Common Vulnerabilities and Exposures (CVE) is a critical tool for maintaining software security, providing a standardized way to track and manage vulnerabilities across systems. Organizations should regularly monitor CVE databases, assess the impact of vulnerabilities, and apply patches promptly to reduce the risk of exploitation.
CVE (Common Vulnerabilities and Exposures) is a public database that provides a standardized method for identifying, tracking, and referencing publicly disclosed security vulnerabilities in software and hardware.
Each vulnerability receives a unique identifier called a CVE ID (e.g., CVE-2023-12345), making it easier to reference specific vulnerabilities across different tools and databases.
Total Search Results: 158437
CVE ID | Description | Severity | Published Date | Affected Vendor | Action |
---|---|---|---|---|---|
CVE-2022-4842 | A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the system. | Unknown | N/A | n/a | |
CVE-2022-48422 | ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE document is located. | Unknown | N/A | n/a | |
CVE-2022-48423 | In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write may occur. | Unknown | N/A | n/a | |
CVE-2022-48424 | In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault may occur. | Unknown | N/A | n/a | |
CVE-2022-48425 | In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs. | Unknown | N/A | n/a | |
CVE-2022-48426 | In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible | Unknown | N/A | JetBrains | |
CVE-2022-48427 | In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possible | Unknown | N/A | JetBrains | |
CVE-2022-48428 | In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible | Unknown | N/A | JetBrains | |
CVE-2022-48429 | In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible | Unknown | N/A | JetBrains | |
CVE-2022-4843 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2. | Unknown | N/A | radareorg | |
CVE-2022-48430 | In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview. | Unknown | N/A | JetBrains | |
CVE-2022-48431 | In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation. | Unknown | N/A | JetBrains | |
CVE-2022-48432 | In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed. | Unknown | N/A | JetBrains | |
CVE-2022-48433 | In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server. | Unknown | N/A | JetBrains | |
CVE-2022-48434 | libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used). | Unknown | N/A | n/a | |
CVE-2022-48435 | In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file | Unknown | N/A | JetBrains | |
CVE-2022-48437 | An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verify_ctx_add_chain does not store errors that occur during leaf certificate verification, and therefore an incorrect error is returned. This behavior occurs when there is an installed verification callback that instructs the verifier to continue upon detecting an invalid certificate. | Unknown | N/A | n/a | |
CVE-2022-48438 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48439 | In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-4844 | Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1. | Unknown | N/A | usememos | |
CVE-2022-48440 | In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48441 | In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48442 | In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48443 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48444 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48445 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48446 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48447 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48448 | In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges. | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-4845 | Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1. | Unknown | N/A | usememos | |
CVE-2022-48450 | In bluetooth service, there is a possible missing params check. This could lead to local denial of service with System execution privileges needed. | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48451 | In bluetooth service, there is a possible out of bounds write due to race condition. This could lead to local denial of service with System execution privileges needed. | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48452 | In Ifaa service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48453 | In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48454 | In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48455 | In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48456 | In camera driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local denial of service with System execution privileges needed | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48457 | In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48458 | In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48459 | In TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-4846 | Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1. | Unknown | N/A | usememos | |
CVE-2022-48460 | In setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local denial of service with no additional execution privileges needed | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48461 | In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48462 | In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48463 | In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48464 | In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed | Unknown | N/A | Unisoc (Shanghai) Technologies Co., Ltd. | |
CVE-2022-48468 | protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member. | Unknown | N/A | n/a | |
CVE-2022-48469 | There is a traffic hijacking vulnerability in Huawei routers. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers. | Unknown | N/A | Huawei | |
CVE-2022-4847 | Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1. | Unknown | N/A | usememos | |
CVE-2022-48471 | There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer service to be abnormal. | Unknown | N/A | Huawei | |
CVE-2022-48472 | A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product versions include:BiSheng-WNM versions OTA-BiSheng-FW-2.0.0.211-beta,BiSheng-WNM FW 3.0.0.325,BiSheng-WNM FW 2.0.0.211. | Unknown | N/A | Huawei | |
CVE-2022-48473 | There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer service to be abnormal. | Unknown | N/A | Huawei | |
CVE-2022-48474 | Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sending a malicious request could cause the server to check if an unrecognized component is up to date, causing a memory failure error that shuts down the process. | Unknown | N/A | Control de Ciber | |
CVE-2022-48475 | Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by the attacker could cause a Buffer Overflow when the adminitrator tries to accept or delete the print query created by the request. | Unknown | N/A | Control de Ciber | |
CVE-2022-48476 | In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible | Unknown | N/A | JetBrains | |
CVE-2022-48477 | In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing | Unknown | N/A | JetBrains | |
CVE-2022-48478 | The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service. | Unknown | N/A | Huawei | |
CVE-2022-48479 | The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service. | Unknown | N/A | Huawei | |
CVE-2022-4848 | Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1. | Unknown | N/A | usememos | |
CVE-2022-48480 | Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality. | Unknown | N/A | Huawei | |
CVE-2022-48481 | In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible | Unknown | N/A | JetBrains | |
CVE-2022-48482 | 3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directory traversal. Files may have credentials, full backups, call recordings, and chat logs. | Unknown | N/A | n/a | |
CVE-2022-48483 | 3CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 files via /Electron/download directory traversal in conjunction with a path component that has a drive letter and uses backslash characters. NOTE: this issue exists because of an incomplete fix for CVE-2022-28005. | Unknown | N/A | n/a | |
CVE-2022-48486 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. | Unknown | N/A | Huawei | |
CVE-2022-48487 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. | Unknown | N/A | Huawei | |
CVE-2022-48488 | Vulnerability of bypassing the default desktop security controls.Successful exploitation of this vulnerability may cause unauthorized modifications to the desktop. | Unknown | N/A | Huawei | |
CVE-2022-48489 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. | Unknown | N/A | Huawei | |
CVE-2022-4849 | Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1. | Unknown | N/A | usememos | |
CVE-2022-48490 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. | Unknown | N/A | Huawei | |
CVE-2022-48491 | Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at any time. | Unknown | N/A | Huawei | |
CVE-2022-48492 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. | Unknown | N/A | Huawei | |
CVE-2022-48493 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. | Unknown | N/A | Huawei | |
CVE-2022-48494 | Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized. | Unknown | N/A | Huawei | |
CVE-2022-48495 | Vulnerability of unauthorized access to foreground app information.Successful exploitation of this vulnerability may cause foreground app information to be obtained. | Unknown | N/A | Huawei | |
CVE-2022-48496 | Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized. | Unknown | N/A | Huawei | |
CVE-2022-48497 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. | Unknown | N/A | Huawei | |
CVE-2022-48498 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. | Unknown | N/A | Huawei | |
CVE-2022-48499 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. | Unknown | N/A | Huawei | |
CVE-2022-4850 | Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1. | Unknown | N/A | usememos | |
CVE-2022-48500 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. | Unknown | N/A | Huawei | |
CVE-2022-48501 | Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability. | Unknown | N/A | Huawei | |
CVE-2022-48502 | An issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly check for correctness during disk reads, leading to an out-of-bounds read in ntfs_set_ea in fs/ntfs3/xattr.c. | Unknown | N/A | n/a | |
CVE-2022-48503 | The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution. | Unknown | N/A | Apple | |
CVE-2022-48504 | The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data. | Unknown | N/A | Apple | |
CVE-2022-48505 | This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system | Unknown | N/A | Apple | |
CVE-2022-48506 | A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners allows anyone to determine the order in which ballots were cast from public ballot-level data, allowing deanonymization of voted ballots, in several types of scenarios. This issue was observed for use of the following versions of Democracy Suite: 5.2, 5.4-NM, 5.5, 5.5-A, 5.5-B, 5.5-C, 5.5-D, 5.7-A, 5.10, 5.10A, 5.15. NOTE: the Democracy Suite 5.17 EAC Certificate of Conformance mentions "Improved pseudo random number algorithm," which may be relevant. | Unknown | N/A | n/a | |
CVE-2022-48507 | Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality. | Unknown | N/A | Huawei | |
CVE-2022-48508 | Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity. | Unknown | N/A | Huawei | |
CVE-2022-48509 | Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally. | Unknown | N/A | Huawei | |
CVE-2022-4851 | Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1. | Unknown | N/A | usememos | |
CVE-2022-48510 | Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations. | Unknown | N/A | Huawei | |
CVE-2022-48511 | Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of this vulnerability may cause audio features to perform abnormally. | Unknown | N/A | Huawei | |
CVE-2022-48512 | Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally. | Unknown | N/A | Huawei | |
CVE-2022-48513 | Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access. | Unknown | N/A | Huawei | |
CVE-2022-48514 | The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality. | Unknown | N/A | Huawei | |
CVE-2022-48515 | Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality. | Unknown | N/A | Huawei | |
CVE-2022-48516 | Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation of this vulnerability will affect confidentiality. | Unknown | N/A | Huawei | |
CVE-2022-48517 | Unauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will affect availability. | Unknown | N/A | Huawei | |
CVE-2022-48518 | Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, which affects system performance. | Unknown | N/A | Huawei | |
CVE-2022-48519 | Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality. | Unknown | N/A | Huawei |
vunerability-insight.com © 2023 - 2025. All Rights Reserved.
Vulnerability Data Repositories v