13 December 2022

15 results · Clear filters · Feed

• Critical 9.8
  CVE-2022-2660

  Delta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a hard-coded cryptographic …

  Delta Electronics Industrial Automation DIALink ICS / OT
  Dec 13, 2022
• Critical 9.8
  CVE-2022-2757

  Due to the lack of adequately implemented access-control rules, all versions Kingspan TMS300 CS are vulnerable to an at…

  Kingspan TMS300 CS
  Dec 13, 2022
• Critical 9.8
  CVE-2022-41653

  Daikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to an attacker obtaining user …

  Daikin SVMPC2 SVMPC1
  Dec 13, 2022
• Critical 9.8
  CVE-2022-46364 Public exploit

  Apache CXF SSRF Vulnerability

  A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. 

  Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  Dec 13, 2022
• Critical 9.9
  CVE-2022-41272 Public exploit

  An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined S…

  SAP NetWeaver Process Integration
  Dec 13, 2022
• Critical 9.4
  CVE-2022-41271

  An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver P…

  SAP NetWeaver Process Integration
  Dec 13, 2022
• Critical 9.9
  CVE-2022-41267

  SAP Business Objects Platform - versions 420, and 430, allows an attacker with normal BI user privileges to upload/repl…

  SAP BusinessObjects Business Intelligence Platform
  Dec 13, 2022
• Critical 9.8
  CVE-2022-4446

  PHP Remote File Inclusion in tsolucio/corebos

  PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0.

  tsolucio tsolucio/corebos
  Dec 13, 2022
• Critical 9.8
  CVE-2022-27518 Exploited Public exploit

  Unauthenticated remote arbitrary code execution

  Unauthenticated remote arbitrary code execution

  Citrix Citrix Gateway, Citrix ADC Network devices
  Dec 13, 2022

  KEV Dec 13, 2022
• Critical 9.8
  CVE-2022-46353

  A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…

  Siemens SCALANCE X204RNA (HSR) SCALANCE X204RNA EEC (HSR) SCALANCE X204RNA EEC (PRP/HSR) ICS / OT
  Dec 13, 2022
• Critical 9.8
  CVE-2022-46404

  A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 M…

  Dec 13, 2022
• Critical 9.8
  CVE-2022-45005

  IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the cmd_get_ping_output fun…

  Dec 13, 2022
• Critical 9.8
  CVE-2022-43724

  A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software transmits the database cr…

  Siemens SICAM PAS/PQS ICS / OT
  Dec 13, 2022
• Critical 9.8
  CVE-2022-20472

  In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This …

  Android
  Dec 13, 2022
• Critical 9.8
  CVE-2022-20473 Public exploit

  In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This …

  Android
  Dec 13, 2022