The archive.

CVE-2022-44089 · mitre

ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component IS_GETCACHE.

CVE-2022-45062 · mitre

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper.

CVE-2022-37109 · mitre

patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control.

EPSS 49%CVSS 9.8

CVE-2022-43671 · mitre

Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection.

EPSS 75%CVSS 9.8

CVE-2022-43672 · mitre

Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection (in a di…

EPSS 68%CVSS 9.8

CVE-2022-45063 · mitre

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execu…

EPSS 7%CVSS 9.8

CVE-2022-44727 · mitre

The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).

EPSS 3%CVSS 9.1

CVE-2022-38650 · mitre

A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6.

EPSS 1.0%CVSS 10.0

CVE-2022-43074 · mitre

AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php.

CVE-2022-43294 · mitre

Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via the ClientPortPtr parameter…

CVE-2022-45182 · mitre

Pi-Star_DV_Dash (for Pi-Star DV) before 5aa194d mishandles the module parameter.

CVE-2022-38651 · mitre

A security filter misconfiguration exists in VMware Hyperic Server 5.8.6.

EPSS 0.9%CVSS 9.8

CVE-2022-38652 · mitre

A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6.

EPSS 0.9%CVSS 9.9

CVE-2022-42984 · mitre

WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f…

EPSS 0.9%CVSS 9.8

tagDiv1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2022-3477 · tagDiv tagDiv Composer

tagDiv Composer < 3.5 - Unauthenticated Account Takeover

EPSS 5%public exploit CVSS 9.8

kareadita2 vulnerabilities on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2022-3993 · kareadita kareadita/kavita

Improper Restriction of Excessive Authentication Attempts in kareadita/kavita

CVE-2022-3945 · kareadita kareadita/kavita

Improper Restriction of Excessive Authentication Attempts in kareadita/kavita

EPSS 1%public exploit CVSS 9.4

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2022-3574 · Unknown WPForms Pro

WPForms Pro < 1.7.7 - CSV Injection

ikus0601 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2022-3362 · ikus060 ikus060/rdiffweb

Insufficient Session Expiration in ikus060/rdiffweb

EPSS 1%public exploit CVSS 9.8

eolinker2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2022-3947 · eolinker goku_lite

eolinker goku_lite list sql injection

EPSS 1.0%public exploit CVSS 9.8

CVE-2022-3948 · eolinker goku_lite

eolinker goku_lite getList sql injection

EPSS 0.9%public exploit CVSS 9.8

tholum1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2022-3955 · tholum crm42

tholum crm42 Login class.user.php sql injection

EPSS 0.9%public exploit CVSS 9.8

tsruban1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2022-3956 · tsruban HHIMS

tsruban HHIMS Patient Portrait sql injection

EPSS 0.9%public exploit CVSS 9.8

Pingkon2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2022-3972 · Pingkon HMS-PHP

Pingkon HMS-PHP adminlogin.php sql injection

EPSS 0.8%public exploit CVSS 9.8

CVE-2022-3973 · Pingkon HMS-PHP

Pingkon HMS-PHP Data Pump Metadata admin.php sql injection

EPSS 0.8%public exploit CVSS 9.8

Accusoft1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2022-32588 · Accusoft ImageGear

An out-of-bounds write vulnerability exists in the PICT parsing pctwread_14841 functionality of Accusoft ImageGear 20.0.

EPSS 0.7%public exploit CVSS 9.8

parse-community3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2022-39396 · parse-community parse-server

Parse Server vulnerable to Remote Code Execution via prototype pollution in MongoDB BSON parser

EPSS 39%CVSS 9.8

CVE-2022-41878 · parse-community parse-server

Parse Server Prototype pollution and Injection via Cloud Code Webhooks or Cloud Code Triggers

CVE-2022-41879 · parse-community parse-server

Parse Server subject to Prototype pollution via Cloud Code Webhooks

EPSS 1.0%CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2022-45136 · Apache Software Foundation Apache Jena SDB

Apache Jena SDB allows arbitrary deserialisation via JDBC

EPSS 2%CVSS 9.8

Facebook1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2022-36938 · Facebook Redex

DexLoader function get_stringidx_fromdex() in Redex prior to commit 3b44c64 can load an out of bound address when loading the string inde…

EPSS 2%CVSS 9.8

FLOWRING1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2022-39036 · FLOWRING Agentflow BPM

FLOWRING Agentflow BPM - Arbitrary File Upload

EPSS 2%CVSS 9.8

go-vela1 vulnerability on this pageMax CVSS 9.9Priority 44KEV 0

CVE-2022-39395 · go-vela server

Vela Insecure Defaults

EPSS 1%CVSS 9.9

POWERCOM CO., LTD.1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2022-38119 · POWERCOM CO., LTD. UPSMON PRO

POWERCOM CO., LTD. UPSMON PRO - Broken Authentication

Wiesemann & Theis1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2022-42785 · Wiesemann & Theis Com-Server LC

Wiesemann & Theis: Authentication bypass in Com-Server family

WAGO2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2021-34566 · WAGO 750-81xx/xxx-xxxFW

WAGO I/O-Check Service prone to Memory Overflow

EPSS 1%CVSS 9.1

CVE-2021-34569 · WAGO 750-81xx/xxx-xxxFW

WAGO I/O-Check Service prone to Out-of-bounds Write

EPSS 1.0%CVSS 9.8

lanyulei2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2022-3940 · lanyulei ferry

lanyulei ferry task.go path traversal

EPSS 0.8%CVSS 9.8

CVE-2022-3939 · lanyulei ferry

lanyulei ferry API file.go path traversal

archesproject1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2022-41892 · archesproject arches

Arches vulnerable to SQL Injection

ETIC Telecom2 vulnerabilities on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2022-40981 · ETIC Telecom Remote Access Server (RAS)

ETIC Telecom Remote Access Server Unrestricted Upload of File with Dangerous Type

EPSS 0.6%CVSS 10.0

CVE-2022-3703 · ETIC Telecom Remote Access Server (RAS)

ETIC Telecom Remote Access Server Insufficient Verification of Data Authenticity

EPSS 0.4%CVSS 10.0

InHand Networks1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2022-25932 · InHand Networks InRouter302

The firmware of InHand Networks InRouter302 V3.5.45 introduces fixes for TALOS-2022-1472 and TALOS-2022-1474.

intel3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2022-26845 · intel

Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may…