Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by CWE-862
Total 1368 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-3501 1 Otrs 1 Otrs 2022-10-20 N/A 7.5 HIGH
Article template contents with sensitive data could be accessed from agents without permissions.
CVE-2022-3585 1 Simple Cold Storage Management System Project 1 Simple Cold Storage Management System 2022-10-18 N/A 4.3 MEDIUM
A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown function of the file /csms/?page=contact_us of the component Contact Us. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-211194 is the identifier assigned to this vulnerability.
CVE-2022-3582 1 Simple Cold Storage Management System Project 1 Simple Cold Storage Management System 2022-10-18 N/A 3.5 LOW
A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument change password leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211189 was assigned to this vulnerability.
CVE-2022-2985 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-18 N/A 7.8 HIGH
In music service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
CVE-2022-38670 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-18 N/A 7.8 HIGH
In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
CVE-2022-39107 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-18 N/A 7.8 HIGH
In Soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in Soundrecorder service with no additional execution privileges needed.
CVE-2022-38669 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-18 N/A 7.8 HIGH
In soundrecorder service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
CVE-2022-38677 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-18 N/A 5.5 MEDIUM
In cell service, there is a missing permission check. This could lead to local denial of service in cell service with no additional execution privileges needed.
CVE-2022-38679 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-18 N/A 5.5 MEDIUM
In music service, there is a missing permission check. This could lead to local denial of service in music service with no additional execution privileges needed.
CVE-2022-39111 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-18 N/A 7.8 HIGH
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
CVE-2022-39109 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-18 N/A 7.8 HIGH
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
CVE-2022-39080 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-18 N/A 7.8 HIGH
In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
CVE-2022-39108 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-18 N/A 7.8 HIGH
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
CVE-2022-38698 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-18 N/A 7.8 HIGH
In messaging service, there is a missing permission check. This could lead to elevation of privilege in contacts service with no additional execution privileges needed.
CVE-2022-38697 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-18 N/A 5.5 MEDIUM
In messaging service, there is a missing permission check. This could lead to access unexpected provider in contacts service with no additional execution privileges needed.
CVE-2022-39110 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-18 N/A 7.8 HIGH
In Music service, there is a missing permission check. This could lead to elevation of privilege in Music service with no additional execution privileges needed.
CVE-2022-39112 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-17 N/A 5.5 MEDIUM
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
CVE-2022-39114 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-17 N/A 5.5 MEDIUM
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
CVE-2022-39113 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-17 N/A 5.5 MEDIUM
In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.
CVE-2022-39117 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2022-10-17 N/A 5.5 MEDIUM
In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.