Menu

Star on GitHub · 3.2k

2022

25,043 vulnerabilities published in 2022.

Results

9,682 of 25,043· Page 188/194
7.8
CVE-2021-34891

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.7

7.8
CVE-2021-34885

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.7

7.8
CVE-2021-34880

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.7

7.8
CVE-2021-34879

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.7

7.8
CVE-2021-34878

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.7

7.8
CVE-2021-34877

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.7

7.8
CVE-2021-34876

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.7

7.8
CVE-2021-34875

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.7

7.8
CVE-2021-34874

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.7

7.8
CVE-2021-34873

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.7

7.8
CVE-2021-34872

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.7

7.8
CVE-2021-34871

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.7

7.8
CVE-2021-34858

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer. User inter

7.8
CVE-2022-22991

A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device int

7.8
CVE-2022-22990

A limited authentication bypass vulnerability was discovered that could allow an attacker to achieve remote code executi

7.7
CVE-2022-22988

File and directory permissions have been corrected to prevent unintended users from modifying or accessing resources. It

7.7
CVE-2022-21682

Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of

7.8
CVE-2021-45058

Adobe InDesign version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbit

7.8
CVE-2021-45057

Adobe InDesign version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbit

7.8
CVE-2021-45056

Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitra

7.8
CVE-2021-45055

Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file,

7.8
CVE-2021-45053

Adobe InCopy version 16.4 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitra

8.1
CVE-2021-44177

AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS

8.1
CVE-2021-44176

AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS

8.1
CVE-2021-43765

AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS

8.0
CVE-2021-43764

AEM's Cloud Service offering, as well as version 6.5.10.0 (and below) are affected by a stored Cross-Site Scripting (XSS

8.0
CVE-2021-43761

AEM's Cloud Service offering, as well as versions 6.5.7.0 (and below), 6.4.8.3 (and below) and 6.3.3.8 (and below) are a

7.8
CVE-2021-40574

The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line funct

7.8
CVE-2021-40571

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in box_code_apple.c, which

7.8
CVE-2021-40570

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function in av_parsers.c, which a

7.8
CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svc_parse_slice function in

8.8
CVE-2021-45806

jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious

7.5
CVE-2021-30353

Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Sn

7.5
CVE-2021-30330

Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdra

7.8
CVE-2021-30319

Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdr

7.8
CVE-2021-30311

Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto,

7.8
CVE-2021-30308

Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Sn

7.5
CVE-2021-30307

Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV qu

7.5
CVE-2021-30301

Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon

7.5
CVE-2021-30300

Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value t

7.5
CVE-2021-30287

Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon

8.8
CVE-2022-22113

In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration. When a passwor

7.1
CVE-2022-0198

corenlp is vulnerable to Improper Restriction of XML External Entity Reference

8.8
CVE-2022-0197

phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)

8.8
CVE-2022-0196

phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)

8.2
CVE-2021-43860

Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn

8.8
CVE-2022-23118

Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-l

7.5
CVE-2022-23117

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent pro

7.5
CVE-2022-23116

Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent pro

8.1
CVE-2022-23107

Jenkins Warnings Next Generation Plugin 9.10.2 and earlier does not restrict the name of a file when configuring custom

Test your stack for 2022issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.