stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2022-30012 (severity: HIGH, weakness: CWE-89)
In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection.
CVE-2022-30013 (severity: MEDIUM, weakness: CWE-79)
A stored cross-site scripting (XSS) vulnerability in the upload function of totaljs CMS 3.4.5 allows attackers to execute arbitrary web scripts via a JavaScript embedded PDF file.
CVE-2022-30014 (severity: HIGH, weakness: CWE-352)
Lumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery (CSRF) which allows anyone to takeover admin/moderater account.
CVE-2022-30015 (severity: MEDIUM, weakness: CWE-79)
In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/all_users.php like Full Username, etc .This causes stored xss.
CVE-2022-30016 (severity: HIGH, weakness: CWE-863)
Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=system_info.
CVE-2022-30017 (severity: MEDIUM, weakness: CWE-79)
Rescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover via cookie stealing.
CVE-2022-30018 (severity: HIGH, weakness: CWE-522)
Mobotix Control Center (MxCC) through 2.5.4.5 has Insufficiently Protected Credentials, Storing Passwords in a Recoverable Format via the MxCC.ini config file. The credential storage method in this software enables an attacker/user of the machine to gain admin access to the software and gain access to recordings/recording locations.
CVE-2022-3002 (severity: MEDIUM, weakness: CWE-79)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-30023 (severity: HIGH, weakness: CWE-78)
Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.
CVE-2022-30024 (severity: HIGH, weakness: CWE-120)
A buffer overflow in the httpd daemon on TP-Link TL-WR841N V12 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for the System Tools of the Wi-Fi network. This affects TL-WR841 V12 TL-WR841N(EU)_V12_160624 and TL-WR841 V11 TL-WR841N(EU)_V11_160325 , TL-WR841N_V11_150616 and TL-WR841 V10 TL-WR841N_V10_150310 are also affected.
CVE-2022-30025 (severity: MEDIUM, weakness: CWE-89)
SQL injection in "/Framewrk/Home.jsp" file (POST method) in tCredence Analytics iDEAL Wealth and Funds - 1.0 iallows authenticated remote attackers to inject payload via "v" parameter.
CVE-2022-30028 (severity: MEDIUM, weakness: CWE-362)
Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token.
CVE-2022-30033 (severity: HIGH, weakness: CWE-120)
Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status() in httpd module.
CVE-2022-30034 (severity: HIGH, weakness: CWE-287)
Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down Celery task nodes.
CVE-2022-30036 (severity: HIGH, weakness: CWE-798)
MA Lighting grandMA2 Light has a password of root for the root account. NOTE: The vendor's position is that the product was designed for isolated networks. Also, the successor product, grandMA3, is not affected by this vulnerability.
CVE-2022-30037 (severity: HIGH, weakness: CWE-829)
XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add function in cron.php.
CVE-2022-3004 (severity: MEDIUM, weakness: CWE-79)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-30040 (severity: HIGH, weakness: CWE-787)
Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to achieve the effect of router denial of service.
CVE-2022-30045 (severity: MEDIUM, weakness: CWE-125)
An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap out-of-bounds read.
CVE-2022-30047 (severity: CRITICAL, weakness: CWE-89)
Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter.
CVE-2022-30048 (severity: CRITICAL, weakness: CWE-89)
Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter.
CVE-2022-30049 (severity: HIGH, weakness: CWE-918)
A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter.
CVE-2022-3005 (severity: MEDIUM, weakness: CWE-79)
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVE-2022-30050 (severity: MEDIUM, weakness: CWE-79)
Gnuboard 5.55 and 5.56 is vulnerable to Cross Site Scripting (XSS) via bbs/member_confirm.php.
CVE-2022-30052 (severity: CRITICAL, weakness: CWE-89)
In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks.
CVE-2022-30053 (severity: CRITICAL, weakness: CWE-89)
In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks.
CVE-2022-30054 (severity: CRITICAL, weakness: CWE-89)
In Covid 19 Travel Pass Management 1.0, the code parameter is vulnerable to SQL injection attacks.
CVE-2022-30055 (severity: CRITICAL, weakness: CWE-120)
Prime95 30.7 build 9 suffers from a Buffer Overflow vulnerability that could lead to Remote Code Execution.
CVE-2022-30057 (severity: MEDIUM, weakness: CWE-79)
Shopwind <=v3.4.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability.
CVE-2022-30058 (severity: MEDIUM, weakness: CWE-22)
Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Download vulnerability via the neirong parameter at \backend\controllers\DbController.php.
CVE-2022-30059 (severity: MEDIUM, weakness: CWE-22)
Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php.
CVE-2022-30060 (severity: HIGH, weakness: NVD-CWE-Other)
ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php
CVE-2022-30061 (severity: MEDIUM, weakness: CWE-22)
ftcms <=2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp.
CVE-2022-30062 (severity: MEDIUM, weakness: CWE-22)
ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php
CVE-2022-30063 (severity: CRITICAL, weakness: NVD-CWE-Other)
ftcms <=2.1 was discovered to be vulnerable to code execution attacks .
CVE-2022-30065 (severity: HIGH, weakness: CWE-416)
A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.
CVE-2022-30067 (severity: MEDIUM, weakness: CWE-120)
GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.
CVE-2022-3007 (severity: HIGH, weakness: CWE-862)
The vulnerability exists in Syska SW100 Smartwatch due to an improper implementation and/or configuration of Nordic Device Firmware Update (DFU) which is used for performing Over-The-Air (OTA) firmware updates on the Bluetooth Low Energy (BLE) devices. An unauthenticated attacker could exploit this vulnerability by setting arbitrary values to handle on the vulnerable device over Bluetooth. Successful exploitation of this vulnerability could allow the attacker to perform firmware update, device reboot or data manipulation on the target device.
CVE-2022-30072 (severity: MEDIUM, weakness: CWE-79)
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via \admin\pages\sections_save.php namesection2 parameters.
CVE-2022-30073 (severity: MEDIUM, weakness: CWE-79)
WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php.
CVE-2022-30075 (severity: HIGH, weakness: NVD-CWE-Other)
In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation.
CVE-2022-30076 (severity: MEDIUM, weakness: CWE-307)
ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames such as s10000 through s20000. There is no rate limiting.
CVE-2022-30078 (severity: HIGH, weakness: CWE-78)
NETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware versions through R6300v2-V1.0.4.52_10.0.93 allow remote authenticated attackers to execute arbitrary command via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length parameters.
CVE-2022-30079 (severity: HIGH, weakness: CWE-78)
Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that could allow remote authenticated attackers the ability to modify values in the vulnerable parameter.
CVE-2022-3008 (severity: HIGH, weakness: CWE-78)
The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This function allows for command injection by using backticks. An attacker could craft an untrusted path input that would result in a path expansion. We recommend upgrading to 2.6.0 or past commit 52ff00a38447f06a17eab1caa2cf0730a119c751
CVE-2022-30083 (severity: CRITICAL, weakness: CWE-94)
EllieGrid Android Application version 3.4.1 is vulnerable to Code Injection. The application appears to evaluate user input as code (remote).
CVE-2022-3010 (severity: HIGH, weakness: CWE-1391)
The Priva TopControl Suite contains predictable credentials for the SSH service, based on the Serial number. Which makes it possible for an attacker to calculate the login credentials for the Priva TopControll suite.
CVE-2022-30105 (severity: CRITICAL, weakness: CWE-78)
In Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp, which is accessible before and after configuring the device, exhibits multiple remote command injection vulnerabilities. The following parameters in the [form name] form; [list vulnerable parameters], are not properly sanitized after being submitted to the web interface in a POST request. With specially crafted parameters, it is possible to inject a an OS command which will be executed with root privileges, as the web interface, and all processes on the device, run as root.
CVE-2022-30110 (severity: MEDIUM, weakness: CWE-79)
The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scripting. An attacker could upload image/svg+xml files containing JavaScript. When someone visits the File Preview URL for this file, the JavaScript inside of this image/svg+xml file will be executed in the users' browser.
