İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2022: sömürülen ve yeni ciddi CVE kayıtları

90 kayıt · 8 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2022-2274
    53Planlayın

    RSA implementation bug in AVX512IFMA instructions

    KritikCVSS 9,8Kavram kanıtıEPSS %48

    openssl · openssl1 Tem 2022

  • CVE-2022-2185
    58Planlayın

    A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 pr

    YüksekCVSS 8,8Kavram kanıtıEPSS %76

    gitlab · gitlab1 Tem 2022

  • CVE-2022-2230
    36İzleyin

    A Stored Cross-Site Scripting vulnerability in the project settings page in GitLab CE/EE affecting all versions from 14.4 prior to 14.10.5,

    OrtaCVSS 4,8İstismar yokEPSS %57

    gitlab · gitlab1 Tem 2022

  • CVE-2022-32032
    42Planlayın

    Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the deviceList parameter in the function formAddMacfilterRule.

    KritikCVSS 9,8İstismar yokEPSS %10

    tenda · ax1806 firmware1 Tem 2022

  • CVE-2022-32035
    34İzleyin

    Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng.

    YüksekCVSS 7,5İstismar yokEPSS %14

    tenda · m3 firmware1 Tem 2022

  • CVE-2022-32420
    41Planlayın

    College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/teacher.php.

    YüksekCVSS 8,8İstismar yokEPSS %20

    college management system project · college management system1 Tem 2022

  • CVE-2022-33171
    45Planlayın

    The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a FindOneOptions object.

    KritikCVSS 9,8Kavram kanıtıEPSS %21

    typeorm · typeorm4 Tem 2022

  • CVE-2022-34265
    61Bu hafta

    An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6.

    KritikCVSS 9,8Kavram kanıtıEPSS %73

    djangoproject · django4 Tem 2022

  • CVE-2022-34918
    33İzleyin

    An issue was discovered in the Linux kernel through 5.18.9.

    YüksekCVSS 7,8SilahlaştırılmışEPSS %5

    linux · linux kernel4 Tem 2022

  • CVE-2022-34876
    36İzleyin

    VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple SQL injection vulnerability at /vicidial/admin.php.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %3

    vicidial · vicidial5 Tem 2022

  • CVE-2022-34877
    36İzleyin

    VICIDial 2.14b0.5 SVN 3550 was discovered to contains a SQL injection vulnerability at /vicidial/AST_agent_time_sheet.php.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %3

    vicidial · vicidial5 Tem 2022

  • CVE-2022-34878
    36İzleyin

    VICIDial 2.14b0.5 SVN 3550 was discovered to contain a SQL injection vulnerability at /vicidial/user_stats.php.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %3

    vicidial · vicidial5 Tem 2022

  • CVE-2022-32386
    42Planlayın

    Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.

    KritikCVSS 9,8İstismar yokEPSS %10

    tendacn · ac23 ac2100 firmware6 Tem 2022

  • CVE-2022-33980
    52Planlayın

    Apache Commons Configuration insecure interpolation defaults

    KritikCVSS 9,8Kavram kanıtıEPSS %44

    apache · commons configuration6 Tem 2022

  • CVE-2022-31125
    45Planlayın

    Authentication Bypass in Roxy-wi

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    roxy-wi · roxy-wi6 Tem 2022

  • CVE-2022-31126
    55Planlayın

    Unauthenticated Remote Code Execution in Roxy-wi

    KritikCVSS 9,8Kavram kanıtıEPSS %52

    roxy-wi · roxy-wi6 Tem 2022

  • CVE-2022-25046
    56Planlayın

    A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request.

    KritikCVSS 9,8İstismar yokEPSS %57

    control-webpanel · webpanel7 Tem 2022

  • CVE-2022-25048
    41Planlayın

    Command injection vulnerability in CWP v0.9.8.1126 that allows normal users to run commands as the root user.

    YüksekCVSS 8,8İstismar yokEPSS %19

    control-webpanel · webpanel7 Tem 2022

  • CVE-2022-31854
    38İzleyin

    Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel.

    YüksekCVSS 7,2Kavram kanıtıEPSS %32

    codologic · codoforum7 Tem 2022

  • CVE-2022-32205
    26İzleyin

    A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them.

    OrtaCVSS 4,3İstismar yokEPSS %31

    haxx · curl7 Tem 2022

  • CVE-2022-32206
    37İzleyin

    curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially

    OrtaCVSS 6,5İstismar yokEPSS %36

    haxx · curl7 Tem 2022

  • CVE-2022-32207
    43Planlayın

    When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a ren

    KritikCVSS 9,8İstismar yokEPSS %12

    haxx · curl7 Tem 2022

  • CVE-2022-32054
    49Planlayın

    Tenda AC10 US_AC10V1.0RTL_V15.03.06.26_multi_TD01 was discovered to contain a remote code execution (RCE) vulnerability via the lanIp parame

    KritikCVSS 9,8İstismar yokEPSS %34

    tenda · ac10 firmware7 Tem 2022

  • CVE-2022-32449
    45Planlayın

    TOTOLINK EX300_V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg

    KritikCVSS 9,8İstismar yokEPSS %19

    totolink · ex300 v2 firmware7 Tem 2022

  • CVE-2022-33098
    40Planlayın

    Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function.

    OrtaCVSS 6,1Kavram kanıtıEPSS %53

    magnolia-cms · magnolia cms7 Tem 2022

  • CVE-2022-35411
    53Planlayın

    rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent.

    KritikCVSS 9,8Kavram kanıtıEPSS %45

    rpc.py project · rpc.py8 Tem 2022

  • CVE-2022-31137
    66Bu hafta

    Unauthenticated Remote Code Execution in Roxy-WI

    KritikCVSS 9,8SilahlaştırılmışEPSS %90

    roxy-wi · roxy-wi8 Tem 2022

  • CVE-2022-32294
    40Planlayın

    Zimbra Collaboration Open Source 8.8.15 does not encrypt the initial-login randomly created password (from the "zmprove ca" command).

    KritikCVSS 9,8İstismar yokEPSS %2

    zimbra · collaboration10 Tem 2022

  • CVE-2022-1952
    46Planlayın

    eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %24

    syntacticsinc · easync11 Tem 2022

  • CVE-2022-2297
    36İzleyin

    SourceCodester Clinics Patient Management System unrestricted upload

    YüksekCVSS 8,8SilahlaştırılmışEPSS %3

    oretnom23 · clinic\'s patient management system12 Tem 2022

  • CVE-2022-22025
    40Planlayın

    Windows Internet Information Services Cachuri Module Denial of Service Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %32

    microsoft · windows 1012 Tem 2022

  • CVE-2022-22047
    67Bu hafta

    Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %18

    microsoft · windows 10 150712 Tem 2022

  • CVE-2022-30216
    62Bu hafta

    Windows Server Service Tampering Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %88

    microsoft · windows 1012 Tem 2022

  • CVE-2022-35628
    47Planlayın

    A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.

    KritikCVSS 9,8İstismar yokEPSS %26

    in2code · living user experience12 Tem 2022

  • CVE-2022-34753
    56Planlayın

    A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause r

    YüksekCVSS 8,8Kavram kanıtıEPSS %70

    schneider-electric · spacelogic c-bus home controller firmware13 Tem 2022

  • CVE-2022-29593
    27İzleyin

    relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need

    OrtaCVSS 5,9Kavram kanıtıEPSS %14

    dingtian-tech · dt-r004 firmware14 Tem 2022

  • CVE-2022-32213
    40Planlayın

    The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding he

    OrtaCVSS 6,5İstismar yokEPSS %45

    llhttp · llhttp14 Tem 2022

  • CVE-2022-32214
    51Planlayın

    The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP re

    OrtaCVSS 6,5İstismar yokEPSS %81

    llhttp · llhttp14 Tem 2022

  • CVE-2022-32215
    47Planlayın

    The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding hea

    OrtaCVSS 6,5İstismar yokEPSS %70

    llhttp · llhttp14 Tem 2022

  • CVE-2022-32409
    43Planlayın

    A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3geo v7.0.5 allows atta

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    softwarepublico · i3geo14 Tem 2022

  • CVE-2022-32417
    50Planlayın

    PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.

    KritikCVSS 9,8İstismar yokEPSS %35

    pbootcms · pbootcms14 Tem 2022

  • CVE-2022-2419
    36İzleyin

    URVE Web Manager upload.php unrestricted upload

    YüksekCVSS 8,0İstismar yokEPSS %12

    eveo · urve web manager15 Tem 2022

  • CVE-2022-31097
    55Planlayın

    Stored XSS in Grafana's Unified Alerting

    YüksekCVSS 8,7İstismar yokEPSS %70

    grafana · grafana15 Tem 2022

  • CVE-2022-34221
    34İzleyin

    Adobe Acrobat Reader Type Confusion vulnerability could lead to Arbitrary code execution

