by Kastro CVE-2022-31199 · Netwrix Auditor
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 605 of 786
Netwrix
mitre
CVE-2022-40797 · mitre
Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDEN_UPLOADS value in conf.json only blocks…
CVE-2022-44797 · mitre
btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking.
CVE-2022-43303 · mitre
The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-43304 · mitre
The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-43305 · mitre
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-44048 · mitre
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-44049 · mitre
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-44050 · mitre
The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-44051 · mitre
The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-44052 · mitre
The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-44054 · mitre
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-44053 · mitre
The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-43058 · mitre
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//clas…
CVE-2022-44796 · mitre
An issue was discovered in Object First Ootbi BETA build 1.0.7.712.
Unknown
CVE-2022-3481 · Unknown WooCommerce Dropshipping
WooCommerce Dropshipping < 4.4 - Unauthenticated SQLi
CVE-2022-3463 · Unknown Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms
FluentForm < 4.3.13 - CSV Injection
GitLab
Apache Software Foundation
CVE-2022-42920 · Apache Software Foundation Apache Commons BCEL
Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing
CVE-2022-37865 · Apache Software Foundation Apache Ivy
Apache Ivy allows creating/overwriting any file on the system
Siemens
CVE-2022-43439 · Siemens POWER METER SICAM Q100
A vulnerability has been identified in POWER METER SICAM Q100 (7KG9501-0AA01-0AA1) (All versions < V2.50), POWER METER SICAM Q100 (7KG950…
CVE-2022-43545 · Siemens POWER METER SICAM Q100
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWE…
CVE-2022-43546 · Siemens POWER METER SICAM Q100
A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWE…
CVE-2022-44457 · Siemens Mendix SAML (Mendix 7 compatible)
A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 7 compatible) (All…
NEC Corporation
CVE-2022-34822 · NEC Corporation CLUSTERPRO X
Path traversal vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0…
CVE-2022-34823 · NEC Corporation CLUSTERPRO X
Buffer overflow vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0…
CVE-2022-34824 · NEC Corporation CLUSTERPRO X
Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier,…
CVE-2022-34825 · NEC Corporation CLUSTERPRO X
Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X…
Citrix
CVE-2022-27510 · Citrix Citrix Gateway, Citrix ADC
Unauthorized access to Gateway user capabilities
CVE-2022-27516 · Citrix Citrix Gateway, Citrix ADC
User login brute force protection functionality bypass
CVE-2022-27513 · Citrix Citrix Gateway, Citrix ADC
Remote desktop takeover via phishing
grafana
Mitsubishi Electric Corporation
CVE-2022-33321 · Mitsubishi Electric Corporation PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE PV-DR006L-SET-M
Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi E…
SAP SE
CVE-2022-41203 · SAP SE SAP BusinessObjects Business Intelligence Platform (Central Management Console and BI Launchpad)
In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated attacker with low pri…
vmware
CVE-2022-31685 · vmware
VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability.
CVE-2022-31686 · vmware
VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability.
CVE-2022-31687 · vmware
VMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability.
CVE-2022-31689 · vmware
VMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability.
Activity Log Team
CVE-2022-27858 · Activity Log Team Activity Log (WordPress plugin)
WordPress Activity Log plugin <= 2.8.3 - CSV Injection vulnerability
symantec
Huawei
CVE-2022-44558 · Huawei HarmonyOS
The AMS module has a vulnerability of serialization/deserialization mismatch.
CVE-2022-44559 · Huawei HarmonyOS
The AMS module has a vulnerability of serialization/deserialization mismatch.
CVE-2022-44562 · Huawei HarmonyOS
The system framework layer has a vulnerability of serialization/deserialization mismatch.
CVE-2021-46851 · Huawei HarmonyOS
The DRM module has a vulnerability in verifying the secure memory attributes.
CVE-2022-44551 · Huawei HarmonyOS
The iaware module has a vulnerability in thread security.
Samsung Mobile
CVE-2022-39881 · Samsung Mobile Samsung Mobile Devices
Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to…
CVE-2022-39892 · Samsung Mobile Samsung Pass