İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2022: sömürülen ve yeni ciddi CVE kayıtları

125 kayıt · 9 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2022-25647
    34İzleyin

    Deserialization of Untrusted Data

    YüksekCVSS 7,5İstismar yokEPSS %12

    google · gson1 May 2022

  • CVE-2021-40822
    36İzleyin

    GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host.

    YüksekCVSS 7,5Kavram kanıtıEPSS %19

    osgeo · geoserver1 May 2022

  • CVE-2022-28054
    49Planlayın

    Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via

    KritikCVSS 9,8İstismar yokEPSS %31

    vandyke · vshell2 May 2022

  • CVE-2022-28573
    47Planlayın

    D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting.

    KritikCVSS 9,8İstismar yokEPSS %28

    dlink · dir-823 pro firmware2 May 2022

  • CVE-2022-0773
    52Planlayın

    Documentor <= 1.5.3 - Unauthenticated SQLi

    KritikCVSS 9,8Kavram kanıtıEPSS %43

    documentor project · documentor2 May 2022

  • CVE-2022-0952
    38İzleyin

    Sitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    sitemap project · sitemap2 May 2022

  • CVE-2022-1281
    52Planlayın

    Photo Gallery < 1.6.3 - Unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %43

    10web · photo gallery2 May 2022

  • CVE-2022-1366
    45Planlayın

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx.

    KritikCVSS 9,8İstismar yokEPSS %19

    deltaww · diaenergie2 May 2022

  • CVE-2022-1367
    45Planlayın

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx.

    KritikCVSS 9,8İstismar yokEPSS %19

    deltaww · diaenergie2 May 2022

  • CVE-2022-1378
    45Planlayın

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx.

    KritikCVSS 9,8İstismar yokEPSS %19

    deltaww · diaenergie2 May 2022

  • CVE-2022-20759
    44Planlayın

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %28

    cisco · secure firewall threat defense3 May 2022

  • CVE-2021-42165
    39İzleyin

    MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing command "deviceinfo s

    YüksekCVSS 8,8Kavram kanıtıEPSS %14

    mitrastar · gpt-2541gnac-n1 firmware3 May 2022

  • CVE-2022-28590
    35İzleyin

    A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme.

    YüksekCVSS 7,2Kavram kanıtıEPSS %23

    pixelimity · pixelimity3 May 2022

  • CVE-2022-28561
    42Planlayın

    There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21_cn router.

    KritikCVSS 9,8İstismar yokEPSS %10

    tenda · ax12 firmware3 May 2022

  • CVE-2022-1292
    54Planlayın

    The c_rehash script allows command injection

    YüksekCVSS 7,3Kavram kanıtıEPSS %82

    siemens · brownfield connectivity gateway3 May 2022

  • CVE-2021-43164
    46Planlayın

    A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55

    YüksekCVSS 8,8Kavram kanıtıEPSS %35

    ruijienetworks · reyeeos3 May 2022

  • CVE-2021-42192
    38İzleyin

    Konga v0.14.9 is affected by an incorrect access control vulnerability where a specially crafted request can lead to privilege escalation.

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    konga project · konga4 May 2022

  • CVE-2022-28096
    34İzleyin

    Skycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via /SkycaijiApp/admin/controller/Develop.php.

    YüksekCVSS 7,2İstismar yokEPSS %20

    skycaiji · skycaiji4 May 2022

  • CVE-2022-28557
    46Planlayın

    There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin dev

    KritikCVSS 9,8İstismar yokEPSS %22

    tenda · ac15 firmware4 May 2022

  • CVE-2022-20777
    42Planlayın

    Cisco Enterprise NFV Infrastructure Software Vulnerabilities

    KritikCVSS 9,9İstismar yokEPSS %11

    cisco · enterprise nfv infrastructure software4 May 2022

  • CVE-2022-20779
    38İzleyin

    Cisco Enterprise NFV Infrastructure Software Vulnerabilities

    YüksekCVSS 8,8İstismar yokEPSS %10

    cisco · enterprise nfv infrastructure software4 May 2022

  • CVE-2022-20780
    32İzleyin

    Cisco Enterprise NFV Infrastructure Software Vulnerabilities

    YüksekCVSS 7,4İstismar yokEPSS %11

    cisco · enterprise nfv infrastructure software4 May 2022

  • CVE-2022-29155
    58Planlayın

    In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, vi

    KritikCVSS 9,8İstismar yokEPSS %64

    openldap · openldap4 May 2022

  • CVE-2022-1388
    99Hemen

    On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    f5 · big-ip access policy manager5 May 2022

  • CVE-2022-28079
    44Planlayın

    College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.

