|
High
|
18 Oct 2022 |
30 Nov 2023 |
CPAI-2020-3601
|
|
CVE-2020-28948
|
PEAR Archive Tar Insecure Deserialization Code Execution (CVE-2020-28948)
|
|
High
|
31 Oct 2022 |
28 Nov 2023 |
CPAI-2022-0775
|
|
CVE-2022-24288
|
Apache Airflow Command Injection (CVE-2022-24288)
|
|
Critical
|
6 Jun 2022 |
28 Nov 2023 |
CPAI-2022-0297
|
|
CVE-2022-26134
|
Atlassian Confluence Remote Code Execution (CVE-2022-26134)
|
|
High
|
26 May 2022 |
23 Nov 2023 |
CPAI-2018-1803
|
|
CVE-2018-17553
|
Naviwebs Navigate CMS Arbitrary File Upload (CVE-2018-17553)
|
|
Critical
|
1 Jun 2022 |
21 Nov 2023 |
CPAI-2022-0283
|
|
CVE-2022-30190
|
Microsoft Support Diagnostic Tool Remote Code Execution (CVE-2022-30190)
|
|
Critical
|
27 Apr 2022 |
15 Nov 2023 |
CPAI-2022-0206
|
|
CVE-2022-22954
|
VMware Workspace Remote Code Execution (CVE-2022-22954)
|
|
High
|
31 Mar 2022 |
13 Nov 2023 |
CPAI-2022-0096
|
|
CVE-2022-22963
|
Spring Cloud Function Remote Code Execution (CVE-2022-22963)
|
|
High
|
2 Feb 2022 |
13 Nov 2023 |
CPAI-2021-1058
|
|
CVE-2021-21315
|
Node.JS System Information Command Injection (CVE-2021-21315)
|
|
Critical
|
28 Mar 2022 |
12 Nov 2023 |
CPAI-2021-1025
|
|
CVE-2021-36260
|
Hikvision Web Server Command Injection (CVE-2021-36260)
|
|
High
|
13 Nov 2022 |
8 Nov 2023 |
CPAI-2021-1341
|
|
CVE-2021-39144
CVE-2022-31678
|
XStream Command Injection (CVE-2021-39144; CVE-2022-31678)
|
|
High
|
11 Oct 2022 |
6 Nov 2023 |
CPAI-2022-0641
|
Microsoft CVE-2022-38053
|
CVE-2022-38053
|
Microsoft SharePoint Server Remote Code Execution (CVE-2022-38053)
|
|
Critical
|
22 Nov 2022 |
2 Nov 2023 |
CPAI-2022-0886
|
|
CVE-2022-28575
CVE-2022-28577
CVE-2022-28578
CVE-2022-28579
CVE-2022-28580
CVE-2022-28581
CVE-2022-28582
CVE-2022-28583
CVE-2022-28584
CVE-2023-24236
CVE-2023-24238
CVE-2023-24276
CVE-2023-25395
CVE-2023-26848
|
TOTOLINK A7100RU Router Command Injection (CVE-2022-28575; CVE-2022-28577; CVE-2022-28578; CVE-2022-28579; CVE-2022-28580; CVE-2022-28581; CVE-2022-28582; CVE-2022-28583; CVE-2022-28584; CVE-2023-24236; CVE-2023-24238; CVE-2023-24276; CVE-2023-25395; CVE-2023-26848)
|
|
Critical
|
25 Dec 2022 |
1 Nov 2023 |
CPAI-2018-2218
|
|
CVE-2018-13353
CVE-2018-13354
CVE-2018-13418
CVE-2020-35665
CVE-2021-45836
CVE-2021-45837
CVE-2021-45840
CVE-2022-24989
|
TerraMaster TOS Command Injection (CVE-2018-13353; CVE-2018-13354; CVE-2018-13418; CVE-2020-35665; CVE-2021-45836; CVE-2021-45837; CVE-2021-45840; CVE-2022-24989)
|
|
Critical
|
3 Nov 2022 |
30 Oct 2023 |
CPAI-2022-0794
|
|
CVE-2022-23221
|
H2 Database Remote Code Execution (CVE-2022-23221)
|
|
High
|
29 Dec 2022 |
29 Oct 2023 |
CPAI-2022-1111
|
|
CVE-2022-22719
|
Apache httpd Denial of Service (CVE-2022-22719)
|
|
Medium
|
8 Dec 2022 |
29 Oct 2023 |
CPAI-2021-1474
|
|
CVE-2021-28125
|
Apache Superset Open Redirect (CVE-2021-28125)
|
|
Critical
|
30 Nov 2022 |
29 Oct 2023 |
CPAI-2021-1379
|
|
CVE-2021-42342
|
EmbedThis GoAhead Remote Code Execution (CVE-2021-42342)
|
|
Medium
|
3 Jan 2022 |
29 Oct 2023 |
CPAI-2021-1011
|
|
CVE-2021-44832
|
Apache Log4j2 Remote Code Execution (CVE-2021-44832)
|
|
High
|
14 Nov 2022 |
26 Oct 2023 |
CPAI-2021-1359
|
|
CVE-2021-43319
|
Zoho ManageEngine Command Injection (CVE-2021-43319)
|
|
Critical
|
3 Apr 2022 |
26 Oct 2023 |
CPAI-2018-1799
|
|
CVE-2018-14839
|
LG N1A1 Command Injection (CVE-2018-14839)
|
|
High
|
6 Nov 2022 |
24 Oct 2023 |
CPAI-2022-0782
|
|
CVE-2022-33891
|
Apache Spark UI Command Injection (CVE-2022-33891)
|
|
Critical
|
2 May 2022 |
24 Oct 2023 |
CPAI-2022-0208
|
|
CVE-2022-27115
|
Studio-42 elFinder Remote Code Execution (CVE-2022-27115)
|
|
Critical
|
5 Apr 2022 |
24 Oct 2023 |
CPAI-2022-0067
|
|
CVE-2022-24112
|
Apache APISIX Remote Code Execution (CVE-2022-24112)
|
|
Critical
|
13 Jun 2022 |
22 Oct 2023 |
CPAI-2022-0295
|
|
CVE-2022-29303
CVE-2022-40881
|
Contec SolarView Compact Command Injection (CVE-2022-29303; CVE-2022-40881)
|
|
Critical
|
11 Apr 2022 |
22 Oct 2023 |
CPAI-2021-1156
|
|
CVE-2021-45382
|
D-Link Routers Command Injection (CVE-2021-45382)
|
|
Critical
|
13 Apr 2022 |
22 Oct 2023 |
CPAI-2017-1220
|
|
CVE-2017-6316
|
Citrix NetScaler SD-WAN Command Injection (CVE-2017-6316)
|
|
High
|
16 Aug 2022 |
12 Oct 2023 |
CPAI-2022-0515
|
|
CVE-2022-27925
CVE-2022-37042
|
Zimbra Collaboration Directory Traversal (CVE-2022-27925; CVE-2022-37042)
|
|
Critical
|
17 Nov 2022 |
26 Sep 2023 |
CPAI-2018-2149
|
|
CVE-2018-7890
|
Zoho ManageEngine ApplicationManager Command Injection (CVE-2018-7890)
|
|
High
|
14 Dec 2022 |
26 Sep 2023 |
CPAI-2018-2142
|
|
CVE-2018-16873
|
Golang Go Remote Code Execution (CVE-2018-16873)
|
|
Medium
|
24 Oct 2022 |
26 Sep 2023 |
CPAI-2018-2130
|
|
CVE-2018-15706
|
Advantech WebAccess Directory Traversal (CVE-2018-15706)
|
|
Critical
|
24 Oct 2022 |
26 Sep 2023 |
CPAI-2017-1530
|
|
CVE-2017-14803
|
NetIQ Access Manager Directory Traversal (CVE-2017-14803)
|
|
High
|
27 Oct 2022 |
26 Sep 2023 |
CPAI-2018-2128
|
|
CVE-2018-8045
|
Joomla! SQL Injection (CVE-2018-8045)
|
|
Critical
|
16 Aug 2022 |
26 Sep 2023 |
CPAI-2022-0507
|
|
CVE-2018-5445
CVE-2022-26352
|
dotCMS Arbitrary File Upload (CVE-2022-26352; CVE-2018-5445)
|
|
High
|
26 Dec 2022 |
14 Sep 2023 |
CPAI-2018-2209
|
|
