7 December 2022

9 results · Clear filters · Feed

• Critical 10.0
  CVE-2022-46742

  PaddlePaddle vulnerable to Code Injection

  Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.

  PaddlePaddle PaddlePaddle paddlepaddle PyPI
  Dec 7, 2022
• Critical 9.8
  CVE-2022-46682

  Jenkins Plot Plugin XML External Entity Reference vulnerability

  Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

  Jenkins Project Jenkins Plot Plugin org.jenkins-ci.plugins:plot Web / CMS Maven
  Dec 7, 2022
• Critical 9.8
  CVE-2022-45550

  AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE).

  Dec 7, 2022
• Critical 9.8
  CVE-2022-45026

  An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary comm…

  Dec 7, 2022
• Critical 9.8
  CVE-2022-45025 Public exploit EPSS 35%

  Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerab…

  Dec 7, 2022
• Critical 9.8
  CVE-2022-45010

  Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid paramet…

  Dec 7, 2022
• Critical 9.8
  CVE-2022-44371

  hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution (RCE).

  Dec 7, 2022
• Critical 9.8
  CVE-2022-44351

  Skycaiji v2.5.1 was discovered to contain a deserialization vulnerability via /SkycaijiApp/admin/controller/Mystore.php.

  Dec 7, 2022
• Critical 9.8
  CVE-2022-42458

  Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a…

  Shift Tech bingo!CMS
  Dec 7, 2022