An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator.
An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path.
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=delete_activity.
DedeCMS v6.1.9 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add Administrator accounts and modify Admin passwords.
Windows Win32k Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-41109.
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-41045, CVE-2022-41100.
Windows Digital Media Receiver Elevation of Privilege Vulnerability.
Microsoft DWM Core Library Elevation of Privilege Vulnerability.
Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability.
Windows GDI+ Information Disclosure Vulnerability.