    YüksekCVSS 8,8Kavram kanıtıEPSS %28

    college management system project · college management system5 May 2022

  • CVE-2022-28080
    52Planlayın

    Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter.

    YüksekCVSS 8,8Kavram kanıtıEPSS %56

    event management system project · event management system5 May 2022

  • CVE-2022-29592
    45Planlayın

    Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route).

    KritikCVSS 9,8İstismar yokEPSS %20

    tenda · tx9 pro firmware5 May 2022

  • CVE-2022-29535
    67Bu hafta

    Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports.

    KritikCVSS 9,8İstismar yokEPSS %91

    zohocorp · manageengine opmanager5 May 2022

  • CVE-2022-30295
    29İzleyin

    uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning.

    OrtaCVSS 6,5İstismar yokEPSS %11

    uclibc · uclibc6 May 2022

  • CVE-2020-19213
    44Planlayın

    SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories.

    KritikCVSS 9,8İstismar yokEPSS %15

    piwigo · piwigo6 May 2022

  • CVE-2022-30333
    90Hemen

    RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonst

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99

    rarlab · unrar9 May 2022

  • CVE-2022-30286
    34İzleyin

    pyscriptjs (aka PyScript Demonstrator) in PyScript through 2022-05-04 allows a remote user to read Python source code.

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    pyscript · pyscript9 May 2022

  • CVE-2022-0592
    42Planlayın

    MapSVG < 6.2.20 - Unauthenticated SQLi

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    mapsvg · mapsvg9 May 2022

  • CVE-2022-0817
    42Planlayın

    BadgeOS <= 3.7.0 - Unauthenticated SQLi

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    badgeos · badgeos9 May 2022

  • CVE-2022-1104
    36İzleyin

    Popup Maker < 1.16.5 - Admin+ Stored Cross-Site Scripting

    OrtaCVSS 4,8Kavram kanıtıEPSS %56

    code-atlantic · popup maker9 May 2022

  • CVE-2022-29933
    36İzleyin

    Craft CMS through 3.7.36 allows a remote unauthenticated attacker, who knows at least one valid username, to reset the account's password an

    YüksekCVSS 8,8İstismar yokEPSS %4

    craftcms · craft cms9 May 2022

  • CVE-2022-29322
    44Planlayın

    D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip.

    KritikCVSS 9,8İstismar yokEPSS %16

    dlink · dir-816 firmware10 May 2022

  • CVE-2022-29328
    43Planlayın

    D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a stack overflow via the function checkvalidupgrade.

    KritikCVSS 9,8İstismar yokEPSS %13

    dlink · dap-1330 firmware10 May 2022

  • CVE-2022-29329
    43Planlayın

    D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a heap overflow via the devicename parameter in /goform/setDeviceSettings.

    KritikCVSS 9,8İstismar yokEPSS %13

    dlink · dap-1330 firmware10 May 2022

  • CVE-2022-23676
    46Planlayın

    A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versi

    KritikCVSS 9,8İstismar yokEPSS %22

    arubanetworks · 5406r firmware10 May 2022

  • CVE-2022-23677
    38İzleyin

    A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versi

    YüksekCVSS 8,1İstismar yokEPSS %20

    arubanetworks · 5406r firmware10 May 2022

  • CVE-2022-1476
    40Planlayın

    All-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts

    OrtaCVSS 6,5İstismar yokEPSS %46

    servmask · all-in-one wp migration10 May 2022

  • CVE-2022-21972
    56Planlayın

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %79

    microsoft · windows 1010 May 2022

  • CVE-2022-22017
    46Planlayın

    Remote Desktop Client Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %37

    microsoft · remote desktop client10 May 2022

  • CVE-2022-23270
    53Planlayın

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

    YüksekCVSS 8,1Kavram kanıtıEPSS %70

    microsoft · windows 1010 May 2022

  • CVE-2022-26923
    90Hemen

    Active Directory Domain Services Elevation of Privilege Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %83

    microsoft · windows 10 150710 May 2022

  • CVE-2022-26925
    60Bu hafta

    Windows LSA Spoofing Vulnerability

    OrtaCVSS 5,9KEVSilahlaştırılmışEPSS %10

    microsoft · windows 10 150710 May 2022

  • CVE-2022-26937
    62Bu hafta

    Windows Network File System Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %75

    microsoft · windows server10 May 2022

  • CVE-2022-29104
    35İzleyin

    Windows Print Spooler Elevation of Privilege Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %11

    microsoft · windows 1010 May 2022

  • CVE-2022-29108
    38İzleyin

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %11

    microsoft · sharepoint enterprise server10 May 2022

  • CVE-2022-30129
    47Planlayın

    Visual Studio Code Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %41

    microsoft · visual studio code10 May 2022

  • CVE-2022-29006
    45Planlayın

    Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allow

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    phpgurukul · directory management system11 May 2022