CVE-2022-30111 (severity: MEDIUM, weakness: CWE-327)
Due to the use of an insecure algorithm for rolling codes in MCK Smartlock 1.0, allows attackers to unlock the mechanism via replay attacks.
CVE-2022-30113 (severity: CRITICAL, weakness: CWE-89)
Electronic mall system 1.0_build20200203 is affected vulnerable to SQL Injection.
CVE-2022-30114 (severity: HIGH, weakness: CWE-787)
A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462_FW_261_DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS.
CVE-2022-30115 (severity: MEDIUM, weakness: CWE-325)
Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in the given URL used atrailing dot while not using one when it built the HSTS cache. Or the otherway around - by having the trailing dot in the HSTS cache and *not* using thetrailing dot in the URL.
CVE-2022-30117 (severity: CRITICAL, weakness: CWE-22)
Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 allow traversal in /index.php/ccm/system/file/upload which could result in an Arbitrary File Delete exploit. This was remediated by sanitizing /index.php/ccm/system/file/upload to ensure Concrete doesn’t allow traversal and by changing isFullChunkFilePresent to have an early false return when input doesn't match expectations.Concrete CMS Security team ranked this 5.8 with CVSS v3.1 vector AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H. Credit to Siebene for reporting.
CVE-2022-30118 (severity: MEDIUM, weakness: CWE-79)
Title for CVE: XSS in /dashboard/system/express/entities/forms/save_control/[GUID]: old browsers only.Description: When using Internet Explorer with the XSS protection disabled, editing a form control in an express entities form for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 can allow XSS. This cannot be exploited in modern-day web browsers due to an automatic input escape mechanism. Concrete CMS Security team ranked this vulnerability 2 with CVSS v3.1 Vector AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N. Thanks zeroinside for reporting.
CVE-2022-30119 (severity: MEDIUM, weakness: CWE-79)
XSS in /dashboard/reports/logs/view - old browsers only. When using Internet Explorer with the XSS protection disabled, insufficient sanitation where built urls are outputted can be exploited for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2. This cannot be exploited in modern-day web browsers due to an automatic input escape mechanism. Concrete CMS Security team ranked this vulnerability 2 with CVSS v3.1 Vector AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N. Thanks zeroinside for reporting.
CVE-2022-3012 (severity: HIGH, weakness: CWE-89)
A vulnerability was found in oretnom23 Fast Food Ordering System. It has been rated as critical. Affected by this issue is some unknown functionality of the file ffos/admin/reports/index.php. The manipulation of the argument date leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-207422 is the identifier assigned to this vulnerability.
CVE-2022-30120 (severity: MEDIUM, weakness: CWE-79)
XSS in /dashboard/blocks/stacks/view_details/ - old browsers only. When using an older browser with built-in XSS protection disabled, insufficient sanitation where built urls are outputted can be exploited for Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 to allow XSS. This cannot be exploited in modern-day web browsers due to an automatic input escape mechanism. Concrete CMS Security team ranked this vulnerability 3.1with CVSS v3.1 Vector AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N. Sanitation has been added where built urls are output. Credit to Credit to Bogdan Tiron from FORTBRIDGE (https://www.fortbridge.co.uk/ ) for reporting
CVE-2022-30121 (severity: MEDIUM, weakness: CWE-269)
The “LANDesk(R) Management Agent” service exposes a socket and once connected, it is possible to launch commands only for signed executables. This is a security bug that allows a limited user to get escalated admin privileges on their system.
CVE-2022-30122 (severity: HIGH, weakness: CWE-400)
A possible denial of service vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 in the multipart parsing component of Rack.
CVE-2022-30123 (severity: CRITICAL, weakness: CWE-150)
A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lint and CommonLogger components of Rack.
CVE-2022-30124 (severity: MEDIUM, weakness: CWE-287)
An improper authentication vulnerability exists in Rocket.Chat Mobile App <4.14.1.22788 that allowed an attacker with physical access to a mobile device to bypass local authentication (PIN code).
