High
|
22 Nov 2022 |
22 Nov 2022 |
CPAI-2022-0809
|
|
CVE-2022-30079
|
Netgear R6200v2 Command Injection (CVE-2022-30079)
|
High
|
22 Nov 2022 |
22 Nov 2022 |
CPAI-2022-0802
|
|
CVE-2022-22909
|
DigitalDruid HotelDruid Remote Code Execution (CVE-2022-22909)
|
Critical
|
22 Nov 2022 |
22 Nov 2022 |
CPAI-2020-3609
|
|
CVE-2020-27868
|
Qognify Ocularis Insecure Deserialization (CVE-2020-27868)
|
Critical
|
22 Nov 2022 |
22 Nov 2022 |
CPAI-2018-2134
|
|
CVE-2018-15381
|
Cisco Unity Express Insecure Deserialization (CVE-2018-15381)
|
High
|
14 Sep 2022 |
22 Nov 2022 |
CPAI-2022-0473
|
|
CVE-2022-29078
|
Reverse Shell Commands Over HTTP Payload (CVE-2022-29078)
|
Critical
|
21 Nov 2022 |
22 Nov 2022 |
CPAI-2019-2526
|
|
CVE-2019-10068
|
Kentico CMS Remote Code Execution (CVE-2019-10068)
|
High
|
21 Nov 2022 |
21 Nov 2022 |
CPAI-2022-0915
|
|
|
Atmosphere Java Framework Reflected Cross-Site Scripting
|
High
|
21 Nov 2022 |
21 Nov 2022 |
CPAI-2021-1389
|
|
CVE-2021-44224
|
Apache httpd mod_proxy NULL Pointer Dereference (CVE-2021-44224)
|
Critical
|
21 Nov 2022 |
21 Nov 2022 |
CPAI-2022-0910
|
|
CVE-2022-29013
|
Razer Sila Gaming Router Command Injection (CVE-2022-29013)
|
High
|
21 Nov 2022 |
21 Nov 2022 |
CPAI-2022-0865
|
|
CVE-2022-28590
|
Pixelimity Arbitrary File Upload (CVE-2022-28590)
|
Critical
|
6 Nov 2022 |
21 Nov 2022 |
CPAI-2022-0781
|
|
CVE-2022-26501
|
Veeam Backup and Replication Authentication Bypass (CVE-2022-26501)
|
High
|
31 Jan 2022 |
21 Nov 2022 |
CPAI-2021-1055
|
|
CVE-2021-37975
|
Google Chrome Heap Corruption (CVE-2021-37975)
|
High
|
20 Nov 2022 |
20 Nov 2022 |
CPAI-2021-1392
|
|
CVE-2021-21642
|
Jenkins Config File Provider Plugin External Entity Injection (CVE-2021-21642)
|
Medium
|
20 Nov 2022 |
20 Nov 2022 |
CPAI-2021-1391
|
|
CVE-2021-21699
|
Jenkins Active Choices Plugin Cross-Site Scripting (CVE-2021-21699)
|
Medium
|
20 Nov 2022 |
20 Nov 2022 |
CPAI-2021-1390
|
|
CVE-2021-20080
|
Zoho ManageEngine ServiceDesk Plus Cross-Site Scripting (CVE-2021-20080)
|
Critical
|
20 Nov 2022 |
20 Nov 2022 |
CPAI-2019-2683
|
|
CVE-2019-16724
|
iSharer and upRedSun File Sharing Wizard Buffer Overflow (CVE-2019-16724)
|
High
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2017-1538
|
|
CVE-2017-12936
|
GraphicsMagic WMF Use After Free (CVE-2017-12936)
|
High
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2018-2148
|
|
CVE-2018-4443
|
Apple WebKit AbstractValue Set Use After Free (CVE-2018-4443)
|
Critical
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2017-1537
|
|
CVE-2017-17420
|
Quest NetVault Backup NVBUJobCountHistory SQL Injection (CVE-2017-17420)
|
High
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0878
|
|
|
Microsoft Windows NTFS File System Denial of Service
|
High
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0877
|
|
|
Microsoft WINS Multiple Replication Sessions Memory Corruption
|
High
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0876
|
|
|
Joomla! Component EkRishta SQL Injection
|
High
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2018-2147
|
|
CVE-2018-19518
|
PHP IMAP imap_open Command Injection (CVE-2018-19518)
|
Critical
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2021-1367
|
|
CVE-2021-41288
|
Zoho ManageEngine SQL Injection (CVE-2021-41288)
|
Critical
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2021-1366
|
|
CVE-2021-41950
|
Montala Limited ResourceSpace Arbitrary File Deletion (CVE-2021-41950)
|
Medium
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2021-1365
|
|
CVE-2021-41951
|
Montala Limited ResourceSpace Cross-Site Scripting (CVE-2021-41951)
|
High
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2021-1364
|
|
CVE-2021-42129
|
Ivanti Avalanche Enterprise Service Command Injection (CVE-2021-42129)
|
High
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2021-1363
|
|
CVE-2021-42131
|
Ivanti Avalanche Enterprise Service SQL Injection (CVE-2021-42131)
