, weakness: CWE-425)
Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions.
CVE-2022-21920 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-21921 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Defender Credential Guard Security Feature Bypass Vulnerability
CVE-2022-21922 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2022-21924 (severity: MEDIUM, weakness: NVD-CWE-Other)
Workstation Service Remote Protocol Security Feature Bypass Vulnerability
CVE-2022-21925 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability
CVE-2022-21926 (severity: HIGH, weakness: CWE-787)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-21927 (severity: HIGH, weakness: NVD-CWE-Other)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-21928 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2022-21929 (severity: LOW, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-2193 (severity: HIGH, weakness: CWE-280)
Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager page. This issue affects: HYPR Server versions prior to 6.14.1.
CVE-2022-21930 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-21931 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-21932 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
CVE-2022-21933 (severity: HIGH, weakness: CWE-20)
ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.
CVE-2022-21934 (severity: HIGH, weakness: CWE-620)
Under certain circumstances an authenticated user could lock other users out of the system or take over their accounts in Metasys ADS/ADX/OAS server 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS server 11 versions prior to 11.0.2.
CVE-2022-21935 (severity: HIGH, weakness: CWE-620)
A vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 allows unverified password change.
CVE-2022-21936 (severity: MEDIUM, weakness: CWE-287)
On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP UI.
CVE-2022-21937 (severity: MEDIUM, weakness: CWE-79)
Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the web interface.
CVE-2022-21938 (severity: MEDIUM, weakness: CWE-79)
Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the MUI Graphics web interface.
CVE-2022-21939 (severity: MEDIUM, weakness: CWE-1004)
Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie.
CVE-2022-2194 (severity: MEDIUM, weakness: CWE-79)
The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVE-2022-21940 (severity: MEDIUM, weakness: CWE-614)
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie.
CVE-2022-21941 (severity: CRITICAL, weakness: CWE-77)
All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.
CVE-2022-21944 (severity: HIGH, weakness: CWE-59)
A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports SLE-15-SP3, Factory allows local attackers to escalate to root. This issue affects: openSUSE Backports SLE-15-SP3 watchman versions prior to 4.9.0. openSUSE Factory watchman versions prior to 4.9.0-9.1.
CVE-2022-21945 (severity: MEDIUM, weakness: CWE-377)
A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-default systems. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions.
CVE-2022-21946 (severity: MEDIUM, weakness: CWE-732)
A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions.
CVE-2022-21947 (severity: HIGH, weakness: CWE-668)
A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.
CVE-2022-21948 (severity: MEDIUM, weakness: CWE-79)
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in paste allows remote attackers to place Javascript into SVG files. This issue affects: openSUSE paste paste version b57b9f87e303a3db9465776e657378e96845493b and prior versions.
CVE-2022-21949 (severity: HIGH, weakness: CWE-611)
A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. This can be used to gain information from the server that can be abused to escalate to Admin privileges on OBS. This issue affects: SUSE Open Build Service Open Build Service versions prior to 2.10.13.
CVE-2022-21950 (severity: MEDIUM, weakness: CWE-284)
A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE Backports SLE-15-SP4 canna versions prior to 3.7p3-bp154.3.3.1. openSUSE Factory was also affected. Instead of fixing the package it was deleted there.
CVE-2022-21951 (severity: MEDIUM, weakness: CWE-319)
A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden This issue affects: SUSE Rancher Rancher versions prior to 2.5.14; Rancher versions prior to 2.6.5.
CVE-2022-21952 (severity: HIGH, weakness: CWE-306)
A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.
CVE-2022-21953 (severity: HIGH, weakness: CWE-862)
A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in the local cluster This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10; Rancher versions prior to 2.7.1.
CVE-2022-21954 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-21957 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2022-21958 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2022-21959 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2022-2196 (severity: HIGH, weakness: CWE-1188)
A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or past commit 2e7eab81425a
CVE-2022-21960 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2022-21961 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2022-21962 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2022-21963 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2022-21964 (severity: MEDIUM, weakness: CWE-668)
Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability
CVE-2022-21965 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Teams Denial of Service Vulnerability
CVE-2022-21967 (severity: HIGH, weakness: NVD-CWE-Other)
Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability
CVE-2022-21968 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2022-21969 (severity: CRITICAL, weakness: NVD-CWE-Other)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-2197 (severity: CRITICAL, weakness: CWE-287)
By using a specific credential string, an attacker with network access to the device’s web interface could circumvent the authentication scheme and perform administrative operations.
CVE-2022-21970 (severity: HIGH, weakness: CWE-269)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-21971 (severity: HIGH, weakness: CWE-824)
Windows Runtime Remote Code Execution Vulnerability
CVE-2022-21972 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-21973 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Media Center Update Denial of Service Vulnerability
CVE-2022-21974 (severity: HIGH, weakness: NVD-CWE-Other)
Roaming Security Rights Management Services Remote Code Execution Vulnerability
CVE-2022-21975 (severity: MEDIUM, weakness: CWE-362)
Windows Hyper-V Denial of Service Vulnerability
CVE-2022-21977 (severity: LOW, weakness: NVD-CWE-Other)
Media Foundation Information Disclosure Vulnerability
CVE-2022-21978 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-21979 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2022-2198 (severity: MEDIUM, weakness: CWE-639)
The WPQA Builder WordPress plugin before 5.7 which is a companion plugin to the Hilmer and Discy , does not check authorization before displaying private messages, allowing any logged in user to read other users private message using the message id, which can easily be brute forced.