CVE-2018-0707
CVE-2018-0708
CVE-2018-0709
CVE-2018-0710
|
QNAP Qcenter Command Injection (CVE-2018-0707; CVE-2018-0708; CVE-2018-0709; CVE-2018-0710)
|
|
High
|
4 Dec 2022 |
10 Sep 2023 |
CPAI-2022-0944
|
|
CVE-2020-28320
CVE-2021-42840
CVE-2022-27474
|
SalesAgility SuiteCRM Remote Code Execution (CVE-2022-27474; CVE-2020-28320; CVE-2021-42840)
|
|
High
|
13 Jun 2022 |
29 Aug 2023 |
CPAI-2022-0315
|
|
|
Null Byte HTTP Encodings
|
|
Critical
|
31 Mar 2022 |
16 Aug 2023 |
CPAI-2022-0095
|
|
CVE-2022-0543
|
Redis Lua Remote Code Execution (CVE-2022-0543)
|
|
Critical
|
17 May 2022 |
14 Aug 2023 |
CPAI-2017-1223
|
|
CVE-2017-12478
CVE-2018-6328
|
Kaseya Unitrends Backup Remote Code Execution (CVE-2017-12478; CVE-2018-6328)
|
|
Critical
|
2 May 2022 |
10 Jul 2023 |
CPAI-2022-0213
|
|
CVE-2022-26258
|
D-Link DIR-820L Command Injection (CVE-2022-26258)
|
|
Critical
|
31 Oct 2022 |
29 Jun 2023 |
CPAI-2022-0739
|
|
CVE-2022-24170
CVE-2022-24171
CVE-2022-28572
CVE-2022-34595
CVE-2022-34596
CVE-2022-34597
CVE-2022-46538
CVE-2023-31587
|
Tenda Routers Command Injection (CVE-2022-24170; CVE-2022-24171; CVE-2022-28572; CVE-2022-34595; CVE-2022-34596; CVE-2022-34597; CVE-2022-46538; CVE-2023-31587)
|
|
Critical
|
18 Dec 2022 |
27 Jun 2023 |
CPAI-2019-2706
|
|
CVE-2019-7816
|
Adobe ColdFusion Arbitrary File Upload (CVE-2019-7816)
|
|
Critical
|
8 Jun 2022 |
27 Jun 2023 |
CPAI-2022-0281
|
|
|
HTTP User Agent Remote Code Execution
|
|
Critical
|
14 Nov 2022 |
22 Jun 2023 |
CPAI-2022-0807
|
|
CVE-2022-1292
|
OpenSSL Command Injection (CVE-2022-1292)
|
|
Medium
|
17 Nov 2022 |
18 Jun 2023 |
CPAI-2022-0879
|
|
|
MatrixSSL Verify X.509 Certificate Stack Buffer Overflow
|
|
High
|
11 Dec 2022 |
5 Jun 2023 |
CPAI-2022-1075
|
|
CVE-2022-41128
|
Microsoft Windows Type Confusion (CVE-2022-41128)
|
|
Critical
|
19 Dec 2022 |
28 May 2023 |
CPAI-2022-1066
|
|
CVE-2018-7034
CVE-2022-28956
|
Multiple Routers Authentication Bypass (CVE-2018-7034; CVE-2022-28956)
|
|
Critical
|
2 May 2022 |
17 May 2023 |
CPAI-2022-0207
|
|
CVE-2022-25075
CVE-2022-38511
|
TOTOLink A3000R Command Injection (CVE-2022-25075; CVE-2022-38511)
|
|
Medium
|
13 Oct 2022 |
14 May 2023 |
CPAI-2022-0645
|
Adobe APSB22-44
|
CVE-2022-38421
|
Adobe ColdFusion Remote Code Execution (APSB22-44: CVE-2022-38421)
|
|
Critical
|
6 Nov 2022 |
10 May 2023 |
CPAI-2022-0758
|
|
CVE-2022-2486
CVE-2022-2488
|
Wavlink Routers Command Injection (CVE-2022-2486; CVE-2022-2488)
|
|
Medium
|
9 Jun 2022 |
7 May 2023 |
CPAI-2022-0275
|
|
CVE-2022-28810
|
Zoho ManageEngine ADSelfService Plus Command Injection (CVE-2022-28810)
|
Feedback