Lista CVE 2022/1xxx

CVE nel gruppo: 1xxx

CVE-2022-1041 (N/A)

CVE-2022-1042 (Out-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioning)

CVE-2022-1043 (Out-of-bound write vulnerability in the Bluetooth mesh core stack can be triggered during provisioning)

CVE-2022-1044 (N/A)

CVE-2022-1045 (Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudesk)

CVE-2022-1046 (Stored XSS viva .svg file upload in polonel/trudesk)

CVE-2022-1047 (Visual Form Builder < 3.0.7 - Admin+ Stored Cross-Site Scripting)

CVE-2022-1048 (Themify – Post Type Builder Search Addon < 1.4.0 - Reflected Cross-Site Scripting)

CVE-2022-1049 (N/A)

CVE-2022-1050 (N/A)

CVE-2022-1051 (N/A)

CVE-2022-1052 (WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fields)

CVE-2022-1053 (Heap Buffer Overflow in iterate_chained_fixups in radareorg/radare2)

CVE-2022-1054 (N/A)

CVE-2022-1055 (RSVP and Event Management < 2.7.8 - Unauthenticated Entries Export)

CVE-2022-1056 (Use after Free in tc_new_tfilter allowing for privilege escalation in Linux Kernel)

CVE-2022-1057 (N/A)

CVE-2022-1058 (Pricing Deals for WooCommerce <= 2.0.2.02 - Unauthenticated SQLi)

CVE-2022-1059 (Open Redirect on login in go-gitea/gitea)

CVE-2022-1061 (CROSS-SITE SCRIPTING CWE-79)

CVE-2022-1062 (Heap Buffer Overflow in parseDragons in radareorg/radare2)

CVE-2022-1063 (th23 Social <= 1.2.0 - Admin+ Stored Cross-Site Scripting)

CVE-2022-1064 (Thank Me Later <= 3.3.4 - Admin+ Stored Cross-Site Scripting)

CVE-2022-1065 (SQL injection through marking blog comments on bulk as spam in forkcms/forkcms)

CVE-2022-1066 (Multi Factor Authentication Bypass in various versions of Abacus ERP)

CVE-2022-1067 (MISSING AUTHORIZATION CWE-862)

CVE-2022-1068 (ICSMA-22-095-01 LifePoint Informatics Patient Portal)

CVE-2022-1069 (Modbus Tools Modbus Slave Stack-Based Buffer Overflow)

CVE-2022-1070 (Softing Secure Integration Server Out-of-bounds Read)

CVE-2022-1071 (CHANNEL ACCESSIBLE BY NON-ENDPOINT CWE-300)

CVE-2022-1072 (User after free in mrb_vm_exec in mruby/mruby)

CVE-2022-1073 (N/A)

CVE-2022-1074 (Automatic Question Paper Generator password recovery)

CVE-2022-1075 (TEM FLEX-1085 injection)

CVE-2022-1076 (College Website Management System Contact cross site scripting)

CVE-2022-1077 (Automatic Question Paper Generator System My Account Page login.php cross site scripting)

CVE-2022-1078 (TEM FLEX-1080/FLEX-1085 Log information disclosure)

CVE-2022-1079 (SourceCodester College Website Management System sql injection)

CVE-2022-1080 (SourceCodester One Church Management System churchprofile.php cross site scripting)

CVE-2022-1081 (SourceCodester One Church Management System attendancy.php sql injection)

CVE-2022-1082 (SourceCodester Microfinance Management System addcustomerHandler.php cross site scripting)

CVE-2022-1083 (SourceCodester Microfinance Management System Login Page login.php sql injection)

CVE-2022-1084 (Microfinance Management System sql injection)

CVE-2022-1085 (SourceCodester One Church Management System Session userregister.php improper authentication)

CVE-2022-1086 (CLTPHP POST Parameter cross site scripting)

CVE-2022-1087 (DolphinPHP User Management Page cross site scripting)

CVE-2022-1088 (htmly Edit Profile Module cross site scripting)

CVE-2022-1089 (Page Security & Membership <= 1.5.15 - Admin+ Stored Cross-Site Scripting)

CVE-2022-1090 (Bulk Edit and Create User Profiles < 1.5.14 - Admin+ Stored Cross-Site Scripting)

CVE-2022-1091 (Good & Bad Comments <= 1.0.0 - Admin+ Stored Cross-Site Scripting)

CVE-2022-1092 (Safe SVG < 1.9.10 - SVG Sanitisation Bypass)

CVE-2022-1093 (myCred < 2.4.4 - Subscriber+ Import/Export to Email Address Disclosure)

CVE-2022-1094 (WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbs)

CVE-2022-1095 (Amr Users < 4.59.4 - Admin+ Stored Cross-Site Scripting)

CVE-2022-1096 (Mihdan: No External Links < 5.0.2 - Admin+ Stored Cross-Site Scripting)

CVE-2022-1097 (N/A)

CVE-2022-1098 (N/A)

CVE-2022-1099 (Delta Electronics DIAEnergie Uncontrolledly Search Path Element)

CVE-2022-1100 (N/A)

CVE-2022-1101 (N/A)