The archive.

CVE-2022-27140 · mitre

An arbitrary file upload vulnerability in the file upload module of express-fileupload 1.3.1 allows attackers to execute arbitrary code v…

CVE-2022-27260 · mitre

An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a…

CVE-2022-27263 · mitre

An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafte…

CVE-2022-28347 · mitre

A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4.

CVE-2022-28397 · mitre

An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to execute arbitrary code via a cr…

CVE-2022-26507 · mitre

A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7.

CVE-2022-27262 · mitre

An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a craft…

CVE-2022-27952 · mitre

An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a c…

CVE-2022-29080 · mitre

The npm-dependency-versions package through 0.3.0 for Node.js allows command injection if an attacker is able to call dependencyVersions…

CVE-2021-42136 · mitre

A stored Cross-Site Scripting (XSS) vulnerability in the Missing Data Codes functionality of REDCap before 11.4.0 allows remote attackers…

EPSS 5%CVSS 9.0

CVE-2022-27007 · mitre

nginx njs 0.7.2 is affected suffers from Use-after-free in njs_function_frame_alloc() when it try to invoke from a restored frame saved w…

CVE-2022-27161 · mitre

Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_viewUsers

CVE-2022-27472 · mitre

SQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands v…

CVE-2022-27473 · mitre

SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands…

CVE-2022-28034 · mitre

AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php

CVE-2022-28035 · mitre

Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php

CVE-2022-28036 · mitre

AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php

CVE-2022-27162 · mitre

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_editUser

CVE-2022-27163 · mitre

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUser

CVE-2022-27164 · mitre

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_viewUsers

CVE-2022-27165 · mitre

CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatus

Accusoft6 vulnerabilities on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2021-21942 · Accusoft ImageGear

An out-of-bounds write vulnerability exists in the TIFF YCbCr image parser functionality of Accusoft ImageGear 19.10.

CVE-2021-21914 · Accusoft ImageGear

A heap-based buffer overflow vulnerability exists in the DecoderStream::Append functionality of Accusoft ImageGear 19.10.

CVE-2021-21938 · Accusoft ImageGear

A heap-based buffer overflow vulnerability exists in the Palette box parser functionality of Accusoft ImageGear 19.10.

CVE-2021-21939 · Accusoft ImageGear

A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10.

CVE-2021-21943 · Accusoft ImageGear

A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10.

CVE-2021-21944 · Accusoft ImageGear

Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10.

EPSS 1%public exploit CVSS 9.8

vyperlang2 vulnerabilities on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2022-24845 · vyperlang vyper

Integer bounds error in Vyper

EPSS 1%public exploit CVSS 9.8

CVE-2022-24788 · vyperlang vyper

Buffer overflow in Vyper

EPSS 1.0%CVSS 9.8

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2021-31805 · Apache Software Foundation Apache Struts

Forced OGNL evaluation, when evaluated on raw not validated user input in tag attributes, may lead to RCE.

EPSS 85%CVSS 9.8

CVE-2022-27479 · Apache Software Foundation Apache Superset

SQL injection vulnerability in chart data API

nextcloud1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2022-24838 · nextcloud security-advisories

Command Injection in Appointment Emails for Nextcloud Calendar

EPSS 33%CVSS 9.8

Siemens2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2022-23450 · Siemens SIMATIC Energy Manager Basic

A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versi…

EPSS 36%CVSS 9.8

CVE-2022-25752 · Siemens SCALANCE X302-7 EEC (230V)

A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANC…

vmware2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2022-22956 · vmware

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework.

EPSS 50%CVSS 9.8

CVE-2022-22955 · vmware

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth2 ACS framework.

EPSS 8%CVSS 9.8

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2022-0142 · Unknown Visual Form Builder

Visual Form Builder < 3.0.6 - CSV Injection

Dell1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2022-22561 · Dell PowerScale OneFS

Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts.