Vulnerabilities (CVE)

Total 424814 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-32583 1 Cybozu 1 Office 2026-06-17 N/A 4.3 MEDIUM
Operation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Scheduler via unspecified vectors.
CVE-2022-32582 1 Intel 78 Nuc 11 Performance Kit Nuc11pahi3, Nuc 11 Performance Kit Nuc11pahi30z, Nuc 11 Performance Kit Nuc11pahi30z Firmware and 75 more 2026-06-17 N/A 5.3 MEDIUM
Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Pro Compute Element may allow a privileged user to potentially enable denial of service via local access.
CVE-2022-32579 1 Intel 4 Lapbc510, Lapbc510 Firmware, Lapbc710 and 1 more 2026-06-17 N/A 7.2 HIGH
Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via physical access.
CVE-2022-32578 1 Intel 1 Nuc Pro Software Suite 2026-06-17 N/A 6.7 MEDIUM
Improper access control for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-32577 1 Intel 6 Nuc5cpyh, Nuc5cpyh Firmware, Nuc5pgyh and 3 more 2026-06-17 N/A 3.4 LOW
Improper input validation in BIOS Firmware for some Intel(R) NUC Kits before version PY0081 may allow a privileged user to potentially enable information disclosure or denial of service via local access
CVE-2022-32576 1 Intel 1 Unite 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path in the Intel(R) Unite(R) Plugin SDK before version 4.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-32575 1 Intel 1 Trace Analyzer And Collector 2026-06-17 N/A 4.8 MEDIUM
Out-of-bounds write in the Intel(R) Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-32574 1 Goabode 2 Iota All-in-one Security Kit, Iota All-in-one Security Kit Firmware 2026-06-17 N/A 6.5 MEDIUM
A double-free vulnerability exists in the web interface /action/ipcamSetParamPost functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP request can lead to memory corruption. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2022-32573 1 Lansweeper 1 Lansweeper 2026-06-17 N/A 9.9 CRITICAL
A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2022-32572 1 Wwbn 1 Avideo 2026-06-17 N/A 8.8 HIGH
An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2022-32570 1 Intel 1 Quartus Prime 2026-06-17 N/A 6.7 MEDIUM
Improper authentication in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-32569 1 Intel 4 Nuc M15 Laptop Kit Lapbc510, Nuc M15 Laptop Kit Lapbc510 Firmware, Nuc M15 Laptop Kit Lapbc710 and 1 more 2026-06-17 N/A 7.5 HIGH
Improper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before version BCTGL357.0074 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-32567 1 Appfire 1 Jira Misc Custom Fields 2026-06-17 3.5 LOW 5.4 MEDIUM
The Appfire Jira Misc Custom Fields (JMCF) app 2.4.6 for Atlassian Jira allows XSS via a crafted project name to the Add Auto Indexing Rule function.
CVE-2022-32565 1 Couchbase 1 Couchbase Server 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in Couchbase Server before 7.0.4. The Backup Service log leaks unredacted usernames and document ids.
CVE-2022-32564 1 Couchbase 1 Couchbase Server 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager cookie.
CVE-2022-32563 1 Couchbase 1 Sync Gateway 2026-06-17 6.8 MEDIUM 9.8 CRITICAL
An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, the admin credentials provided to the Admin REST API are ignored, resulting in privilege escalation for unauthenticated users. The Public REST API is not impacted by this issue. A workaround is to replace X.509 certificate based authentication with Username and Password authentication inside the bootstrap configuration.
CVE-2022-32562 1 Couchbase 1 Couchbase Server 2026-06-17 6.5 MEDIUM 8.8 HIGH
An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permission.
CVE-2022-32561 1 Couchbase 1 Couchbase Server 2026-06-17 3.5 LOW 4.9 MEDIUM
An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous mitigations for CVE-2018-15728 were found to be insufficient when it was discovered that diagnostic endpoints could still be accessed from the network.
CVE-2022-32560 1 Couchbase 1 Couchbase Server 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing internal settings.
CVE-2022-32559 1 Couchbase 1 Couchbase Server 2026-06-17 6.4 MEDIUM 9.1 CRITICAL
An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics.