İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2022: sömürülen ve yeni ciddi CVE kayıtları

104 kayıt · 18 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2021-24762
    65Bu hafta

    Perfect Survey < 1.5.2 - Unauthenticated SQL Injection

    KritikCVSS 9,8SilahlaştırılmışEPSS %86

    getperfectsurvey · perfect survey1 Şub 2022

  • CVE-2021-24926
    28İzleyin

    Domain Check < 1.0.17 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %12

    domaincheckplugin · domain check1 Şub 2022

  • CVE-2022-24218
    41Planlayın

    An issue in /admin/delete_image.php of eliteCMS v1.0 allows attackers to delete arbitrary files.

    KritikCVSS 9,1İstismar yokEPSS %16

    elitecms · elite cms1 Şub 2022

  • CVE-2022-24223
    58Planlayın

    AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %61

    thedigitalcraft · atomcms1 Şub 2022

  • CVE-2021-43062
    28İzleyin

    A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0.1 and 7.0.0, versio

    OrtaCVSS 6,1Kavram kanıtıEPSS %12

    fortinet · fortimail2 Şub 2022

  • CVE-2022-23833
    45Planlayın

    An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2.

    YüksekCVSS 7,5İstismar yokEPSS %49

    djangoproject · django2 Şub 2022

  • CVE-2022-23357
    42Planlayın

    mozilo2.0 was discovered to be vulnerable to directory traversal attacks via the parameter curent_dir.

    KritikCVSS 9,1İstismar yokEPSS %19

    mozilo · mozilocms2 Şub 2022

  • CVE-2022-24144
    45Planlayın

    Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting.

    KritikCVSS 9,8İstismar yokEPSS %18

    tenda · ax3 firmware3 Şub 2022

  • CVE-2022-24260
    54Planlayın

    A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level.

    KritikCVSS 9,8Kavram kanıtıEPSS %49

    voipmonitor · voipmonitor4 Şub 2022

  • CVE-2022-23329
    43Planlayın

    A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands via

    KritikCVSS 9,8İstismar yokEPSS %14

    ujcms · jspxcms4 Şub 2022

  • CVE-2022-0218
    44Planlayın

    WP HTML Mail <= 3.0.9 Missing Authorization on REST-API Route

    OrtaCVSS 6,1Kavram kanıtıEPSS %66

    codemiq · wordpress email template designer4 Şub 2022

  • CVE-2022-0437
    29İzleyin

    Cross-site Scripting (XSS) - DOM in karma-runner/karma

    OrtaCVSS 6,1Kavram kanıtıEPSS %15

    karma project · karma4 Şub 2022

  • CVE-2022-22831
    42Planlayın

    An issue was discovered in Servisnet Tessa 0.0.2.

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    servisnet · tessa6 Şub 2022

  • CVE-2022-22832
    43Planlayın

    An issue was discovered in Servisnet Tessa 0.0.2.

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    servisnet · tessa6 Şub 2022

  • CVE-2022-22833
    33İzleyin

    An issue was discovered in Servisnet Tessa 0.0.2.

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    servisnet · tessa6 Şub 2022

  • CVE-2021-25114
    64Bu hafta

    Paid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %81

    strangerstudios · paid memberships pro7 Şub 2022

  • CVE-2021-44864
    29İzleyin

    TP-Link WR886N 3.0 1.0.1 Build 150127 Rel.34123n is vulnerable to Buffer Overflow.

    OrtaCVSS 6,5İstismar yokEPSS %10

    tp-link · wn886n firmware8 Şub 2022

  • CVE-2022-24682
    63Bu hafta

    An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the w

    OrtaCVSS 6,1KEVSilahlaştırılmışEPSS %30

    synacor · zimbra collaboration suite9 Şub 2022

  • CVE-2021-46354
    34İzleyin

    Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the par

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    cybelesoft · thinfinity virtualui9 Şub 2022

  • CVE-2022-21971
    77Bu hafta

    Windows Runtime Remote Code Execution Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %53

    microsoft · windows 10 18099 Şub 2022

  • CVE-2022-21993
    43Planlayın

    Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %43

    microsoft · windows 109 Şub 2022

  • CVE-2022-21999
    73Bu hafta

    Windows Print Spooler Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %41

    microsoft · windows 10 15079 Şub 2022

  • CVE-2022-22005
    40Planlayın

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %16

    microsoft · sharepoint enterprise server9 Şub 2022

  • CVE-2022-22715
    35İzleyin

    Named Pipe File System Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %13

    microsoft · windows 109 Şub 2022

  • CVE-2022-22718
    67Bu hafta

    Windows Print Spooler Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %18

    microsoft · windows 10 15079 Şub 2022

  • CVE-2022-22536
    99Hemen

    SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %97

    sap · content server9 Şub 2022

  • CVE-2022-24313
    52Planlayın

    A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leadin

    KritikCVSS 9,8İstismar yokEPSS %44

    schneider-electric · interactive graphical scada system data server9 Şub 2022

  • CVE-2022-24314
    35İzleyin

    A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker

    YüksekCVSS 7,5İstismar yokEPSS %18

    schneider-electric · interactive graphical scada system data server9 Şub 2022

  • CVE-2022-24315
    36İzleyin

    A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted

    YüksekCVSS 7,5İstismar yokEPSS %19

    schneider-electric · interactive graphical scada system data server9 Şub 2022

  • CVE-2021-45901
    25İzleyin

    The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the usern

    OrtaCVSS 5,3Kavram kanıtıEPSS %14

    servicenow · servicenow10 Şub 2022

  • CVE-2022-20699
    91Hemen

    Cisco Small Business RV Series Routers Vulnerabilities

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %72

    cisco · rv340 firmware10 Şub 2022

  • CVE-2022-20700
    71Bu hafta

    Cisco Small Business RV Series Routers Vulnerabilities

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %5

    cisco · rv340 firmware10 Şub 2022

  • CVE-2022-20701
    64Bu hafta

    Cisco Small Business RV Series Routers Vulnerabilities

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %9

    cisco · rv340 firmware10 Şub 2022

  • CVE-2022-20703
    65Bu hafta

    Cisco Small Business RV Series Routers Vulnerabilities

    YüksekCVSS 8,0KEVSilahlaştırılmışEPSS %9

    cisco · rv340 firmware10 Şub 2022

  • CVE-2022-20705
    63Bu hafta

    Cisco Small Business RV Series Routers Vulnerabilities

    KritikCVSS 9,8SilahlaştırılmışEPSS %80

    cisco · rv340 firmware10 Şub 2022

  • CVE-2022-20707
    52Planlayın

    Cisco Small Business RV Series Routers Vulnerabilities

    YüksekCVSS 7,3SilahlaştırılmışEPSS %75

    cisco · rv340 firmware10 Şub 2022

  • CVE-2022-20708
    66Bu hafta

    Cisco Small Business RV Series Routers Vulnerabilities

    YüksekCVSS 8,0KEVSilahlaştırılmışEPSS %14

    cisco · rv340 firmware10 Şub 2022

  • CVE-2022-24954
    43Planlayın

    Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform colSpa

    KritikCVSS 9,8İstismar yokEPSS %11

    foxit · pdf reader10 Şub 2022

  • CVE-2022-0557
    43Planlayın

    OS Command Injection in microweber/microweber

    YüksekCVSS 7,2Kavram kanıtıEPSS %51

    microweber · microweber11 Şub 2022

  • CVE-2021-44521
    53Planlayın

    Remote code execution for scripted UDFs

    KritikCVSS 9,1Kavram kanıtıEPSS %57

    apache · cassandra11 Şub 2022

  • CVE-2022-24112
    98Hemen

    apisix/batch-requests plugin allows overwriting the X-REAL-IP header

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %96

    apache · apisix11 Şub 2022

  • CVE-2021-22802
    45Planlayın

    A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length

    KritikCVSS 9,8İstismar yokEPSS %20

    schneider-electric · interactive graphical scada system data collector11 Şub 2022

  • CVE-2021-22823
    42Planlayın

    A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of

    KritikCVSS 9,1İstismar yokEPSS %21

    schneider-electric · interactive graphical scada system data collector11 Şub 2022

  • CVE-2021-22824
    34İzleyin

    A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length che

    YüksekCVSS 7,5İstismar yokEPSS %14

    schneider-electric · interactive graphical scada system data collector11 Şub 2022

  • CVE-2021-31932
    45Planlayın

    Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass.

    KritikCVSS 9,8İstismar yokEPSS %21

    nokia · bts trs web console11 Şub 2022

  • CVE-2022-0185
    71Bu hafta

    A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux

    YüksekCVSS 8,4KEVSilahlaştırılmışEPSS %25

    linux · linux kernel11 Şub 2022

  • CVE-2021-4102
    67Bu hafta

    Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %7

    google · chrome11 Şub 2022

  • CVE-2022-0289
    43Planlayın

    Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via

    YüksekCVSS 8,8İstismar yokEPSS %27

    google · chrome11 Şub 2022

  • CVE-2022-0306
    61Bu hafta

    Heap buffer overflow in PDFium in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a

    YüksekCVSS 8,8İstismar yokEPSS %85

    google · chrome11 Şub 2022

  • CVE-2022-0572
    39İzleyin

    Heap-based Buffer Overflow in vim/vim

    YüksekCVSS 7,8İstismar yokEPSS %26

    vim · vim14 Şub 2022

  • CVE-2021-45420
    44Planlayın

    Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    emerson · dixell xweb-500 firmware14 Şub 2022

  • CVE-2021-45392
    34İzleyin

    A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4 function in page /goform/setIPv6Status via the

    YüksekCVSS 7,5İstismar yokEPSS %12

    tenda · ax12 firmware14 Şub 2022

  • CVE-2022-23389
    46Planlayın

    PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter.

    KritikCVSS 9,8İstismar yokEPSS %21

    publiccms · publiccms14 Şub 2022

  • CVE-2021-43734
    33İzleyin

    kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may lead to sensitive file leak on related host.

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    keking · kkfileview15 Şub 2022

  • CVE-2021-35380
    41Planlayın

    A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious u

    YüksekCVSS 7,5Kavram kanıtıEPSS %36

    solari · termtalk server15 Şub 2022

  • CVE-2022-25236
    50Planlayın

    xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.

    KritikCVSS 9,8Kavram kanıtıEPSS %35

    libexpat project · libexpat16 Şub 2022

  • CVE-2022-0513
    46Planlayın

    WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason

    YüksekCVSS 7,5İstismar yokEPSS %53

    veronalabs · wp statistics16 Şub 2022

  • CVE-2022-24086
    99Hemen

    Adobe Commerce checkout improper input validation leads to remote code execution

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    adobe · commerce16 Şub 2022

  • CVE-2021-3560
    68Bu hafta

    It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %23

    polkit project · polkit16 Şub 2022

  • CVE-2021-3781
    64Bu hafta

    A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted

    KritikCVSS 9,9İstismar yokEPSS %83

    artifex · ghostscript16 Şub 2022

  • CVE-2021-45382
    98Hemen

    A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    dlink · dir-820l firmware17 Şub 2022

  • CVE-2021-46314
    49Planlayın

    A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW

    KritikCVSS 9,8İstismar yokEPSS %33

    dlink · dir-846 firmware17 Şub 2022

  • CVE-2022-22916
    51Planlayın

    O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.

    KritikCVSS 9,8Kavram kanıtıEPSS %38

    zoneland · o2oa17 Şub 2022

  • CVE-2022-0666
    43Planlayın

    CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber

    YüksekCVSS 7,5Kavram kanıtıEPSS %44

    microweber · microweber18 Şub 2022

  • CVE-2022-0543
    100Hemen

    It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %99

    redis · redis18 Şub 2022

  • CVE-2022-23642
    57Planlayın

    Code Injection in Sourcegraph

    YüksekCVSS 8,8SilahlaştırılmışEPSS %74

    sourcegraph · sourcegraph18 Şub 2022

  • CVE-2022-23375
    41Planlayın

    WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability.

    YüksekCVSS 8,8İstismar yokEPSS %19

    wikidocs · wikidocs19 Şub 2022

  • CVE-2021-24867
    44Planlayın

    Backdoored Plugins & Themes from AccessPress Themes

    KritikCVSS 9,8İstismar yokEPSS %18

    accesspressthemes · accessbuddy21 Şub 2022

  • CVE-2021-44142
    57Planlayın

    The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and intero

    YüksekCVSS 8,8Kavram kanıtıEPSS %73

    samba · samba21 Şub 2022

  • CVE-2022-0564
    21İzleyin

    Qlik Sense Enterprise Domain User enumeration

    OrtaCVSS 5,3İstismar yokEPSS %1

    qlik · qlik sense21 Şub 2022

  • CVE-2022-24295
    40Planlayın

    Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection via a specially craft

    YüksekCVSS 8,8İstismar yokEPSS %16

    okta · advanced server access client for windows21 Şub 2022

  • CVE-2022-0714
    26İzleyin

    Heap-based Buffer Overflow in vim/vim

    OrtaCVSS 5,5İstismar yokEPSS %12

    vim · vim22 Şub 2022

  • CVE-2022-20623
    34İzleyin

    Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %11

    cisco · nx-os23 Şub 2022

  • CVE-2022-20624
    34İzleyin

    Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %12

    cisco · nx-os23 Şub 2022

  • CVE-2022-20650
    39İzleyin

    Cisco NX-OS Software NX-API Command Injection Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %14

    cisco · nx-os23 Şub 2022

  • CVE-2022-25329
    40Planlayın

    Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in

    KritikCVSS 9,8İstismar yokEPSS %2

    trendmicro · serverprotect23 Şub 2022

  • CVE-2020-27467
    35İzleyin

    A Directory Traversal vulnerability exits in Processwire CMS before 2.7.1 via the download parameter to index.php.

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    processwire · processwire24 Şub 2022

  • CVE-2021-44567
    46Planlayın

    An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsNote

    KritikCVSS 9,8Kavram kanıtıEPSS %23

    rosariosis · rosariosis24 Şub 2022

  • CVE-2021-44967
    39İzleyin

    A Remote Code Execution (RCE) vulnerabilty exists in LimeSurvey 5.2.4 via the upload and install plugins function, which could let a remote

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    limesurvey · limesurvey24 Şub 2022

  • CVE-2022-23176
    68Bu hafta

    WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged managemen

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %10

    watchguard · fireware24 Şub 2022

  • CVE-2022-25072
    43Planlayın

    TP-Link Archer A54 Archer A54(US)_V1_210111 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr().

    KritikCVSS 9,8İstismar yokEPSS %13

    tp-link · archer a54 firmware24 Şub 2022

  • CVE-2022-25073
    43Planlayın

    TL-WR841Nv14_US_0.9.1_4.18 routers were discovered to contain a stack overflow in the function dm_fillObjByStr().

    KritikCVSS 9,8İstismar yokEPSS %13

    tp-link · tl-wr841n firmware24 Şub 2022

  • CVE-2022-25074
    43Planlayın

    TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr().

    KritikCVSS 9,8İstismar yokEPSS %13

    tp-link · tl-wr902ac firmware24 Şub 2022

  • CVE-2022-25075
    56Planlayın

    TOTOLink A3000RU V5.9c.2280_B20180512 was discovered to contain a command injection vulnerability in the "Main" function.

    KritikCVSS 9,8İstismar yokEPSS %56

    totolink · a3000ru firmware24 Şub 2022

  • CVE-2022-25077
    48Planlayın

    TOTOLink A3100R V4.1.2cu.5050_B20200504 was discovered to contain a command injection vulnerability in the "Main" function.

    KritikCVSS 9,8İstismar yokEPSS %30

    totolink · a3100r firmware24 Şub 2022

  • CVE-2022-25082
    43Planlayın

    TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a command injection vulnerability in the "Main"

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    totolink · a950rg firmware24 Şub 2022

  • CVE-2022-25084
    46Planlayın

    TOTOLink T6 V5.9c.4085_B20190428 was discovered to contain a command injection vulnerability in the "Main" function.

    KritikCVSS 9,8İstismar yokEPSS %21

    totolink · t6 firmware24 Şub 2022

  • CVE-2022-25414
    42Planlayın

    Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the parameter NPTR.

    KritikCVSS 9,8İstismar yokEPSS %10

    tenda · ac9 firmware24 Şub 2022

  • CVE-2021-44532
    24İzleyin

    Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format.

    OrtaCVSS 5,3İstismar yokEPSS %10

    nodejs · node.js24 Şub 2022

  • CVE-2022-0651
    40Planlayın

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_type

    YüksekCVSS 7,5Kavram kanıtıEPSS %32

    veronalabs · wp statistics24 Şub 2022

  • CVE-2022-21824
    38İzleyin

    Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties

    YüksekCVSS 8,2İstismar yokEPSS %21

    nodejs · node.js24 Şub 2022

  • CVE-2022-25148
    63Bu hafta

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id

    KritikCVSS 9,8Kavram kanıtıEPSS %80

    veronalabs · wp statistics24 Şub 2022

  • CVE-2022-25149
    53Planlayın

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IP

    YüksekCVSS 7,5Kavram kanıtıEPSS %77

    veronalabs · wp statistics24 Şub 2022

  • CVE-2022-25305
    48Planlayın

    WP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via IP

    OrtaCVSS 6,1İstismar yokEPSS %78

    veronalabs · wp statistics24 Şub 2022

  • CVE-2021-44664
    39İzleyin

    An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileupload.php by uploading

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    xerte · xerte24 Şub 2022

  • CVE-2022-24288
    58Planlayın

    Apache Airflow: RCE in example DAGs

    YüksekCVSS 8,8Kavram kanıtıEPSS %77

    apache · airflow25 Şub 2022

  • CVE-2022-25060
    51Planlayın

    TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.

    KritikCVSS 9,8Kavram kanıtıEPSS %40

    tp-link · tl-wr840n firmware25 Şub 2022

  • CVE-2022-25061
    57Planlayın

    TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.

    KritikCVSS 9,8Kavram kanıtıEPSS %58

    tp-link · tl-wr840n firmware25 Şub 2022

  • CVE-2022-25064
    50Planlayın

    TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpAddr

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    tp-link · tl-wr840n firmware25 Şub 2022

  • CVE-2022-25094
    42Planlayın

    Home Owners Collection Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the parameter "cover

    YüksekCVSS 8,8İstismar yokEPSS %23

    home owners collection management system project · home owners collection management system25 Şub 2022