35,538 results · Clear filters · Feed
-
Unscored —
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability af…
-
High 7.5CVE-2022-24434 Public exploit
Denial of Service (DoS)
This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes.
-
Medium 6.6CVE-2022-29170 Public exploit
Grafana Enterprise datasource network restrictions bypass via HTTP redirects
Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, the Request security feature allows list allows to configure Grafana in a way so that the instance doesn’t call or only calls specific hosts. The vulnerability present…
-
Unscored —CVE-2022-31245 Public exploit
mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admi…
-
Unscored —
Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component…
-
High 7.5
Vulnerability in Oracle E-Business Suite (component: Manage Proxies). The supported version that is affected is 12.2. E…
-
Medium 5.3CVE-2022-22976 Public exploit
Integer overflow in BCrypt class in Spring Security
Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. When using the BCrypt class with the maximum work factor (31), the encoder does not perform any salt rounds, due t…
-
Critical 9.8
Authorization bypass in Spring Security
In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with `.` in the regular expression …
-
Critical 9.8CVE-2022-30600 Public exploit
Incorrect Calculation in moodle
A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed.
-
Unscored —CVE-2021-41946 Public exploit
In FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS) vulnerability in Parental Control --> Acces…
-
Medium 4.4CVE-2022-0486 Public exploit
Privileged Command Injection Vulnerability in Fidelis Network and Deception
Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected files and enable escalation of privileges equivalent t…
-
Low 3.9CVE-2022-0997 Public exploit
Local Privilege Escalation Vulnerability in Fidelis Network and Deception
Improper file permissions in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected script files, which could result in arbitrary commands being ru…
-
Unscored —CVE-2022-24611 Public exploit
Denial of Service (DoS) in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave 500 series allows local…
-
High 7.8CVE-2022-29581 Public exploit
Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege …
-
Unscored —
Fusion Builder < 3.6.2 - Unauthenticated SSRF
The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. This could b…
-
Unscored —
Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload
The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE
-
Unscored —CVE-2022-1051 Public exploit
WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fields
The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not sanitise and escape the city, phone or profile credentials fields when outputting it in the profile page, allowing any authenticated user to per…
-
Unscored —CVE-2022-1679 Public exploit
A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9…
-
Unscored —CVE-2022-29622 Public exploit
An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted fi…
-
High 7.5
Shell command injection in gitea
Gitea before 1.16.7 does not escape git fetch remote.
-
Unscored —
WAVLINK WN535 G3 was discovered to contain a cross-site scripting (XSS) vulnerability via the hostname parameter at /cg…
-
Unscored —
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via US…
-
Unscored —CVE-2022-27134 Public exploit
EOSIO batdappboomx v327c04cf has an Access-control vulnerability in the `transfer` function of the smart contract which…
-
Medium 6.5CVE-2022-22971 Public exploit
Allocation of Resources Without Limits or Throttling in Spring Framework
In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.
-
High 7.5CVE-2022-22970 Public exploit
Denial of service in Spring Framework
In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.
-
High 7.8CVE-2021-26258 Public exploit
Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4.3337.0 may allow an auth…
-
Critical 9.8
SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
KEV Jul 13, 2023 -
Unscored —
SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.
-
Critical 9.8
A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pa…
KEV May 16, 2022 -
High 7.5
EncryptInterceptor does not provide complete protection on insecure networks
The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While th…
-
Unscored —CVE-2022-30594 Public exploit
The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass in…
-
Unscored —CVE-2022-30592 Public exploit
liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY.
-
Unscored —CVE-2022-30040 Public exploit
Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystime…
-
Unscored —CVE-2022-28078 Public exploit
Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in …
-
Unscored —CVE-2022-28077 Public exploit
Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in …
-
Unscored —CVE-2022-29932 Public exploit
The HTTP Server in PRIMEUR SPAZIO 2.5.1.954 (File Transfer) allows an unauthenticated attacker to obtain sensitive data…
-
Unscored —
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Manage…
-
Unscored —CVE-2022-29008 Public exploit
An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 all…
-
Unscored —
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop M…
-
Unscored —
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Managem…