yahoo-inc/cve-impacts huggingface dataset:
CVE-2022-42507: In ProtocolSimBuilder::BuildSimUpdatePb3gEntry of protocolsimbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241388774References: N/A
Key phrases: out of bounds write, missing bounds check, local escalation of privilege, escalation privilege
CVE-2022-42508: In ProtocolCallBuilder::BuildSendUssd of protocolcallbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241388966References: N/A
Key phrases: out of bounds write, missing bounds check, local escalation of privilege, escalation privilege
CVE-2022-42509: In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241544307References: N/A
Key phrases: out of bounds write, missing bounds check, local escalation of privilege, escalation privilege
CVE-2022-4251: A vulnerability was found in Movie Ticket Booking System and classified as problematic. Affected by this issue is some unknown functionality of the file editBooking.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214628.
CVE-2022-42510: In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241762656References: N/A
Key phrases: out of bounds read, local escalation of privilege, improper input validation, escalation privilege
CVE-2022-42511: In EmbmsSessionData::encode of embmsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241762712References: N/A
Key phrases: out of bounds write, missing bounds check, local escalation of privilege, escalation privilege
CVE-2022-42512: In VsimOperationDataExt::encode of vsimdata.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763050References: N/A
Key phrases: out of bounds read, local information disclosure
CVE-2022-42513: In ProtocolEmbmsBuilder::BuildSetSession of protocolembmsbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763204References: N/A
Key phrases: out of bounds write, missing bounds check, local escalation of privilege, escalation privilege
CVE-2022-42514: In ProtocolImsBuilder::BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763298References: N/A
Key phrases: out of bounds read, local information disclosure
CVE-2022-42515: In MiscService::DoOemSetRtpPktlossThreshold of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763503References: N/A
Key phrases: out of bounds read, local information disclosure
CVE-2022-42516: In ProtocolSimBuilderLegacy::BuildSimGetGbaAuth of protocolsimbuilderlegacy.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763577References: N/A
Key phrases: out of bounds read, missing bounds check, local information disclosure
CVE-2022-42517: In MiscService::DoOemSetTcsFci of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-241763682References: N/A
Key phrases: out of bounds read, missing bounds check, local information disclosure
CVE-2022-42518: In BroadcastSmsConfigsRequestData::encode of smsdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242536278References: N/A
Key phrases: out of bounds write, missing bounds check, local escalation of privilege, escalation privilege
CVE-2022-42519: In CdmaBroadcastSmsConfigsRequestData::encode of cdmasmsdata.cpp, there is a possible stack clash leading to memory corruption. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242540694References: N/A
Key phrases: stack clash, memory corruption, local escalation of privilege, escalation privilege
CVE-2022-4252: A vulnerability was found in SourceCodester Canteen Management System. It has been classified as problematic. This affects the function builtin_echo of the file categories.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214629 was assigned to this vulnerability.
Key phrases: cross site scripting, cross-site scripting
CVE-2022-42520: In ServiceInterface::HandleRequest of serviceinterface.cpp, there is a possible use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242994270References: N/A
Key phrases: use after free, local escalation of privilege, escalation privilege
CVE-2022-42521: In encode of wlandata.cpp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243130019References: N/A
Key phrases: out of bounds write, local escalation of privilege, improper input validation, escalation privilege
CVE-2022-42522: In DoSetCarrierConfig of miscservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243130038References: N/A
Key phrases: out of bounds read, incorrect bounds check, local information disclosure
CVE-2022-42523: In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243376893References: N/A
Key phrases: out of bounds write, incorrect bounds check, local escalation of privilege, escalation privilege
CVE-2022-42524: In sms_GetTpUdlIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243401445References: N/A
Key phrases: out of bounds read, missing bounds check, remote information disclosure
CVE-2022-42525: In fillSetupDataCallInfo_V1_6 of ril_service_1_6.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243509750References: N/A
Key phrases: out of bounds write, incorrect bounds check, local escalation of privilege, escalation privilege
CVE-2022-42526: In ConvertUtf8ToUcs2 of radio_hal_utils.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243509880References: N/A
Key phrases: out of bounds write, missing bounds check, local escalation of privilege, escalation privilege
CVE-2022-42527: In cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-244448906References: N/A
Key phrases: null check, remote denial of service, crash
CVE-2022-42528: In ffa_mrd_prot of shared_mem.c, there is a possible ID due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242203672References: N/A
Key phrases: logic error, local information disclosure
CVE-2022-42529: Product: AndroidVersions: Android kernelAndroid ID: A-235292841References: N/A
CVE-2022-4253: A vulnerability was found in SourceCodester Canteen Management System. It has been declared as problematic. This vulnerability affects the function builtin_echo of the file customer.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-214630 is the identifier assigned to this vulnerability.
CVE-2022-42530: In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242331893References: N/A
Key phrases: out of bounds read, missing bounds check, local information disclosure
CVE-2022-42531: In mmu_map_for_fw of gs_ldfw_load.c, there is a possible mitigation bypass due to Permissive Memory Allocation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-231500967References: N/A
Key phrases: bypass due to Permissive Memory Allocation, mitigation bypass, permissive memory allocation, local escalation of privilege, escalation privilege
CVE-2022-42532: In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242332610References: N/A
Key phrases: out of bounds read, missing bounds check, local information disclosure
CVE-2022-42533: In shared_metadata_init of SharedMetadata.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239415718References: N/A
Key phrases: out of bounds write, integer overflow, escalation privilege
CVE-2022-42534: In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237838301References: N/A
Key phrases: privilege escalation, local escalation of privilege, improper input validation, escalation privilege
CVE-2022-42535: In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224770183
Key phrases: sql injection, local information disclosure
CVE-2022-42538: Elevation of privilege
Key phrases: elevation of privilege, elevation privilege
CVE-2022-4254: sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVE-2022-42540: Elevation of privilege
Key phrases: elevation of privilege, elevation privilege
CVE-2022-42542: In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-231445184
Key phrases: out of bounds write, missing bounds check, local escalation of privilege, escalation privilege
CVE-2022-42543: In fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-249998113References: N/A
Key phrases: out of bounds read, incorrect bounds check, local information disclosure
CVE-2022-42544: In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545390
Key phrases: improper input validation, local escalation of privilege, escalation privilege
CVE-2022-4255: An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload.
Key phrases: info leak issue
CVE-2022-4256: The All-in-One Addons for Elementor WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting
CVE-2022-4257: A vulnerability was found in C-DATA Web Management System. It has been rated as critical. This issue affects some unknown processing of the file cgi-bin/jumpto.php of the component GET Parameter Handler. The manipulation of the argument hostname leads to argument injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214631.
CVE-2022-4258: In multiple versions of HIMA PC based Software an unquoted Windows search path vulnerabilitymight allow local users to gain privileges via a malicious .exe file and gain full access to the system.
Key phrases: gain privileges, gain full access, gain privileges via a malicious .exe file and, unquoted windows search path
CVE-2022-4259: Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and CMC allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.
Key phrases: execute arbitrary SQL queries, execute arbitrary SQL queries on the DBMS used, sql injection, improper input validation
CVE-2022-4260: The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Key phrases: perform Stored Cross-Site Scripting attacks even, stored cross-site scripting, unfiltered_html capability
CVE-2022-4261: Rapid7 Nexpose and InsightVM versions prior to 6.6.172 failed to reliably validate the authenticity of update contents. This failure could allow an attacker to provide a malicious update and alter the functionality of Rapid7 Nexpose. The attacker would need some pre-existing mechanism to provide a malicious update, either through a social engineering effort, privileged access to replace downloaded updates in transit, or by performing an Attacker-in-the-Middle attack on the update service itself.
Key phrases: provide a malicious update and alter the functionality, attacker-in-the-middle
CVE-2022-4262: Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Key phrases: type confusion, heap corruption
CVE-2022-4264: Incorrect Privilege Assignment in M-Files Web (Classic) in M-Files before 22.8.11691.0 allows low privilege user to change some configuration.
Key phrases: change some configuration, incorrect privilege assignment
CVE-2022-4265: The Replyable WordPress plugin before 2.2.10 does not validate the class name submitted by the request when instantiating an object in the prompt_dismiss_notice action and also lacks CSRF check in the related action. This could allow any authenticated users, such as subscriber to perform Object Injection attacks. The attack could also be done via a CSRF vector against any authenticated user
Key phrases: perform Object Injection attacks, csrf check, object injection, csrf vector
CVE-2022-4266: The Bulk Delete Users by Email WordPress plugin through 1.2 does not have CSRF check when deleting users, which could allow attackers to make a logged in admin delete non admin users by knowing their email via a CSRF attack
Key phrases: make a logged in admin delete non admin, csrf check
CVE-2022-4267: The Bulk Delete Users by Email WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
Key phrases: reflected cross-site scripting
CVE-2022-4268: The Plugin Logic WordPress plugin before 1.0.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
Key phrases: sql injection
CVE-2022-4269: A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirecting egress packets to ingress using TC action "mirred") a local unprivileged user could trigger a CPU soft lockup (ABBA deadlock) when the transport protocol in use (TCP or SCTP) does a retransmission, resulting in a denial of service condition.
Key phrases: denial of service condition
CVE-2022-42698: Unauth. Arbitrary File Upload vulnerability in WordPress Api2Cart Bridge Connector plugin <= 1.1.0 on WordPress.
Key phrases: arbitrary file upload
CVE-2022-42699: Auth. Remote Code Execution vulnerability inEasy WP SMTP plugin <= 1.5.1 onWordPress.
Key phrases: remote code execution
CVE-2022-4270: Incorrect privilege assignment issue in M-Files Web in M-Files Web versions before22.5.11436.1 could have changed permissions accidentally.
Key phrases: incorrect privilege assignment issue
CVE-2022-42703: mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.
Key phrases: use-after-free, use after free
CVE-2022-42704: A cross-site scripting (XSS) vulnerability in Employee Service Center (esc) and Service Portal (sp) in ServiceNow Quebec, Rome, and San Diego allows remote attackers to inject arbitrary web script via the Standard Ticket Conversations widget.
Key phrases: inject arbitrary web script, inject arbitrary web script via the Standard Ticket, cross-site scripting (xss)
CVE-2022-42705: A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk (denial of service) by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing activity on that subscription.
Key phrases: crash Asterisk (denial of service) by, use-after-free, use after free
CVE-2022-42706: An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal.
Key phrases: access files outside of the asterisk configuration directory, directory traversal
CVE-2022-42707: In Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0, embedded images are accessible without a sufficient permission check under certain conditions.
Key phrases: embedded images
CVE-2022-4271: Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to 1.16.4.
Key phrases: cross-site scripting (xss)
CVE-2022-42710: Nice (formerly Nortek) Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e devices are vulnerable to Stored Cross-Site Scripting (XSS).
Key phrases: stored cross-site scripting (xss)
CVE-2022-42711: In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.
Key phrases: execute arbitrary code, execute arbitrary code in a victim's browser, malicious input
CVE-2022-42715: A reflected XSS vulnerability exists in REDCap before 12.04.18 in the Alerts & Notifications upload feature. A crafted CSV file will, when uploaded, trigger arbitrary JavaScript code execution.
Key phrases: trigger arbitrary JavaScript code execution, xss, arbitrary javascript code execution, file upload
CVE-2022-42716: An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through r40P0.
Key phrases: gain access, use-after-free, use after free
CVE-2022-42717: An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute arbitrary commands as root.
Key phrases: execute arbitrary commands, insecure
CVE-2022-42718: Incorrect default permissions in the installation folder for NI LabVIEW Command Line Interface (CLI) may allow an authenticated user to potentially enable escalation of privilege via local access.
Key phrases: potentially enable escalation of privilege via local access, incorrect default permissions, escalation privilege
CVE-2022-42719: A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
Key phrases: use-after-free, crash, execute code, use after free
CVE-2022-4272: A vulnerability, which was classified as critical, has been found in FeMiner wms. Affected by this issue is some unknown functionality of the file /product/savenewproduct.php?flag=1. The manipulation of the argument upfile leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214760.
Key phrases: unrestricted upload
CVE-2022-42720: Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.
Key phrases: refcounting bugs, use-after-free conditions, execute code, use after free
CVE-2022-42721: A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.
Key phrases: list management bug, execute code
CVE-2022-42722: In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices.
Key phrases: null pointer dereference denial-of-service, denial of service
CVE-2022-42724: app/Controller/UsersController.php in MISP before 2.4.164 allows attackers to discover role names (this is information that only the site admin should have).
Key phrases: discover role names (this is information that
CVE-2022-42725: Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links.
Key phrases: access outside of an intended directory, symbolic directory links
CVE-2022-4273: A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0. This issue affects some unknown processing of the file /hrm/controller/employee.php of the component Content-Type Handler. The manipulation of the argument pfimg leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214769 was assigned to this vulnerability.
Key phrases: unrestricted upload
CVE-2022-42731: mfa/FIDO2.py in django-mfa2 before 2.5.1 and 2.6.x before 2.6.1 allows a replay attack that could be used to register another device for a user. The device registration challenge is not invalidated after usage.
Key phrases: register another device for a user, replay
CVE-2022-42732: A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper read access control that could allow files to be retrieved from any folder accessible to the account assigned to the websites application pool.
Key phrases: be retrieved from any folder accessible to the
CVE-2022-42733: A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper read access control that could allow files to be retrieved from any folder accessible to the account assigned to the websites application pool.
Key phrases: be retrieved from any folder accessible to the
CVE-2022-42734: A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the websites application pool.
Key phrases: write data in any folder accessible to the
CVE-2022-42735: Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu.ShenYu Admin allows low-privilege low-level administrators create users with higher privileges than their own.This issue affects Apache ShenYu: 2.5.0.Upgrade to Apache ShenYu 2.5.1 or apply patch  https://github.com/apache/shenyu/pull/3958 https://github.com/apache/shenyu/pull/3958 .
Key phrases: Apache ShenYu 2.5.1 or apply patch  https://github.com/apache/shenyu/pull/3958, improper privilege management
CVE-2022-4274: A vulnerability, which was classified as critical, was found in House Rental System. Affected is an unknown function of the file /view-property.php. The manipulation of the argument property_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-214770 is the identifier assigned to this vulnerability.
Key phrases: sql injection
CVE-2022-42743: deep-parse-json version 1.0.2 allows an external attacker to edit or add new properties to an object. This is possible because the application does not correctly validate the incoming JSON keys, thus allowing the '__proto__' property to be edited.
Key phrases: edit or add new properties to an object, be edited
CVE-2022-42744: CandidATS version 3.0.0 allows an external attacker to perform CRUD operations on the application databases. This is possible because the application does not correctly validate the entriesPerPage parameter against SQLi attacks.
Key phrases: perform CRUD operations on the application databases, sqli
CVE-2022-42745: CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server. This is possible because the application is vulnerable to XXE.
Key phrases: read arbitrary files, read arbitrary files from the server, xxe
CVE-2022-42746: CandidATS version 3.0.0 on 'indexFile' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks.
Key phrases: steal the cookie of arbitrary users, xss, steal cookie
CVE-2022-42747: CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks.
Key phrases: steal the cookie of arbitrary users, xss, steal cookie
CVE-2022-42748: CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks.
Key phrases: steal the cookie of arbitrary users, xss, steal cookie
CVE-2022-42749: CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks.
Key phrases: steal the cookie of arbitrary users, xss, steal cookie
CVE-2022-4275: A vulnerability has been found in House Rental System and classified as critical. Affected by this vulnerability is an unknown functionality of the file search-property.php of the component POST Request Handler. The manipulation of the argument search_property leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214771.
Key phrases: sql injection
CVE-2022-42750: CandidATS version 3.0.0 allows an external attacker to steal the cookie of arbitrary users. This is possible because the application does not correctly validate the files uploaded by the user.
Key phrases: steal the cookie of arbitrary users, steal cookie, file upload
CVE-2022-42751: CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffers from CSRF. This allows to persuade an administrator to create a new account with administrative permissions.
Key phrases: elevate privileges in the application, persuade an administrator to create a new account, csrf
CVE-2022-42753: SalonERP version 3.0.2 allows an external attacker to steal the cookie of arbitrary users. This is possible because the application does not correctly validate the page parameter against XSS attacks.
Key phrases: steal the cookie of arbitrary users, xss, steal cookie
CVE-2022-42754: In npu driver, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel.
Key phrases: memory corruption, use after free, local denial of service
CVE-2022-42755: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42756: In sensor driver, there is a possible buffer overflow due to a missing bounds check. This could lead to local denial of service in kernel.
Key phrases: buffer overflow, local denial of service
CVE-2022-42757: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42758: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42759: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-4276: A vulnerability was found in House Rental System and classified as critical. Affected by this issue is some unknown functionality of the file tenant-engine.php of the component POST Request Handler. The manipulation of the argument id_photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214772.
Key phrases: unrestricted upload
CVE-2022-42760: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42761: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42762: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42763: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42764: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42765: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42766: In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.
Key phrases: missing permission check, local information disclosure
CVE-2022-42767: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42768: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42769: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-4277: A vulnerability was found in Shaoxing Background Management System. It has been declared as critical. This vulnerability affects unknown code of the file /Default/Bd. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-214774 is the identifier assigned to this vulnerability.
Key phrases: sql injection
CVE-2022-42770: In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.
Key phrases: race condition, local denial of service
CVE-2022-42771: In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.
Key phrases: race condition, local denial of service
CVE-2022-42772: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42773: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42774: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42775: In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel.
Key phrases: memory corruption, improper locking, local denial of service
CVE-2022-42776: In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privileges needed.
Key phrases: permission check
CVE-2022-42777: In power management service, there is a missing permission check. This could lead to set up power management service with no additional execution privileges needed.
Key phrases: permission check
CVE-2022-42778: In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional execution privileges needed.
Key phrases: permission check
CVE-2022-42779: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-4278: A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /hrm/employeeadd.php. The manipulation of the argument empid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214775.
Key phrases: sql injection
CVE-2022-42780: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42781: In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
Key phrases: missing bounds check, local denial of service
CVE-2022-42782: In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.
Key phrases: missing permission check, local information disclosure
CVE-2022-42783: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
Key phrases: missing params check, local denial of service
CVE-2022-42784: A vulnerability has been identified in LOGO! 12/24RCE (All versions >= V8.3), LOGO! 12/24RCEo (All versions >= V8.3), LOGO! 230RCE (All versions >= V8.3), LOGO! 230RCEo (All versions >= V8.3), LOGO! 24CE (All versions >= V8.3), LOGO! 24CEo (All versions >= V8.3), LOGO! 24RCE (All versions >= V8.3), LOGO! 24RCEo (All versions >= V8.3), SIPLUS LOGO! 12/24RCE (All versions >= V8.3), SIPLUS LOGO! 12/24RCEo (All versions >= V8.3), SIPLUS LOGO! 230RCE (All versions >= V8.3), SIPLUS LOGO! 230RCEo (All versions >= V8.3), SIPLUS LOGO! 24CE (All versions >= V8.3), SIPLUS LOGO! 24CEo (All versions >= V8.3), SIPLUS LOGO! 24RCE (All versions >= V8.3), SIPLUS LOGO! 24RCEo (All versions >= V8.3). Affected devices are vulnerable to an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed by the product CA. The generation of a custom certificate allows communication with, and impersonation of, any device of the same version.
Key phrases: dump and debug the firmware, inject public keys of custom created key pairs, communication with, electromagnetic fault injection
CVE-2022-42785: Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without knowledge of the password by crafting a modified HTTP GET Request.
Key phrases: authentication bypass
CVE-2022-42786: Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage
Key phrases: execute arbitrary web scripts or HTML, xss
CVE-2022-42787: Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated remote attacker can brute force the users session id and get access to his account on the the device. As the user needs to log in for the attack to be successful a user interaction is required.
CVE-2022-42788: A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Ventura 13. A malicious application may be able to read sensitive location information.
Key phrases: permissions issue, sensitive location information
CVE-2022-42789: An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. An app may be able to access user-sensitive data.
Key phrases: user-sensitive data
CVE-2022-4279: A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0. Affected is an unknown function of the file /hrm/employeeview.php. The manipulation of the argument search leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214776.
Key phrases: cross site scripting, cross-site scripting
CVE-2022-42790: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. A user may be able to view restricted content from the lock screen.
CVE-2022-42791: A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.
Key phrases: execute arbitrary code, race condition
CVE-2022-42792: This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to read sensitive location information
CVE-2022-42793: An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, macOS Monterey 12.6. An app may be able to bypass code signing checks.
Key phrases: bypass code signing checks
CVE-2022-42795: A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a maliciously crafted image may lead to arbitrary code execution.
Key phrases: arbitrary code execution, memory consumption
CVE-2022-42796: This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.7 and iPadOS 15.7, macOS Ventura 13. An app may be able to gain elevated privileges.
Key phrases: gain elevated privileges
CVE-2022-42797: An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able to gain root privileges.
Key phrases: gain root privileges, injection issue
CVE-2022-42798: The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. Parsing a maliciously crafted audio file may lead to disclosure of user information.
Key phrases: disclosure of user information
CVE-2022-42799: The issue was addressed with improved UI handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Visiting a malicious website may lead to user interface spoofing.
Key phrases: user interface spoofing
CVE-2022-4280: A vulnerability, which was classified as problematic, has been found in Dot Tech Smart Campus System. Affected by this issue is some unknown functionality of the file /services/Card/findUser. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-214778 is the identifier assigned to this vulnerability.
Key phrases: information disclosure
CVE-2022-42800: This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A user may be able to cause unexpected app termination or arbitrary code execution.
Key phrases: unexpected app termination, arbitrary code execution
CVE-2022-42801: A logic issue was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges.
Key phrases: execute arbitrary code
CVE-2022-42803: A race condition was addressed with improved locking. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1. An app may be able to execute arbitrary code with kernel privileges.
Key phrases: execute arbitrary code, race condition
CVE-2022-42805: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.
Key phrases: execute arbitrary code, integer overflow
CVE-2022-42806: A race condition was addressed with improved locking. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.
Key phrases: execute arbitrary code, race condition
CVE-2022-42807: A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. A user may accidentally add a participant to a Shared Album by pressing the Delete key
CVE-2022-42808: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. A remote user may be able to cause kernel code execution.
Key phrases: out-of-bounds write issue, kernel code execution, out of bounds write
CVE-2022-42809: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted gcx file may lead to unexpected app termination or arbitrary code execution.
Key phrases: unexpected app termination, arbitrary code execution