  • CVE-2022-29007
    45Planlayın

    Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    phpgurukul · dairy farm shop management system11 May 2022

  • CVE-2022-29009
    46Planlayın

    Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    phpgurukul · cyber cafe management system11 May 2022

  • CVE-2022-24102
    35İzleyin

    Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %12

    adobe · acrobat dc11 May 2022

  • CVE-2022-24104
    34İzleyin

    Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %11

    adobe · acrobat dc11 May 2022

  • CVE-2022-27785
    35İzleyin

    Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %12

    adobe · acrobat dc11 May 2022

  • CVE-2022-27786
    35İzleyin

    Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %12

    adobe · acrobat dc11 May 2022

  • CVE-2022-27787
    34İzleyin

    Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %10

    adobe · acrobat dc11 May 2022

  • CVE-2022-27790
    35İzleyin

    Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %11

    adobe · acrobat dc11 May 2022

  • CVE-2022-27791
    36İzleyin

    Adobe Acrobat Reader DC Font Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %17

    adobe · acrobat dc11 May 2022

  • CVE-2022-27794
    35İzleyin

    Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %14

    adobe · acrobat dc11 May 2022

  • CVE-2022-27796
    35İzleyin

    Adobe Acrobat Reader DC AcroForm isBoxChecked Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %12

    adobe · acrobat dc11 May 2022

  • CVE-2022-27799
    37İzleyin

    Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %18

    adobe · acrobat dc11 May 2022

  • CVE-2022-28230
    35İzleyin

    Adobe Acrobat Reader DC AcroForm calculateNow Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %12

    adobe · acrobat dc11 May 2022

  • CVE-2022-28232
    35İzleyin

    Adobe Acrobat Reader DC Collab Object Use-After-Free Information Disclosure Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %12

    adobe · acrobat dc11 May 2022

  • CVE-2022-28233
    35İzleyin

    Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %12

    adobe · acrobat dc11 May 2022

  • CVE-2022-28236
    34İzleyin

    Adobe Acrobat Reader DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %11

    adobe · acrobat dc11 May 2022

  • CVE-2022-28238
    35İzleyin

    Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %11

    adobe · acrobat dc11 May 2022

  • CVE-2022-28240
    35İzleyin

    Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %12

    adobe · acrobat dc11 May 2022

  • CVE-2022-28243
    34İzleyin

    Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %10

    adobe · acrobat dc11 May 2022

  • CVE-2022-28246
    25İzleyin

    Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

    OrtaCVSS 5,5İstismar yokEPSS %10

    adobe · acrobat dc11 May 2022

  • CVE-2022-28258
    25İzleyin

    Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability

    OrtaCVSS 5,5İstismar yokEPSS %10

    adobe · acrobat dc11 May 2022

  • CVE-2022-28269
    16İzleyin

    Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability

    DüşükCVSS 3,3İstismar yokEPSS %10

    adobe · acrobat dc11 May 2022

  • CVE-2022-29845
    40Planlayın

    In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction t

    OrtaCVSS 6,5SilahlaştırılmışEPSS %4

    progress · whatsup gold11 May 2022

  • CVE-2022-29846
    60Bu hafta

    In Progress Ipswitch WhatsUp Gold 16.1 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to obtain the WhatsUp Gold

    OrtaCVSS 5,3SilahlaştırılmışEPSS %5

    progress · whatsup gold11 May 2022

  • CVE-2022-29847
    60Bu hafta

    In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transac

    YüksekCVSS 7,5SilahlaştırılmışEPSS %57

    progress · whatsup gold11 May 2022

  • CVE-2022-29848
    40Planlayın

    In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction t

    OrtaCVSS 6,5SilahlaştırılmışEPSS %3

    progress · whatsup gold11 May 2022

  • CVE-2022-30453
    44Planlayın

    ShopWind <= 3.4.2 has a RCE vulnerability in Database.php

    KritikCVSS 9,8İstismar yokEPSS %15

    shopwind · shopwind11 May 2022

  • CVE-2022-30063
    44Planlayın

    ftcms <=2.1 was discovered to be vulnerable to code execution attacks .

