Menu

Star on GitHub · 3.2k

2022

25,043 vulnerabilities published in 2022.

Results

25,043· Page 268/501
7.8
CVE-2022-27868

A maliciously crafted CAT file in Autodesk AutoCAD 2023 can be used to trigger use-after-free vulnerability. Exploitatio

7.8
CVE-2022-27867

A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerabi

9.8
CVE-2022-26147

The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection.

5.9
CVE-2022-23171

AtlasVPN - Privilege Escalation Lack of proper security controls on named pipe messages can allow an attacker with low p

7.5
CVE-2022-22979

In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provid

8.8
CVE-2022-1833

A flaw was found in AMQ Broker Operator 7.9.4 installed via UI using OperatorHub where a low-privilege user that has acc

8.2
CVE-2022-1665

A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub

6.5
CVE-2022-1596

Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows

6.1
CVE-2021-41924

Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting (XSS).

7.2
CVE-2022-33056

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

7.2
CVE-2022-33055

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

7.2
CVE-2022-33049

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

7.2
CVE-2022-33048

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

4.3
CVE-2022-31478

The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function.

9.8
CVE-2022-29775

iSpyConnect iSpy v7.2.2.0 allows attackers to bypass authentication via a crafted URL.

9.8
CVE-2022-29774

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal.

5.4
CVE-2022-25585

Unioncms v1.0.13 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Default settings.

5.3
CVE-2022-23342

The Hyland Onbase Application Server releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.1000

9.8
CVE-2022-33139

A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All ver

6.1
CVE-2022-33119

NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site scripting (XSS) vulnerabi

5.5
CVE-2022-32414

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_vmcode_interpreter at src/njs_vm

9.8
CVE-2022-31374

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute

6.1
CVE-2022-31373

SolarView Compact v6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Solar_AiCo

5.5
CVE-2022-31307

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_string_offset at src/njs_string.

5.5
CVE-2022-31306

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_convert_to_slow_array at s

5.4
CVE-2022-31303

maccms10 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field.

5.4
CVE-2022-31302

maccms8 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Server Group text field.

N/A
CVE-2022-23074

In Recipes, versions 0.17.0 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in the ‘Name’ field of Ke

N/A
CVE-2022-23073

In Recipes, versions 1.0.5 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in copy to clipboard funct

9.8
CVE-2022-31801

An unauthenticated, remote attacker could upload malicious logic to the devices based on ProConOS/ProConOS eCLR in order

9.8
CVE-2022-31800

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to

N/A
CVE-2022-23072

In Recipes, versions 1.0.5 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in “Add to Cart” functiona

6.3
CVE-2017-20081

A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. This affects an unknown part o

6.3
CVE-2017-20080

A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. Affected by this issue is

6.3
CVE-2017-20079

A vulnerability classified as critical was found in Hindu Matrimonial Script. Affected by this vulnerability is an unkno

6.3
CVE-2017-20078

A vulnerability classified as critical has been found in Hindu Matrimonial Script. Affected is an unknown function of th

6.3
CVE-2017-20077

A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. This issue affects some unknown pr

6.3
CVE-2017-20076

A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. This vulnerability affects unkn

6.3
CVE-2017-20075

A vulnerability was found in Hindu Matrimonial Script. It has been classified as critical. This affects an unknown part

6.3
CVE-2017-20074

A vulnerability was found in Hindu Matrimonial Script and classified as critical. Affected by this issue is some unknown

6.3
CVE-2017-20073

A vulnerability has been found in Hindu Matrimonial Script and classified as critical. Affected by this vulnerability is

6.3
CVE-2017-20072

A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. Affected is an unknown functio

6.3
CVE-2017-20071

A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. This issue affects some u

6.3
CVE-2017-20070

A vulnerability classified as critical was found in Hindu Matrimonial Script. This vulnerability affects unknown code of

6.3
CVE-2017-20069

A vulnerability classified as critical has been found in Hindu Matrimonial Script. This affects an unknown part of the f

6.3
CVE-2017-20068

A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. Affected by this issue is some unk

7.3
CVE-2017-20067

A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. Affected by this vulnerability

5.3
CVE-2022-31062

### Impact A plugin public script can be used to read content of system files. ### Patches Upgrade to version 1.0.2. ###

5.3
CVE-2017-20066

A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown

4.3
CVE-2017-20065

A vulnerability was found in Supsystic Popup Plugin 1.7.6 and classified as problematic. This issue affects some unknown

Test your stack for 2022issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.