November 2022

15 results · Clear filters · Feed

• Critical 9.8
  CVE-2022-44136 Public exploit

  Zenario CMS is vulnerable to Remote Code Execution (RCE).

  Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).

  tribalsystems/zenario Packagist
  Nov 30, 2022
• Critical 9.8
  CVE-2022-36193 Public exploit

  SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent chan…

  Nov 28, 2022
• Critical 9.8
  CVE-2020-23583 Public exploit

  OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the attacker sends an arbitrary…

  Nov 23, 2022
• Critical 9.8
  CVE-2020-23591 Public exploit

  A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker …

  Nov 23, 2022
• Critical 9.8
  CVE-2020-23584 Public exploit EPSS 41%

  Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes a…

  Nov 23, 2022
• Critical 9.8
  CVE-2022-44118 Public exploit

  dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.

  Nov 23, 2022
• Critical 9.6
  CVE-2022-41924 Public exploit

  Tailscale Windows daemon is vulnerable to RCE via CSRF

  A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code. In the Tailscale Windows client, the local API was bound to a local TCP so…

  tailscale tailscale tailscale.com tailscale Alpine Go
  Nov 23, 2022
• Critical 9.1
  CVE-2022-41923 Public exploit

  Grails Spring Security Core plugin vulnerable to privilege escalation

  Grails Spring Security Core plugin is vulnerable to privilege escalation. The vulnerability allows an attacker access to one endpoint (i.e. the targeted endpoint) using the authorization requirements of a different endpoint (i.e. the donor endpoint). In some …

  grails grails-spring-security-core
  Nov 23, 2022
• Critical 9.6
  CVE-2022-43143 Public exploit

  A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts…

  Nov 21, 2022
• Critical 9.8
  CVE-2022-43781 Public exploit EPSS 98%

  There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker…

  Atlassian Bitbucket Server Bitbucket Data Center
  Nov 17, 2022
• Critical 9.8
  CVE-2022-40881 Public exploit Scanner template EPSS 31%

  SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php

  Nov 17, 2022
• Critical 9.8
  CVE-2022-45047 Public exploit

  Apache MINA SSHD: Java unsafe deserialization vulnerability

  Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSH…

  Apache Software Foundation Apache MINA SSHD org.apache.sshd:sshd-common org.apache.sshd:sshd-core Maven
  Nov 16, 2022
• Critical 9.8
  CVE-2022-37109 Public exploit EPSS 49%

  patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Acces…

  Nov 14, 2022
• Critical 9.8
  CVE-2022-31199 Exploited · Ransomware Public exploit EPSS 36%

  Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting bo…

  Nov 8, 2022

  KEV Jul 11, 2023
• Critical 9.8
  CVE-2022-31691 Public exploit

  Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse C…

  Nov 4, 2022