Archive
7 December 2022
Vulnerabilities first published on this day (UTC), newest first.
79 results · Feed
-
Critical 9.8
AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE).
-
Medium 6.5
Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. Having a user to acce…
-
Unscored —
ILIAS before 7.16 allows External Control of File Name or Path.
-
Medium 6.1CVE-2022-45917 Scanner template
ILIAS before 7.16 has an Open Redirect.
-
Critical 9.8
An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary comm…
-
High 8.8
ILIAS before 7.16 allows OS Command Injection.
-
Medium 5.4CVE-2022-45217 Public exploit
A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary…
-
Medium 6.1
Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable T…
-
High 7.2
Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leave_system/c…
-
Medium 5.4
ILIAS before 7.16 allows XSS.
-
Medium 4.8
Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the …
-
Critical 9.8
Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerab…
-
Critical 9.8
Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid paramet…
-
High 8.8
Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass au…
-
High 8.8
Improper authentication vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earl…
-
High 7.2
Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/view_service&id=.
-
High 8.8
A Cross-Site Request Forgery (CSRF) in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super…
-
High 7.5
Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated a…
-
Medium 5.4
An issue was discovered in ZZCMS 2022. There is a cross-site scripting (XSS) vulnerability in admin/ad_list.php.
-
High 8.8
A stack overflow vulnerability exists in TrendNet Wireless AC Easy-Upgrader TEW-820AP (Version v1.0R, firmware version …
-
Critical 9.8
hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution (RCE).
-
High 8.1
Casdoor arbitrary file deletion vulnerability via uploadFile function
Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function.
-
Medium 6.1
Rapid Software LLC Rapid SCADA 5.8.4 is vulnerable to Cross Site Scripting (XSS).
-
Critical 9.8
Skycaiji v2.5.1 was discovered to contain a deserialization vulnerability via /SkycaijiApp/admin/controller/Mystore.php.
-
High 8.8
OS command injection vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier…
-
Medium 5.5
tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service …
-
Medium 4.8
baserCMS vulnerable to stored Cross-site Scripting
Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.
-
Medium 6.2
Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text exp…
-
Medium 5.5
Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text exp…
-
Critical 9.8
Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a…
-
Medium 4.8
baserCMS vulnerable to stored Cross-site Scripting
Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.
-
Unscored —
Cross-site scripting vulnerability in Aficio SP 4210N firmware versions prior to Web Support 1.05 allows a remote authe…
-
High 7.2
Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenti…
-
High 7.8
Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure …
-
High 7.5
External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and e…
-
High 7.8
Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/o…
-
High 8.8
Hidden functionality vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier…
-
High 7.8
Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information dis…
-
Medium 6.1
Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript c…