13 December 2022

9 results · Clear filters · Feed

• Critical 9.8
  CVE-2022-46364 Public exploit

  Apache CXF SSRF Vulnerability

  A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. 

  Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  Dec 13, 2022
• Critical 9.9
  CVE-2022-41272 Public exploit

  An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined S…

  SAP NetWeaver Process Integration
  Dec 13, 2022
• Critical 9.8
  CVE-2022-27518 Exploited Public exploit

  Unauthenticated remote arbitrary code execution

  Unauthenticated remote arbitrary code execution

  Citrix Citrix Gateway, Citrix ADC Network devices
  Dec 13, 2022

  KEV Dec 13, 2022
• Medium 6.1
  CVE-2022-46381 Public exploit Scanner template

  Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_templa…

  Dec 13, 2022
• High 7.5
  CVE-2022-45688 Public exploit

  json stack overflow vulnerability

  A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.

  cn.hutool:hutool-json org.json:json Maven
  Dec 13, 2022
• High 7.8
  CVE-2022-44666 Public exploit EPSS 41%

  Windows Contacts Remote Code Execution Vulnerability

  Windows Contacts Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Dec 13, 2022
• High 7.8
  CVE-2022-20470 Public exploit

  In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch du…

  android-platform-frameworks-base android-framework-23 Android Ubuntu
  Dec 13, 2022
• High 7.8
  CVE-2022-20474 Public exploit

  In readLazyValue of Parcel.java, there is a possible loading of arbitrary code into the System Settings app due to a co…

  android-platform-frameworks-base Android Ubuntu
  Dec 13, 2022
• Critical 9.8
  CVE-2022-20473 Public exploit

  In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This …

  Android
  Dec 13, 2022