Menu

Star on GitHub · 3.2k

2022

25,043 vulnerabilities published in 2022.

Results

25,043· Page 435/501
7.8
CVE-2021-46581

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46580

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46579

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46578

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46577

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46576

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46575

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46574

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46573

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46572

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46571

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.0.8

7.8
CVE-2021-46570

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 1

7.8
CVE-2021-46569

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46568

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46567

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46566

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46565

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46564

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46563

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.8
CVE-2021-46562

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

7.5
CVE-2021-46082

Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol g

9.1
CVE-2021-46063

MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management

7.1
CVE-2021-46062

MCMS v5.2.5 was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName.

7.6
CVE-2021-23702

The package object-extend from 0.0.0 are vulnerable to Prototype Pollution via object-extend.

8.1
CVE-2021-46037

MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do.

9.8
CVE-2021-46036

An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to ex

9.8
CVE-2022-25337

Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows injection attacks via image file

5.3
CVE-2022-25336

Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference

7.5
CVE-2022-25335

RigoBlock Dragos through 2022-02-17 lacks the onlyOwner modifier for setMultipleAllowances. This enables token manipulat

4.3
CVE-2022-23982

The vulnerability discovered in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4) allows server inform

4.3
CVE-2022-23981

The vulnerability allows Subscriber+ level users to create brands in WordPress Perfect Brands for WooCommerce plugin (ve

6.5
CVE-2022-21800

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve

10.0
CVE-2022-21215

This vulnerability could allow an attacker to force the server to create and execute a web request granting access to ba

10.0
CVE-2022-21196

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve

8.6
CVE-2022-21176

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve

7.5
CVE-2022-21143

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve

10.0
CVE-2022-21141

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve

6.5
CVE-2022-0673

A flaw was found in LemMinX in versions prior to 0.19.0. Cache poisoning of external schema files due to directory trave

5.5
CVE-2022-0672

A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive

9.1
CVE-2022-0671

A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large

7.8
CVE-2022-0646

A flaw use after free in the Linux kernel Management Component Transport Protocol (MCTP) subsystem was found in the way

4.3
CVE-2022-0585

Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via

7.5
CVE-2022-0138

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device ve

8.8
CVE-2021-4093

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KV

7.5
CVE-2021-4091

A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches. An attacker co

7.1
CVE-2021-4090

An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write b

9.8
CVE-2021-45401

A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.0

7.8
CVE-2021-44968

A Use after Free vulnerability exists in IOBit Advanced SystemCare 15 pro via requests sent in sequential order using th

6.3
CVE-2021-3948

An incorrect default permissions vulnerability was found in the mig-controller. Due to an incorrect cluster namespaces h

5.5
CVE-2021-3947

A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvme_changed_nslist() where a maliciou

Test your stack for 2022issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.