Archive
17 July 2022
Vulnerabilities first published on this day (UTC), newest first.
76 results · Feed
-
Unscored —CVE-2022-27434 Public exploit
UNIT4 TETA Mobile Edition (ME) before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the Profile…
-
Unscored —
In QVIS NVR DVR before 2021-12-13, an attacker can escalate privileges from a qvisdvr user to the root user by abusing …
-
Unscored —
ShowMyPC 3606 on Windows suffers from a DLL hijack vulnerability. If an attacker overwrites the file %temp%\ShowMyPC\-S…
-
Unscored —CVE-2021-41419 Scanner template
QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization.
-
Unscored —
An issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13. When using the RESTServer plug-in to operate a REST…
-
Unscored —
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000002cba.
-
Unscored —
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000aefe.
-
Unscored —
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000005722.
-
Unscored —
SoftGuard Web (SGW) before 5.1.5 allows HTML injection.
-
Unscored —CVE-2021-40150 Scanner template
The web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is map…
-
Unscored —
libnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on…
-
Unscored —
An issue was discovered in Infiray IRAY-A8Z3 1.0.957. There is a blank root password for TELNET by default.
-
Unscored —
An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject/set_param.cgi contains…
-
Unscored —
An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The firmware contains a potential buffer overflow by calling strc…
-
Unscored —
An issue was discovered in Infiray IRAY-A8Z3 1.0.957. The webserver contains an endpoint that can execute arbitrary com…
-
Unscored —
The export function in SoftGuard Web (SGW) before 5.1.5 allows directory traversal to read an arbitrary local file via …
-
Unscored —
An issue was discovered in Gentics CMS before 5.43.1. There is stored XSS in the profile description and in the usernam…
-
Unscored —
An issue was discovered in Gentics CMS before 5.43.1. By uploading a malicious ZIP file, an attacker is able to deseria…
-
Unscored —
An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists …
-
Unscored —
An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists …
-
Unscored —
An issue was discovered in Open Design Alliance Drawings SDK before 2023.2. An Out-of-Bounds Read vulnerability exists …
-
Unscored —
An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certifica…
-
Unscored —CVE-2022-26482 EPSS 23%
An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an …
-
Unscored —
An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file (which can be created …
-
Critical 9.8
An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form re…
KEV Aug 25, 2022 -
Unscored —CVE-2021-40149 Scanner template
The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory.…
-
Unscored —
Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719.
-
Unscored —
Pexip Infinity 27 before 28.0 allows remote attackers to trigger excessive resource consumption and termination because…
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol.
-
Unscored —
Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Univ…
-
Unscored —
Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via HTTP.
-
Unscored —
Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.
-
Unscored —
Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via O…