Latest CVE Feed
-
9.8
CRITICALCVE-2022-40664
Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.... Read more
Affected Products : shiro- EPSS Score: %0.52
- Published: Oct. 12, 2022
- Modified: May. 15, 2025
-
8.8
HIGHCVE-2022-40469
iKuai OS v3.6.7 was discovered to contain an authenticated remote code execution (RCE) vulnerability.... Read more
Affected Products : ikuaios- EPSS Score: %4.21
- Published: Oct. 12, 2022
- Modified: May. 15, 2025
-
8.0
HIGHCVE-2022-40187
Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user... Read more
- EPSS Score: %0.04
- Published: Oct. 13, 2022
- Modified: May. 15, 2025
-
5.5
MEDIUMCVE-2022-39120
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.... Read more
- EPSS Score: %0.03
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
5.5
MEDIUMCVE-2022-39113
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.... Read more
- EPSS Score: %0.07
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
7.8
HIGHCVE-2022-39109
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.... Read more
- EPSS Score: %0.13
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
7.8
HIGHCVE-2022-39108
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.... Read more
- EPSS Score: %0.13
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
7.8
HIGHCVE-2022-39107
In Soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in Soundrecorder service with no additional execution privileges needed.... Read more
- EPSS Score: %0.05
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
5.5
MEDIUMCVE-2022-39105
In sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.... Read more
- EPSS Score: %0.03
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
5.5
MEDIUMCVE-2022-39103
In Gallery service, there is a missing permission check. This could lead to local denial of service in Gallery service with no additional execution privileges needed.... Read more
- EPSS Score: %0.03
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
7.8
HIGHCVE-2022-39080
In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.... Read more
- EPSS Score: %0.13
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
8.1
HIGHCVE-2022-39064
An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e. resend) the same frame multiple times, the bulb performs a factory reset. This causes the bulb to lose configuration information abo... Read more
- EPSS Score: %0.06
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
7.5
HIGHCVE-2022-39011
The HISP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vulnerability may cause unauthorized access to the HISP module.... Read more
- EPSS Score: %0.08
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
7.5
HIGHCVE-2022-38998
The HISP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality.... Read more
- EPSS Score: %0.11
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
7.5
HIGHCVE-2022-38985
The facial recognition module has a vulnerability in input validation.Successful exploitation of this vulnerability may affect data confidentiality.... Read more
- EPSS Score: %0.08
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
7.5
HIGHCVE-2022-38984
The HIPP module has a vulnerability of not verifying the data transferred in the kernel space.Successful exploitation of this vulnerability will cause out-of-bounds read, which affects data confidentiality.... Read more
- EPSS Score: %0.11
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
9.8
CRITICALCVE-2022-38983
The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution.... Read more
- EPSS Score: %0.25
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
9.8
CRITICALCVE-2022-38982
The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked.... Read more
Affected Products : harmonyos- EPSS Score: %0.16
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
7.5
HIGHCVE-2022-38981
The HwAirlink module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause information leakage.... Read more
Affected Products : harmonyos- EPSS Score: %0.13
- Published: Oct. 14, 2022
- Modified: May. 15, 2025
-
9.8
CRITICALCVE-2022-38980
The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of this vulnerability may allow attackers to obtain process control permissions.... Read more
Affected Products : harmonyos- EPSS Score: %0.20
- Published: Oct. 14, 2022
- Modified: May. 15, 2025