    YüksekCVSS 7,8İstismar yokEPSS %11

    adobe · acrobat dc15 Tem 2022

  • CVE-2022-31161
    48Planlayın

    Roxy-WI Vulnerable to Unauthenticated Remote Code Execution via ssl_cert Upload

    KritikCVSS 9,8Kavram kanıtıEPSS %28

    roxy-wi · roxy-wi15 Tem 2022

  • CVE-2021-36711
    44Planlayın

    WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    octobot · octobot16 Tem 2022

  • CVE-2022-26352
    96Hemen

    An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %91

    dotcms · dotcms17 Tem 2022

  • CVE-2022-26482
    35İzleyin

    An issue was discovered in Poly EagleEye Director II before 2.2.2.1.

    YüksekCVSS 7,2İstismar yokEPSS %23

    poly · eagleeye director ii firmware17 Tem 2022

  • CVE-2022-33891
    93Hemen

    Apache Spark shell command injection vulnerability via Spark UI

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %93

    apache · spark18 Tem 2022

  • CVE-2022-1565
    33İzleyin

    Import any XML or CSV File to WordPress <= 3.6.7 - Admin+ Malicious File Upload

    YüksekCVSS 7,2Kavram kanıtıEPSS %15

    wpallimport · wp all import18 Tem 2022

  • CVE-2022-23745
    35İzleyin

    A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS).

    YüksekCVSS 7,5İstismar yokEPSS %16

    checkpoint · capsule workspace18 Tem 2022

  • CVE-2022-30526
    31İzleyin

    A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 through 5.30, USG FLE

    YüksekCVSS 7,8SilahlaştırılmışEPSS %1

    zyxel · usg flex 100w firmware19 Tem 2022

  • CVE-2022-24082
    43Planlayın

    If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filter

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    pega · infinity19 Tem 2022

  • CVE-2022-35405
    99Hemen

    Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    zohocorp · manageengine access manager plus19 Tem 2022

  • CVE-2022-34169
    55Planlayın

    Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

    YüksekCVSS 7,5Kavram kanıtıEPSS %81

    apache · xalan-java19 Tem 2022

  • CVE-2022-21550
    40Planlayın

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).

    OrtaCVSS 6,3İstismar yokEPSS %50

    oracle · mysql cluster19 Tem 2022

  • CVE-2022-2486
    48Planlayın

    WAVLINK WN535K2/WN535K3 os command injection

    KritikCVSS 9,8Kavram kanıtıEPSS %30

    wavlink · wl-wn535k2 firmware20 Tem 2022

  • CVE-2022-2487
    63Bu hafta

    WAVLINK WN535K2/WN535K3 nightled.cgi os command injection

    KritikCVSS 9,8Kavram kanıtıEPSS %79

    wavlink · wl-wn535k2 firmware20 Tem 2022

  • CVE-2022-2488
    49Planlayın

    WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection

    KritikCVSS 9,8Kavram kanıtıEPSS %33

    wavlink · wl-wn535k2 firmware20 Tem 2022

  • CVE-2022-34607
    43Planlayın

    H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /doping.asp.

    KritikCVSS 9,8İstismar yokEPSS %14

    h3c · magic r200 firmware20 Tem 2022

  • CVE-2022-33318
    54Planlayın

    Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digi

    KritikCVSS 9,8İstismar yokEPSS %50

    iconics · genesis6420 Tem 2022

  • CVE-2022-34046
    36İzleyin

    An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_A

    YüksekCVSS 7,5Kavram kanıtıEPSS %21

    wavlink · wn533a8 firmware20 Tem 2022

  • CVE-2022-34047
    37İzleyin

    An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IP

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    wavlink · wl-wn530hg4 firmware20 Tem 2022

  • CVE-2022-26138
    98Hemen

    The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users g

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    atlassian · questions for confluence20 Tem 2022

  • CVE-2022-0902
    44Planlayın

    ABB Flow Computer and Remote Controllers Path Traversal Vulnerability in Totalflow TCP protocol can lead to root access

    KritikCVSS 9,8İstismar yokEPSS %16

    abb · rmc-100 firmware21 Tem 2022

  • CVE-2022-2135
    33İzleyin

    The affected product is vulnerable to multiple SQL injections, which may allow an unauthorized attacker to disclose information.

