10 May 2022

16 results · Clear filters · Feed

• Unscored —
  CVE-2022-28601 Public exploit

  A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote at…

  May 10, 2022
• High 8.8
  CVE-2022-30129 Public exploit EPSS 42%

  Visual Studio Code Remote Code Execution Vulnerability

  Visual Studio Code Remote Code Execution Vulnerability

  Microsoft Visual Studio Code
  May 10, 2022
• High 7.5
  CVE-2022-29117 Public exploit

  .NET and Visual Studio Denial of Service Vulnerability

  .NET and Visual Studio Denial of Service Vulnerability

  Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) .NET 6.0 Microsoft Visual Studio 2022 version 17.0 NuGet
  May 10, 2022
• Critical 9.8
  CVE-2022-26937 Public exploit EPSS 76%

  Windows Network File System Remote Code Execution Vulnerability

  Windows Network File System Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  May 10, 2022
• High 8.8
  CVE-2022-26927 Public exploit

  Windows Graphics Component Remote Code Execution Vulnerability

  Windows Graphics Component Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 10, 2022
• High 8.8
  CVE-2022-26923 Exploited Public exploit EPSS 84%

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Active Directory Domain Services Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 10, 2022

  KEV Aug 18, 2022
• High 8.1
  CVE-2022-23270 Public exploit EPSS 70%

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 10, 2022
• Unscored —
  CVE-2022-20120 Public exploit

  Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A

  Android
  May 10, 2022
• Unscored —
  CVE-2022-20009 Public exploit

  In various functions of the USB gadget subsystem, there is a possible out of bounds write due to a missing bounds check…

  linux-raspi2 linux-hwe linux-azure linux-riscv Android Ubuntu
  May 10, 2022
• Unscored —
  CVE-2022-20007 Public exploit

  In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app t…

  Android
  May 10, 2022
• Unscored —
  CVE-2022-20005 Public exploit

  In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code an…

  Android
  May 10, 2022
• Unscored —
  CVE-2022-20004 Public exploit

  In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input valid…

  Android
  May 10, 2022
• Unscored —
  CVE-2021-39670 Public exploit

  In setStream of WallpaperManager.java, there is a possible way to cause a permanent DoS due to improper input validatio…

  Android
  May 10, 2022
• High 7.5
  CVE-2022-1442 Public exploit Scanner template

  Metform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure

  The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/action.php file which can be exploited by an unauthenticated attacker to view all API keys and secrets of integrated third-party …

  roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor Web / CMS
  May 10, 2022
• Unscored —
  CVE-2022-28986 Public exploit

  LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object referenc…

  May 10, 2022
• Unscored —
  CVE-2022-28906 Public exploit

  TOTOLink N600R V5.3c.7159_B20190425 was discovered to contain a command injection vulnerability via the langtype parame…

  May 10, 2022