The archive.

CVE-2022-45506 · mitre

Tenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName.

CVE-2022-44938 · mitre

Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack.

EPSS 1%public exploit CVSS 9.8

CVE-2022-45026 · mitre

An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GF…

EPSS 1%public exploit CVSS 9.8

CVE-2022-45290 · mitre

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java.

EPSS 1%public exploit CVSS 9.1

CVE-2022-45550 · mitre

AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE).

CVE-2022-44371 · mitre

hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution (RCE).

CVE-2022-45145 · mitre

egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a…

CVE-2022-44351 · mitre

Skycaiji v2.5.1 was discovered to contain a deserialization vulnerability via /SkycaijiApp/admin/controller/Mystore.php.

EPSS 1.0%CVSS 9.8

CVE-2022-45010 · mitre

Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/e…

Teledyne FLIR1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2022-4364 · Teledyne FLIR AX8

Teledyne FLIR AX8 Web Service palette.php command injection

EPSS 4%public exploit CVSS 9.8

thorsten1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2022-4407 · thorsten thorsten/phpmyfaq

Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

EPSS 5%public exploit CVSS 9.8

Mingsoft1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2022-4375 · Mingsoft MCMS

Mingsoft MCMS list sql injection

snyk2 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2022-25912 · snyk

Remote Code Execution (RCE)

CVE-2022-24439 · snyk

Remote Code Execution (RCE)

EPSS 6%CVSS 9.8

bpampuch1 vulnerability on this pageMax CVSS 10.0Priority 56KEV 0

CVE-2022-46161 · bpampuch pdfmake

Code injection in pdfmake

EPSS 2%public exploit CVSS 10.0

Zabbix2 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2022-43515 · Zabbix Frontend

X-Forwarded-For header is active by default causes access to Zabbix sites in maintenance mode

EPSS 1%public exploit CVSS 9.8

CVE-2022-43516 · Zabbix Zabbix agent (MSI packages)

Zabbix Agent installer adds “allow all TCP any any” firewall rule

EPSS 1.0%public exploit CVSS 9.8

tenable1 vulnerability on this pageMax CVSS 10.0Priority 52KEV 0

CVE-2022-4390 · tenable

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers.

EPSS 1.0%public exploit CVSS 10.0

LinZhaoguan1 vulnerability on this pageMax CVSS 9.6Priority 49KEV 0

CVE-2022-4354 · LinZhaoguan pb-cms

LinZhaoguan pb-cms Message Board comment cross site scripting

EPSS 0.6%public exploit CVSS 9.6

YITH1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2022-45359 · YITH YITH WooCommerce Gift Cards

WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File Upload

EPSS 14%CVSS 9.8

PaddlePaddle2 vulnerabilities on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2022-46741 · PaddlePaddle PaddlePaddle

Out-of-bounds read in gather_tree in PaddlePaddle before 2.4.

EPSS 0.7%public exploit CVSS 9.1

CVE-2022-46742 · PaddlePaddle PaddlePaddle

Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.

EPSS 1%CVSS 10.0

fedora1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2022-4170 · fedora

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the dat…

brocade1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2022-33186 · brocade

A vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier versions could allow a remote unauthenticate…

codecentric1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2022-46166 · codecentric spring-boot-admin

Spring Boot Admins integrated notifier support allows arbitrary code execution

Shift Tech Inc.1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2022-42458 · Shift Tech Inc. bingo!CMS

Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a remote unauthenti…

ifm1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2022-3485 · ifm moneo appliance

Weak Password Recovery in ifm moneo appliance

EPSS 1.0%CVSS 9.8

Jenkins Project1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2022-46682 · Jenkins Project Jenkins Plot Plugin

Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

neutrinolabs10 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2022-23477 · neutrinolabs xrdp

Buffer Overflow in xrdp

CVE-2022-23479 · neutrinolabs xrdp

Buffer Overflow occurs in xrdp

CVE-2022-23480 · neutrinolabs xrdp

Buffer Overflow in xrdp

CVE-2022-23468 · neutrinolabs xrdp

Buffer Overflow in xrdp

CVE-2022-23478 · neutrinolabs xrdp

Out of Bound Write in xrdp