CVE-2022-30126 (severity: MEDIUM, weakness: NVD-CWE-Other)
In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0
CVE-2022-30127 (severity: HIGH, weakness: CWE-362)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-30128 (severity: HIGH, weakness: CWE-362)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-30129 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Remote Code Execution Vulnerability
CVE-2022-3013 (severity: CRITICAL, weakness: CWE-89)
A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the file /loginVaLidation.php. The manipulation of the argument login leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-207423.
CVE-2022-30130 (severity: MEDIUM, weakness: NVD-CWE-Other)
.NET Framework Denial of Service Vulnerability
CVE-2022-30131 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
CVE-2022-30132 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Container Manager Service Elevation of Privilege Vulnerability
CVE-2022-30133 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
CVE-2022-30134 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2022-30135 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Media Center Elevation of Privilege Vulnerability
CVE-2022-30136 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows Network File System Remote Code Execution Vulnerability
CVE-2022-30137 (severity: MEDIUM, weakness: NVD-CWE-Other)
Executive Summary An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers. Exploitation of this EOP vulnerability requires an attacker to gain remote code execution within a container. All Service Fabric and Docker versions are impacted.
CVE-2022-30138 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-30139 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-3014 (severity: MEDIUM, weakness: CWE-79)
A vulnerability classified as problematic was found in SourceCodester Simple Task Managing System. This vulnerability affects unknown code. The manipulation of the argument student_add leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-207424.
CVE-2022-30140 (severity: HIGH, weakness: NVD-CWE-Other)
Windows iSCSI Discovery Service Remote Code Execution Vulnerability
CVE-2022-30141 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-30142 (severity: HIGH, weakness: NVD-CWE-Other)
Windows File History Remote Code Execution Vulnerability
CVE-2022-30143 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-30144 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Bluetooth Service Remote Code Execution Vulnerability
CVE-2022-30145 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
CVE-2022-30146 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-30147 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Installer Elevation of Privilege Vulnerability
CVE-2022-30148 (severity: MEDIUM, weakness: CWE-532)
Windows Desired State Configuration (DSC) Information Disclosure Vulnerability
CVE-2022-30149 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-3015 (severity: MEDIUM, weakness: CWE-79)
A vulnerability, which was classified as problematic, has been found in oretnom23 Fast Food Ordering System. This issue affects some unknown processing of the file admin/?page=reports. The manipulation of the argument date leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-207425 was assigned to this vulnerability.
CVE-2022-30150 (severity: HIGH, weakness: CWE-287)
Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability
CVE-2022-30151 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2022-30152 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2022-30153 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-30154 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability
CVE-2022-30155 (severity: MEDIUM, weakness: CWE-193)
Windows Kernel Denial of Service Vulnerability
CVE-2022-30157 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-30158 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-30159 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Office Information Disclosure Vulnerability
CVE-2022-3016 (severity: HIGH, weakness: CWE-416)
Use After Free in GitHub repository vim/vim prior to 9.0.0286.
CVE-2022-30160 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-30161 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2022-30162 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Kernel Information Disclosure Vulnerability
CVE-2022-30163 (severity: HIGH, weakness: CWE-362)
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2022-30164 (severity: HIGH, weakness: NVD-CWE-Other)
Kerberos AppContainer Security Feature Bypass Vulnerability
CVE-2022-30165 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-30166 (severity: HIGH, weakness: NVD-CWE-Other)
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
CVE-2022-30167 (severity: HIGH, weakness: NVD-CWE-Other)
AV1 Video Extension Remote Code Execution Vulnerability
CVE-2022-30168 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Photos App Remote Code Execution Vulnerability
CVE-2022-3017 (severity: MEDIUM, weakness: CWE-352)
Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 0.10.38.
CVE-2022-30170 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Credential Roaming Service Elevation of Privilege Vulnerability
CVE-2022-30171 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Office Information Disclosure Vulnerability
CVE-2022-30172 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Office Information Disclosure Vulnerability
CVE-2022-30173 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-30174 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Remote Code Execution Vulnerability