Critical vulnerability archive — page 632

Atlassian2 vulnerabilities on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2022-26138 · Atlassian Questions For Confluence

Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability

KEV · due 19 Aug EPSS 98%public exploit SSVC act CVSS 9.8

CVE-2022-26136 · Atlassian Bamboo Server

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and thir…

EPSS 6%CVSS 9.8

Advantech iView2 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2022-2143 · Advantech iView iView

Advantech iView

EPSS 63%public exploit CVSS 9.8

CVE-2022-2139 · Advantech iView iView

Advantech iView

EPSS 16%CVSS 9.8

ABB1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2022-0902 · ABB RMC-100 (Standard)

ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root access

EPSS 17%CVSS 9.8

mitre12 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2022-36446 · mitre

software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.

EPSS 96%CVSS 9.8

CVE-2022-36450 · mitre

Obsidian 0.14.x and 0.15.x before 0.15.5 allows obsidian://hook-get-address remote code execution because window.open is used without che…

EPSS 21%CVSS 9.8

CVE-2022-34045 · mitre

Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_…

EPSS 3%CVSS 9.8

CVE-2022-34500 · mitre

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party.

EPSS 2%CVSS 9.8

CVE-2022-34981 · mitre

The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.

EPSS 2%CVSS 9.8

CVE-2022-34983 · mitre

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.

EPSS 2%CVSS 9.8

CVE-2022-34113 · mitre

An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafted plugin.

EPSS 1%CVSS 9.8

CVE-2022-34501 · mitre

The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party.

EPSS 1%CVSS 9.8

CVE-2022-34509 · mitre

The wikifaces package in PyPI v1.0 included a code execution backdoor inserted by a third party.

EPSS 1%CVSS 9.8

CVE-2022-34982 · mitre

The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party.

EPSS 1%CVSS 9.8

CVE-2022-34115 · mitre

DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId.

EPSS 1%CVSS 9.8

CVE-2022-36444 · mitre

An issue was discovered in Atos Unify OpenScape SBC 9 and 10 before 10R2.2.1, Atos Unify OpenScape Branch 9 and 10 before version 10R2.1.…

EPSS 1%CVSS 9.8

Mitsubishi Electric2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2022-33318 · Mitsubishi Electric GENESIS64

Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics D…

EPSS 50%CVSS 9.8

CVE-2022-33319 · Mitsubishi Electric GENESIS64

Out-of-bounds Read vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solution…

EPSS 2%CVSS 9.1

snyk14 vulnerabilities on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2022-25759 · snyk

Remote Code Injection

EPSS 12%CVSS 9.9

CVE-2020-28446 · snyk

Command Injection

EPSS 4%CVSS 9.8

CVE-2020-7677 · snyk

Arbitrary Code Execution

EPSS 2%CVSS 9.8

CVE-2020-28435 · snyk

Command Injection

EPSS 1%CVSS 9.8

CVE-2020-28438 · snyk

Command Injection

EPSS 1%CVSS 9.8

CVE-2020-28443 · snyk

Command Injection

EPSS 1%CVSS 9.8

CVE-2020-28445 · snyk

Command Injection

EPSS 2%CVSS 9.8

CVE-2020-28471 · snyk

Prototype Pollution

EPSS 1%CVSS 9.8

CVE-2020-28441 · snyk

Prototype Pollution

EPSS 1%CVSS 9.8

CVE-2020-28461 · snyk

Prototype Pollution

EPSS 1%CVSS 9.8

CVE-2020-7678 · snyk

Arbitrary Code Execution

EPSS 1%CVSS 9.8

CVE-2020-28436 · snyk

Command Injection

EPSS 1.0%CVSS 9.8

CVE-2020-28462 · snyk

Prototype Pollution

EPSS 0.9%CVSS 9.8

CVE-2021-23397 · snyk

Prototype Pollution

EPSS 0.8%CVSS 9.8

Osamaesh1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2022-33965 · Osamaesh WP Visitor Statistics (WordPress plugin)

WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities

EPSS 4%CVSS 9.8

Biplob Adhikari1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2022-33198 · Biplob Adhikari Accordions (WordPress plugin)

WordPress Accordions plugin <= 2.0.2 - Unauthenticated WordPress Options Change vulnerability

EPSS 3%CVSS 9.8

biplob0181 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2022-34487 · biplob018 Shortcode Addons (WordPress plugin)

WordPress Shortcode Addons plugin <= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerability

EPSS 3%CVSS 9.8

Cisco3 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2022-20857 · Cisco Cisco Nexus Dashboard

Cisco Nexus Dashboard Unauthorized Access Vulnerabilities

EPSS 2%CVSS 9.8

CVE-2022-20858 · Cisco Cisco Nexus Dashboard

Cisco Nexus Dashboard Unauthorized Access Vulnerabilities

EPSS 1%CVSS 9.8

CVE-2022-20861 · Cisco Cisco Nexus Dashboard

Cisco Nexus Dashboard Unauthorized Access Vulnerabilities

EPSS 0.6%CVSS 9.8

GiveWP1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2022-28700 · GiveWP GiveWP (WordPress plugin)

WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability

EPSS 2%CVSS 9.1

MiCODUS1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2022-2107 · MiCODUS MV720

ICSA-22-200-01 MiCODUS MV720 GPS tracker Use of Hard-coded Credentials

EPSS 1%CVSS 9.8

CodexShaper1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2022-34839 · CodexShaper WP OAuth2 Server (WordPress plugin)

WordPress WP OAuth2 Server plugin <= 1.0.1 - Authentication Bypass vulnerability

EPSS 1%CVSS 9.8

Dell1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2022-31234 · Dell PowerStore

Dell EMC PowerStore, contain(s) an Improper Restriction of Excessive Authentication Attempts Vulnerability in PowerStore Manager GUI.

EPSS 1%CVSS 9.8

Google4 vulnerabilities on this pageMax CVSS 9.6Priority 41KEV 0

CVE-2022-0973 · Google Chrome

Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption v…

EPSS 0.9%CVSS 9.6

CVE-2022-0977 · Google Chrome

Use after free in Browser UI in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage…

EPSS 1.0%CVSS 9.6

CVE-2022-1309 · Google Chrome

Insufficient policy enforcement in developer tools in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially perfo…

EPSS 0.9%CVSS 9.6

CVE-2022-1312 · Google Chrome

Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed an attacker who convinced a user to install a malicious extensi…

EPSS 0.6%CVSS 9.6

redhat1 vulnerability on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2022-0670 · redhat

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entir…

EPSS 1%CVSS 9.1

ALLNET Gmbh1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2022-34767 · ALLNET Gmbh ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan

ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan Authorization Bypass

EPSS 0.6%CVSS 9.8

WooPlugins.co1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2022-30998 · WooPlugins.co Homepage Product Organizer for WooCommerce (WordPress plugin)

WordPress Homepage Product Organizer for WooCommerce plugin <= 1.1 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities

EPSS 0.9%CVSS 9.1

The archive.