CVE-2022-21980 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-21981 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-21983 (severity: HIGH, weakness: NVD-CWE-Other)
Win32 Stream Enumeration Remote Code Execution Vulnerability
CVE-2022-21984 (severity: HIGH, weakness: NVD-CWE-Other)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2022-21985 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2022-21986 (severity: HIGH, weakness: NVD-CWE-Other)
.NET Denial of Service Vulnerability
CVE-2022-21987 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2022-21988 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-21989 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-2199 (severity: MEDIUM, weakness: CWE-79)
The main MiCODUS MV720 GPS tracker web server has a reflected cross-site scripting vulnerability that could allow an attacker to gain control by tricking a user into making a request.
CVE-2022-21990 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2022-21991 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability
CVE-2022-21992 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Mobile Device Management Remote Code Execution Vulnerability
CVE-2022-21993 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
CVE-2022-21994 (severity: HIGH, weakness: NVD-CWE-Other)
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2022-21995 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2022-21996 (severity: HIGH, weakness: NVD-CWE-Other)
Win32k Elevation of Privilege Vulnerability
CVE-2022-21997 (severity: HIGH, weakness: CWE-59)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21998 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Common Log File System Driver Information Disclosure Vulnerability
CVE-2022-21999 (severity: HIGH, weakness: CWE-22)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-2200 (severity: HIGH, weakness: CWE-1321)
If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.
CVE-2022-22000 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-22001 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2022-22002 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows User Account Profile Picture Denial of Service Vulnerability
CVE-2022-22003 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-22004 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office ClickToRun Remote Code Execution Vulnerability
CVE-2022-22005 (severity: HIGH, weakness: CWE-502)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-22006 (severity: HIGH, weakness: CWE-787)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-22007 (severity: HIGH, weakness: CWE-787)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-22008 (severity: HIGH, weakness: CWE-362)
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2022-22009 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2022-22010 (severity: MEDIUM, weakness: NVD-CWE-Other)
Media Foundation Information Disclosure Vulnerability
CVE-2022-22011 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-22012 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-22013 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-22014 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-22015 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVE-2022-22016 (severity: HIGH, weakness: NVD-CWE-Other)
Windows PlayToManager Elevation of Privilege Vulnerability
CVE-2022-22017 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2022-22018 (severity: HIGH, weakness: NVD-CWE-Other)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2022-22019 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2022-22021 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-22022 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-22023 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
CVE-2022-22024 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Fax Service Remote Code Execution Vulnerability
CVE-2022-22025 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Internet Information Services Cachuri Module Denial of Service Vulnerability
CVE-2022-22026 (severity: HIGH, weakness: CWE-787)
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-22027 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Fax Service Remote Code Execution Vulnerability
CVE-2022-22028 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Network File System Information Disclosure Vulnerability
CVE-2022-22029 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Network File System Remote Code Execution Vulnerability
CVE-2022-22031 (severity: HIGH, weakness: CWE-312)
Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability
CVE-2022-22034 (severity: HIGH, weakness: CWE-416)
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-22035 (severity: HIGH, weakness: CWE-362)
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-22036 (severity: HIGH, weakness: NVD-CWE-Other)
Performance Counters for Windows Elevation of Privilege Vulnerability
CVE-2022-22037 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-22038 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2022-22039 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Network File System Remote Code Execution Vulnerability
CVE-2022-22040 (severity: HIGH, weakness: NVD-CWE-Other)
Internet Information Services Dynamic Compression Module Denial of Service Vulnerability
CVE-2022-22041 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-22042 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Hyper-V Information Disclosure Vulnerability
CVE-2022-22043 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
CVE-2022-22045 (severity: HIGH, weakness: NVD-CWE-Other)
Windows.Devices.Picker.dll Elevation of Privilege Vulnerability
CVE-2022-22047 (severity: HIGH, weakness: CWE-426)
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-22048 (severity: MEDIUM, weakness: NVD-CWE-Other)
BitLocker Security Feature Bypass Vulnerability
CVE-2022-22049 (severity: HIGH, weakness: CWE-787)
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-22050 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Fax Service Elevation of Privilege Vulnerability
CVE-2022-22054 (severity: MEDIUM, weakness: CWE-22)
ASUS RT-AX56U’s login function contains a path traversal vulnerability due to its inadequate filtering for special characters in URL parameters, which allows an unauthenticated local area network attacker to access restricted system paths and download arbitrary files.
CVE-2022-22055 (severity: CRITICAL, weakness: CWE-89)
The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to acquire administrator’s privilege and perform arbitrary operations on the system or disrupt service.
CVE-2022-22056 (severity: CRITICAL, weakness: CWE-798)
The Le-yan dental management system contains a hard-coded credentials vulnerability in the web page source code, which allows an unauthenticated remote attacker to acquire administrator’s privilege and control the system or disrupt service.
CVE-2022-22057 (severity: HIGH, weakness: CWE-362)
Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-22058 (severity: HIGH, weakness: CWE-416)
Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables