CVEs

130,801 total · page 1615 of 2,617

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-26806	Microsoft Office Graphics	Hig	0.51	7.8	0.01	Dec 13, 2022	Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-26805	Microsoft Office Graphics	Hig	0.51	7.8	0.01	Dec 13, 2022	Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-26804	Microsoft Office Graphics	Hig	0.51	7.8	0.01	Dec 13, 2022	Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-4223	Pgadmin.org Pgadmin	Hig	0.64	8.8	0.80	Dec 13, 2022	The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. The utility is executed by the server to determine what PostgreSQL version it is from. Versions of pgAdmin…
CVE-2022-46664	Mendix Workflow Commons	Hig	0.53	8.1	0.01	Dec 13, 2022	A vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0), Mendix Workflow Commons V2.1 (All versions < V2.1.4), Mendix Workflow Commons V2.3 (All versions < V2.3.2). Affected versions of the module improperly handle access control for some module…
CVE-2022-46355	Siemens Foundation SCALANCE X204RNA	Hig	0.49	7.5	0.01	Dec 13, 2022	A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All…
CVE-2022-46352	Siemens Foundation SCALANCE X204RNA	Hig	0.49	7.5	0.01	Dec 13, 2022	A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All…
CVE-2022-46349	Siemens Foundation Parasolid	Hig	0.51	7.8	0.01	Dec 13, 2022	A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022…
CVE-2022-46348	Siemens Foundation Parasolid	Hig	0.51	7.8	0.00	Dec 13, 2022	A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022…
CVE-2022-46347	Siemens Foundation Parasolid	Hig	0.51	7.8	0.01	Dec 13, 2022	A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022…
CVE-2022-46346	Siemens Foundation Parasolid	Hig	0.51	7.8	0.00	Dec 13, 2022	A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022…
CVE-2022-46345	Siemens Foundation Parasolid	Hig	0.51	7.8	0.00	Dec 13, 2022	A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022…
CVE-2022-46051	AeroCMS AeroCMS	Hig	0.47	7.2	0.01	Dec 13, 2022	The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks.
CVE-2022-45937	Siemens Foundation APOGEE PXC Compact (BACnet)	Hig	0.57	8.8	0.01	Dec 13, 2022	A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), TALON TC Compact…
CVE-2022-45936	Mendix Email Connector	Hig	0.53	8.1	0.01	Dec 13, 2022	A vulnerability has been identified in Mendix Email Connector (All versions < V2.0.0). Affected versions of the module improperly handle access control for some module entities. This could allow authenticated remote attackers to read and manipulate sensitive information.
CVE-2022-43723	Siemens Foundation Sicam Pas\/pqs	Hig	0.49	7.5	0.01	Dec 13, 2022	A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0), SICAM PAS/PQS (All versions >= 7.0 < V8.06). Affected software does not properly validate the input for a certain parameter in the s7ontcp.dll. This could allow an unauthenticated remote attacker to send…
CVE-2022-43722	Siemens Foundation Sicam Pas\/pqs	Hig	0.51	7.8	0.00	Dec 13, 2022	A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a…
CVE-2022-43517	Siemens Foundation Star Ccm\+	Hig	0.51	7.8	0.00	Dec 13, 2022	A vulnerability has been identified in Simcenter STAR-CCM+ (All versions < V2306). The affected application improperly assigns file permissions to installation folders. This could allow a local attacker with an unprivileged account to override or modify the service…
CVE-2022-41286	Siemens Foundation Teamcenter Visualization	Hig	0.51	7.8	0.00	Dec 13, 2022	A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization…
CVE-2022-41285	Siemens Foundation Teamcenter Visualization	Hig	0.51	7.8	0.00	Dec 13, 2022	A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization…
CVE-2022-41284	Siemens Foundation Teamcenter Visualization	Hig	0.51	7.8	0.00	Dec 13, 2022	A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization…
CVE-2022-41283	Siemens Foundation Teamcenter Visualization	Hig	0.51	7.8	0.00	Dec 13, 2022	A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization…
CVE-2022-41282	Siemens Foundation Teamcenter Visualization	Hig	0.51	7.8	0.00	Dec 13, 2022	A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization…
CVE-2022-41281	Siemens Foundation Teamcenter Visualization	Hig	0.51	7.8	0.00	Dec 13, 2022	A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization…
CVE-2022-3996	OpenSSL Project OpenSSL	Hig	0.42	7.5	0.01	Dec 13, 2022	If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems (most widely: Windows) this results in a denial of service when the affected process hangs. Policy…
CVE-2022-33268	Qualcomm Snapdragon	Hig	0.53	8.2	0.00	Dec 13, 2022	Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-33238	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Dec 13, 2022	Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-33235	Qualcomm WLAN Firmware	Hig	0.53	8.2	0.00	Dec 13, 2022	Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-31696	VMware Esxi	Hig	0.57	8.8	0.00	Dec 13, 2022	VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may exploit this issue to corrupt memory leading to an escape of the ESXi sandbox.
CVE-2022-25702	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Dec 13, 2022	Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25698	Qualcomm Snapdragon Mobile	Hig	0.55	8.4	0.00	Dec 13, 2022	Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25697	Qualcomm Snapdragon Mobile	Hig	0.55	8.4	0.00	Dec 13, 2022	Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25695	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Dec 13, 2022	Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice…
CVE-2022-25692	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Dec 13, 2022	Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25691	Qualcomm Snapdragon Mobile	Hig	0.49	7.5	0.00	Dec 13, 2022	Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile
CVE-2022-25689	Qualcomm Snapdragon Mobile	Hig	0.49	7.5	0.00	Dec 13, 2022	Denial of service in Modem due to reachable assertion in Snapdragon Mobile
CVE-2022-25685	Qualcomm Snapdragon	Hig	0.49	7.5	0.00	Dec 13, 2022	Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25682	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Dec 13, 2022	Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2022-25681	Qualcomm Snapdragon	Hig	0.55	8.4	0.00	Dec 13, 2022	Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-25673	Qualcomm Snapdragon Mobile	Hig	0.49	7.5	0.00	Dec 13, 2022	Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile
CVE-2022-25672	Qualcomm Snapdragon Mobile	Hig	0.49	7.5	0.00	Dec 13, 2022	Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile
CVE-2022-20611	Google Android	Hig	0.51	7.8	0.00	Dec 13, 2022	In deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass carrier restrictions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2022-20501	Google Android	Hig	0.47	7.3	0.00	Dec 13, 2022	In onCreate of EnableAccountPreferenceActivity.java, there is a possible way to mislead the user into enabling a malicious phone account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction…
CVE-2022-20495	Google Android	Hig	0.51	7.8	0.00	Dec 13, 2022	In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility service due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not…
CVE-2022-20491	Google Android	Hig	0.51	7.8	0.00	Dec 13, 2022	In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2022-20488	Google Android	Hig	0.51	7.8	0.00	Dec 13, 2022	In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2022-20487	Google Android	Hig	0.51	7.8	0.00	Dec 13, 2022	In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2022-20486	Google Android	Hig	0.51	7.8	0.00	Dec 13, 2022	In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2022-20485	Google Android	Hig	0.51	7.8	0.00	Dec 13, 2022	In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2022-20484	Google Android	Hig	0.51	7.8	0.00	Dec 13, 2022	In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

CVE-2022-26806HigDec 13, 2022
Microsoft
Office Graphics
risk 0.51cvss 7.8epss 0.01
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-26805HigDec 13, 2022
Microsoft
Office Graphics
risk 0.51cvss 7.8epss 0.01
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-26804HigDec 13, 2022
Microsoft
Office Graphics
risk 0.51cvss 7.8epss 0.01
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-4223HigDec 13, 2022
Pgadmin.org
Pgadmin
risk 0.64cvss 8.8epss 0.80
The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. The utility is executed by the server to determine what PostgreSQL version it is from. Versions of pgAdmin…
CVE-2022-46664HigDec 13, 2022
Mendix
Workflow Commons
risk 0.53cvss 8.1epss 0.01
A vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0), Mendix Workflow Commons V2.1 (All versions < V2.1.4), Mendix Workflow Commons V2.3 (All versions < V2.3.2). Affected versions of the module improperly handle access control for some module…
CVE-2022-46355HigDec 13, 2022
Siemens Foundation
SCALANCE X204RNA
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All…
CVE-2022-46352HigDec 13, 2022
Siemens Foundation
SCALANCE X204RNA
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All…
CVE-2022-46349HigDec 13, 2022
Siemens Foundation
Parasolid
risk 0.51cvss 7.8epss 0.01
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022…
CVE-2022-46348HigDec 13, 2022
Siemens Foundation
Parasolid
risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022…
CVE-2022-46347HigDec 13, 2022
Siemens Foundation
Parasolid
risk 0.51cvss 7.8epss 0.01
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022…
CVE-2022-46346HigDec 13, 2022
Siemens Foundation
Parasolid
risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022…
CVE-2022-46345HigDec 13, 2022
Siemens Foundation
Parasolid
risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022…
CVE-2022-46051HigDec 13, 2022
AeroCMS
AeroCMS
risk 0.47cvss 7.2epss 0.01
The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks.
CVE-2022-45937HigDec 13, 2022
Siemens Foundation
APOGEE PXC Compact (BACnet)
risk 0.57cvss 8.8epss 0.01
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), TALON TC Compact…
CVE-2022-45936HigDec 13, 2022
Mendix
Email Connector
risk 0.53cvss 8.1epss 0.01
A vulnerability has been identified in Mendix Email Connector (All versions < V2.0.0). Affected versions of the module improperly handle access control for some module entities. This could allow authenticated remote attackers to read and manipulate sensitive information.
CVE-2022-43723HigDec 13, 2022
Siemens Foundation
Sicam Pas\/pqs
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0), SICAM PAS/PQS (All versions >= 7.0 < V8.06). Affected software does not properly validate the input for a certain parameter in the s7ontcp.dll. This could allow an unauthenticated remote attacker to send…
CVE-2022-43722HigDec 13, 2022
Siemens Foundation
Sicam Pas\/pqs
risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a…
CVE-2022-43517HigDec 13, 2022
Siemens Foundation
Star Ccm\+
risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Simcenter STAR-CCM+ (All versions < V2306). The affected application improperly assigns file permissions to installation folders. This could allow a local attacker with an unprivileged account to override or modify the service…
CVE-2022-41286HigDec 13, 2022
Siemens Foundation
Teamcenter Visualization
risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization…
CVE-2022-41285HigDec 13, 2022
Siemens Foundation
Teamcenter Visualization
risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization…
CVE-2022-41284HigDec 13, 2022
Siemens Foundation
Teamcenter Visualization
risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization…
CVE-2022-41283HigDec 13, 2022
Siemens Foundation
Teamcenter Visualization
risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization…
CVE-2022-41282HigDec 13, 2022
Siemens Foundation
Teamcenter Visualization
risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization…
CVE-2022-41281HigDec 13, 2022
Siemens Foundation
Teamcenter Visualization
risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < V14.0.0.4), Teamcenter Visualization…
CVE-2022-3996HigDec 13, 2022
OpenSSL Project
OpenSSL
risk 0.42cvss 7.5epss 0.01
If an X.509 certificate contains a malformed policy constraint and policy processing is enabled, then a write lock will be taken twice recursively. On some operating systems (most widely: Windows) this results in a denial of service when the affected process hangs. Policy…
CVE-2022-33268HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2022-33238HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-33235HigDec 13, 2022
Qualcomm
WLAN Firmware
risk 0.53cvss 8.2epss 0.00
Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-31696HigDec 13, 2022
VMware
Esxi
risk 0.57cvss 8.8epss 0.00
VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi may exploit this issue to corrupt memory leading to an escape of the ESXi sandbox.
CVE-2022-25702HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25698HigDec 13, 2022
Qualcomm
Snapdragon Mobile
risk 0.55cvss 8.4epss 0.00
Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25697HigDec 13, 2022
Qualcomm
Snapdragon Mobile
risk 0.55cvss 8.4epss 0.00
Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25695HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice…
CVE-2022-25692HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25691HigDec 13, 2022
Qualcomm
Snapdragon Mobile
risk 0.49cvss 7.5epss 0.00
Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile
CVE-2022-25689HigDec 13, 2022
Qualcomm
Snapdragon Mobile
risk 0.49cvss 7.5epss 0.00
Denial of service in Modem due to reachable assertion in Snapdragon Mobile
CVE-2022-25685HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.49cvss 7.5epss 0.00
Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2022-25682HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…
CVE-2022-25681HigDec 13, 2022
Qualcomm
Snapdragon
risk 0.55cvss 8.4epss 0.00
Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2022-25673HigDec 13, 2022
Qualcomm
Snapdragon Mobile
risk 0.49cvss 7.5epss 0.00
Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile
CVE-2022-25672HigDec 13, 2022
Qualcomm
Snapdragon Mobile
risk 0.49cvss 7.5epss 0.00
Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile
CVE-2022-20611HigDec 13, 2022
Google
Android
risk 0.51cvss 7.8epss 0.00
In deletePackageVersionedInternal of DeletePackageHelper.java, there is a possible way to bypass carrier restrictions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2022-20501HigDec 13, 2022
Google
Android
risk 0.47cvss 7.3epss 0.00
In onCreate of EnableAccountPreferenceActivity.java, there is a possible way to mislead the user into enabling a malicious phone account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction…
CVE-2022-20495HigDec 13, 2022
Google
Android
risk 0.51cvss 7.8epss 0.00
In getEnabledAccessibilityServiceList of AccessibilityManager.java, there is a possible way to hide an accessibility service due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not…
CVE-2022-20491HigDec 13, 2022
Google
Android
risk 0.51cvss 7.8epss 0.00
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2022-20488HigDec 13, 2022
Google
Android
risk 0.51cvss 7.8epss 0.00
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2022-20487HigDec 13, 2022
Google
Android
risk 0.51cvss 7.8epss 0.00
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2022-20486HigDec 13, 2022
Google
Android
risk 0.51cvss 7.8epss 0.00
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2022-20485HigDec 13, 2022
Google
Android
risk 0.51cvss 7.8epss 0.00
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…
CVE-2022-20484HigDec 13, 2022
Google
Android
risk 0.51cvss 7.8epss 0.00
In NotificationChannel of NotificationChannel.java, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…