    YüksekCVSS 7,5İstismar yokEPSS %10

    advantech · iview22 Tem 2022

  • CVE-2022-2138
    33İzleyin

    The affected product is vulnerable due to missing authentication, which may allow an attacker to read or modify sensitive data and execute a

    YüksekCVSS 7,5İstismar yokEPSS %11

    advantech · iview22 Tem 2022

  • CVE-2022-2139
    44Planlayın

    The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary co

    KritikCVSS 9,8İstismar yokEPSS %16

    advantech · iview22 Tem 2022

  • CVE-2022-2143
    57Planlayın

    The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.

    KritikCVSS 9,8SilahlaştırılmışEPSS %60

    advantech · iview22 Tem 2022

  • CVE-2022-25759
    42Planlayın

    Remote Code Injection

    KritikCVSS 9,8İstismar yokEPSS %11

    convert-svg-core project · convert-svg-core22 Tem 2022

  • CVE-2022-1096
    72Bu hafta

    Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted H

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %24

    google · chrome22 Tem 2022

  • CVE-2022-36446
    68Bu hafta

    software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.

    KritikCVSS 9,8SilahlaştırılmışEPSS %95

    webmin · webmin25 Tem 2022

  • CVE-2022-36450
    45Planlayın

    Obsidian 0.14.x and 0.15.x before 0.15.5 allows obsidian://hook-get-address remote code execution because window.open is used without checki

    KritikCVSS 9,8İstismar yokEPSS %20

    obsidian · obsidian25 Tem 2022

  • CVE-2022-1232
    40Planlayın

    Type confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption via a crafted

    YüksekCVSS 8,8İstismar yokEPSS %17

    google · chrome25 Tem 2022

  • CVE-2022-35650
    46Planlayın

    The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions.

    YüksekCVSS 7,5Kavram kanıtıEPSS %53

    moodle · moodle25 Tem 2022

  • CVE-2022-35869
    57Planlayın

    This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022

    KritikCVSS 9,8İstismar yokEPSS %59

    inductiveautomation · ignition25 Tem 2022

  • CVE-2022-35870
    44Planlayın

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b202

    YüksekCVSS 7,8İstismar yokEPSS %44

    inductiveautomation · ignition25 Tem 2022

  • CVE-2022-35871
    43Planlayın

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b202

    YüksekCVSS 7,8İstismar yokEPSS %40

    inductiveautomation · ignition25 Tem 2022

  • CVE-2022-34906
    33İzleyin

    A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2.

    YüksekCVSS 7,5İstismar yokEPSS %10

    filewave · filewave25 Tem 2022

  • CVE-2022-34907
    44Planlayın

    An authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2.

    KritikCVSS 9,8İstismar yokEPSS %16

    filewave · filewave25 Tem 2022

  • CVE-2022-1364
    69Bu hafta

    Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %13

    google · chrome26 Tem 2022

  • CVE-2022-2550
    50Planlayın

    OS Command Injection in hestiacp/hestiacp

    YüksekCVSS 8,8İstismar yokEPSS %49

    hestiacp · control panel27 Tem 2022

  • CVE-2022-34120
    34İzleyin

    Barangay Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the module editing function at /pa

    YüksekCVSS 7,2İstismar yokEPSS %19

    barangay management system project · barangay management system27 Tem 2022

  • CVE-2022-2294
    86Hemen

    Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %70

    google · chrome27 Tem 2022

  • CVE-2022-2480
    41Planlayın

    Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corrupti

    YüksekCVSS 8,8İstismar yokEPSS %18

    google · chrome27 Tem 2022

  • CVE-2022-2564
    49Planlayın

    Prototype Pollution in automattic/mongoose

    KritikCVSS 9,8İstismar yokEPSS %33

    mongoosejs · mongoose28 Tem 2022

  • CVE-2022-30287
    53Planlayın

    Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class

    YüksekCVSS 8,0İstismar yokEPSS %69

    horde · groupware28 Tem 2022

  • CVE-2022-34555
    46Planlayın

    TP-LINK TL-R473G 2.0.1 Build 220529 Rel.65574n was discovered to contain a remote code execution vulnerability which is exploited via a craf

    KritikCVSS 9,8İstismar yokEPSS %23

    tp-link · tl-r473g firmware28 Tem 2022

  • CVE-2022-2414
    56Planlayın

    Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks.

    YüksekCVSS 7,5Kavram kanıtıEPSS %85

    dogtagpki · dogtagpki29 Tem 2022

  • CVE-2022-34531
    46Planlayın

    DedeCMS v5.7.95 was discovered to contain a remote code execution (RCE) vulnerability via the component mytag_ main.php.

    KritikCVSS 9,8İstismar yokEPSS %24

    dedecms · dedecms29 Tem 2022