27 March 2022

9 results · Feed

• Unscored —
  CVE-2022-26255

  Clash for Windows v0.19.8 was discovered to allow arbitrary code execution via a crafted payload injected into the Prox…

  Mar 27, 2022
• Unscored —
  CVE-2021-44127

  In DLink DAP-1360 F1 firmware version <=v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execu…

  Mar 27, 2022
• Unscored —
  CVE-2022-26254

  WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows…

  Mar 27, 2022
• Unscored —
  CVE-2022-26252

  aaPanel v6.8.21 was discovered to be vulnerable to directory traversal. This vulnerability allows attackers to obtain t…

  Mar 27, 2022
• High 7.2
  CVE-2022-1106

  use after free in mrb_vm_exec in mruby/mruby

  use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.

  mruby mruby/mruby mruby mruby Ubuntu Alpine
  Mar 27, 2022
• Critical 9.8
  CVE-2022-26245 EPSS 14%

  SQLinjection in falcon-plus

  Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go.

  github.com/open-falcon/falcon-plus Go
  Mar 27, 2022
• High 7.2
  CVE-2022-27948

  Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing …

  Mar 27, 2022
• Unscored —
  CVE-2022-26205

  Marky commit 3686565726c65756e was discovered to contain a remote code execution (RCE) vulnerability via the Display te…

  Mar 27, 2022
• Critical 9.8
  CVE-2022-26258 Exploited EPSS 92%

  D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set…

  Mar 27, 2022

  KEV Sep 8, 2022