    KritikCVSS 9,8İstismar yokEPSS %17

    ftcms · ftcms11 May 2022

  • CVE-2022-30450
    45Planlayın

    A Remote Code Execution (RCE) vulnerability exists in waimairen 9.1 via wx.php

    KritikCVSS 9,8İstismar yokEPSS %21

    waimairencms project · waimairencms11 May 2022

  • CVE-2022-29885
    52Planlayın

    EncryptInterceptor does not provide complete protection on insecure networks

    YüksekCVSS 7,5Kavram kanıtıEPSS %73

    apache · tomcat12 May 2022

  • CVE-2022-30525
    99Hemen

    A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 f

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    zyxel · usg flex 100w firmware12 May 2022

  • CVE-2022-29298
    44Planlayın

    SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.

    YüksekCVSS 7,5Kavram kanıtıEPSS %46

    contec · sv-cpt-mc310 firmware12 May 2022

  • CVE-2022-29303
    98Hemen

    SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    contec · sv-cpt-mc310 firmware12 May 2022

  • CVE-2022-29307
    44Planlayın

    IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/lang

    KritikCVSS 9,8İstismar yokEPSS %18

    ionizecms · ionize12 May 2022

  • CVE-2022-26085
    39İzleyin

    An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4.

    YüksekCVSS 8,8İstismar yokEPSS %12

    inhandnetworks · ir302 firmware12 May 2022

  • CVE-2022-28818
    37İzleyin

    ColdFusion Reflected Cross-Site Scripting could lead to Arbitrary Code Execution

    OrtaCVSS 6,1İstismar yokEPSS %44

    adobe · coldfusion12 May 2022

  • CVE-2022-29383
    54Planlayın

    NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainnam

    KritikCVSS 9,8Kavram kanıtıEPSS %48

    netgear · ssl312 firmware13 May 2022

  • CVE-2022-30781
    60Bu hafta

    Gitea before 1.16.7 does not escape git fetch remote.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %87

    gitea · gitea16 May 2022

  • CVE-2022-30011
    45Planlayın

    In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %18

    hospital management system project · hospital management system16 May 2022

  • CVE-2022-0867
    43Planlayın

    ARPrice Lite < 3.6.1 - Unauthenticated SQLi

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    reputeinfosystems · pricing table16 May 2022

  • CVE-2022-1103
    40Planlayın

    Advanced Uploader <= 4.2 - Subscriber+ Arbitrary File Upload

    YüksekCVSS 8,8Kavram kanıtıEPSS %15

    advanced uploader project · advanced uploader16 May 2022

  • CVE-2022-1386
    60Bu hafta

    Fusion Builder < 3.6.2 - Unauthenticated SSRF

    KritikCVSS 9,8Kavram kanıtıEPSS %71

    fusion builder project · fusion builder16 May 2022

  • CVE-2022-30956
    43Planlayın

    Jenkins Rundeck Plugin 3.6.10 and earlier does not restrict URL schemes in Rundeck webhook submissions, resulting in a stored cross-site scr

    OrtaCVSS 5,4İstismar yokEPSS %73

    jenkins · rundeck17 May 2022

  • CVE-2022-24108
    49Planlayın

    The Skyoftech So Listing Tabs module 2.2.0 for OpenCart allows a remote attacker to inject a serialized PHP object via the setting parameter

    KritikCVSS 9,8İstismar yokEPSS %32

    skyoftech · so listing tabs17 May 2022

  • CVE-2022-24856
    33İzleyin

    Server-Side Request Forgery in FlyteConsole

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    flyte · flyte console17 May 2022

  • CVE-2022-1118
    34İzleyin

    Rockwell Automation ISaGRAF Deserialization of Untrusted Data

    YüksekCVSS 7,8İstismar yokEPSS %11

    rockwellautomation · connected component workbench17 May 2022

  • CVE-2022-28955
    42Planlayın

    An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.

    YüksekCVSS 7,5Kavram kanıtıEPSS %39

    dlink · dir-816l firmware18 May 2022

  • CVE-2022-28956
    46Planlayın

    An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.

    KritikCVSS 9,8İstismar yokEPSS %22

    dlink · dir-816l firmware18 May 2022