|
Critical
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0857
|
|
CVE-2022-3218
|
Necta LLC WiFi Mouse Command Injection (CVE-2022-3218)
|
Critical
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0856
|
|
CVE-2022-22916
|
O2OA Remote Code Execution (CVE-2022-22916)
|
High
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0851
|
|
CVE-2022-2185
|
GitLab Community and Enterprise Edition Command Injection (CVE-2022-2185)
|
Critical
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0850
|
|
CVE-2022-24977
|
ImpressCMS Directory Traversal (CVE-2022-24977)
|
Critical
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0849
|
|
CVE-2022-26833
|
Open Automation Software Platform Authentication Bypass (CVE-2022-26833)
|
Medium
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0821
|
|
CVE-2022-21662
|
WordPress Core Cross-Site Scripting (CVE-2022-21662)
|
Critical
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0818
|
|
CVE-2022-27336
|
Seacms Remote Code Execution (CVE-2022-27336)
|
High
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0812
|
|
CVE-2022-37190
|
CuppaCMS Remote Code Execution (CVE-2022-37190)
|
High
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0808
|
|
CVE-2022-36216
|
DedeCMS Remote Code Execution (CVE-2022-36216)
|
Critical
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0805
|
|
CVE-2022-35411
|
rpc.py Project Remote Code Execution (CVE-2022-35411)
|
Critical
|
10 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0800
|
|
CVE-2022-26990 CVE-2022-26991 CVE-2022-26992 CVE-2022-26993 CVE-2022-26994 CVE-2022-26995 CVE-2022-26996 CVE-2022-26997 CVE-2022-26998 CVE-2022-26999 CVE-2022-27000 CVE-2022-27001 CVE-2022-27002
|
Arris Routers Command Injection (CVE-2022-26990; CVE-2022-26991; CVE-2022-26992; CVE-2022-26993; CVE-2022-26994; CVE-2022-26995; CVE-2022-26996; CVE-2022-26997; CVE-2022-26998; CVE-2022-26999; CVE-2022-27000; CVE-2022-27001; CVE-2022-27002)
|
Critical
|
3 Nov 2022 |
17 Nov 2022 |
CPAI-2022-0756
|
|
CVE-2022-26186 CVE-2022-26188 CVE-2022-26189 CVE-2022-27411 CVE-2022-28905 CVE-2022-28906 CVE-2022-28907 CVE-2022-28908 CVE-2022-28909 CVE-2022-28910 CVE-2022-28911 CVE-2022-28912 CVE-2022-28913
|
TOTOLINK N600R Router Command Injection (CVE-2022-26186; CVE-2022-26188; CVE-2022-26189; CVE-2022-27411; CVE-2022-28905; CVE-2022-28906; CVE-2022-28907; CVE-2022-28908; CVE-2022-28909; CVE-2022-28910; CVE-2022-28911; CVE-2022-28912; CVE-2022-28913)
|
Medium
|
17 Nov 2022 |
17 Nov 2022 |
CPAI-2021-1293
|
|
CVE-2021-21672
|
Jenkins Selenium HTML Report Plugin XML External Entity Injection (CVE-2021-21672)
|
Critical
|
15 Nov 2022 |
15 Nov 2022 |
CPAI-2021-1380
|
|
CVE-2021-42727
|
Adobe RoboHelp Server Directory Traversal (CVE-2021-42727)
|
Medium
|
14 Nov 2022 |
14 Nov 2022 |
CPAI-2019-2687
|
|
CVE-2019-13344
|
Wordpress Like Button Plugin Authentication Bypass (CVE-2019-13344)
|
Critical
|
14 Nov 2022 |
14 Nov 2022 |
CPAI-2019-2686
|
|
CVE-2019-13373
|
D-Link Central WiFiManager CWM-100 SQL Injection (CVE-2019-13373)
|
High
|
14 Nov 2022 |
14 Nov 2022 |
CPAI-2021-1362
|
|
CVE-2021-42128
|
Ivanti Avalanche EnterpriseServer Service setUser Authentication Bypass (CVE-2021-42128)
|
High
|
14 Nov 2022 |
14 Nov 2022 |
CPAI-2021-1361
|
|
CVE-2021-42130
|
Ivanti Avalanche DataRepository Service Insecure Deserialization (CVE-2021-42130)
|
High
|
14 Nov 2022 |
14 Nov 2022 |
CPAI-2021-1360
|
|
CVE-2021-42132
|
Ivanti Avalanche PrinterDeviceServer Service Command Injection (CVE-2021-42132)
|
Critical
|
14 Nov 2022 |
14 Nov 2022 |
CPAI-2022-0858
|
|
CVE-2022-38308
|
TOTOLink A700RU Command Injection (CVE-2022-38308)
|
High
|
14 Nov 2022 |
14 Nov 2022 |
CPAI-2022-0846
|
|
CVE-2022-23375
|
WikiDocs Arbitrary File Upload (CVE-2022-23375)
|
Medium
|
14 Nov 2022 |
14 Nov 2022 |
CPAI-2022-0813
|
|
CVE-2022-30956
|
Jenkins Rundeck Plugin Cross-Site Scripting (CVE-2022-30956)
|