Critical
|
14 Dec 2022 |
14 Dec 2022 |
CPAI-2022-1049
|
|
CVE-2022-28927
|
Subconverter Remote Code Execution (CVE-2022-28927)
|
Critical
|
14 Dec 2022 |
14 Dec 2022 |
CPAI-2022-0894
|
|
CVE-2022-29155
|
OpenLDAP SQL Injection (CVE-2022-29155)
|
High
|
17 Nov 2022 |
14 Dec 2022 |
CPAI-2022-0822
|
|
CVE-2022-21972
|
Windows PPTP Protocol Use After Free (CVE-2022-21972)
|
Critical
|
27 Jul 2022 |
14 Dec 2022 |
CPAI-2022-0454
|
|
CVE-2018-19595 CVE-2022-32417
|
PbootCMS Remote Code Execution (CVE-2018-19595; CVE-2022-32417)
|
High
|
13 Dec 2022 |
13 Dec 2022 |
CPAI-2022-1035
|
Microsoft CVE-2022-44675
|
CVE-2022-44675
|
Microsoft Windows Bluetooth Driver Elevation of Privilege (CVE-2022-44675)
|
High
|
13 Dec 2022 |
13 Dec 2022 |
CPAI-2022-1033
|
Microsoft CVE-2022-44673
|
CVE-2022-44673
|
Microsoft Windows Client Server Run-Time Subsystem Elevation of Privilege (CVE-2022-44673)
|
Critical
|
12 Dec 2022 |
12 Dec 2022 |
CPAI-2017-1560
|
|
CVE-2017-15367
|
Bacula-Web SQL Injection (CVE-2017-15367)
|
High
|
12 Dec 2022 |
12 Dec 2022 |
CPAI-2018-2198
|
|
CVE-2018-7123
|
HPE Intelligent Management Center Denial of Service (CVE-2018-7123)
|
Medium
|
12 Dec 2022 |
12 Dec 2022 |
CPAI-2018-2196
|
|
CVE-2018-19191
|
Webmin history Parameter Cross-Site-Scripting (CVE-2018-19191)
|
Critical
|
12 Dec 2022 |
12 Dec 2022 |
CPAI-2022-1043
|
|
CVE-2022-44088
|
ESPCMS Remote Code Execution (CVE-2022-44088)
|
Critical
|
12 Dec 2022 |
12 Dec 2022 |
CPAI-2022-1032
|
|
CVE-2022-25074
|
TP-Link TL-WR902AC Stack Overflow (CVE-2022-25074)
|
Critical
|
12 Dec 2022 |
12 Dec 2022 |
CPAI-2022-1031
|
|
CVE-2022-25073
|
TP-Link TL-WR841N Stack Overflow (CVE-2022-25073)
|
Critical
|
23 Oct 2022 |
12 Dec 2022 |
CPAI-2022-0720
|
|
CVE-2022-40684
|
Fortinet Multiple Products Authentication Bypass (CVE-2022-40684)
|
High
|
12 Dec 2022 |
12 Dec 2022 |
CPAI-2018-2131
|
|
CVE-2018-4416
|
Apple ICloud Memory Corruption (CVE-2018-4416)
|
Critical
|
11 Dec 2022 |
11 Dec 2022 |
CPAI-2022-1063
|
|
CVE-2022-37128
|
D-Link DIR-816 Authentication Bypass (CVE-2022-37128)
|
Critical
|
11 Dec 2022 |
11 Dec 2022 |
CPAI-2022-1061
|
|
CVE-2022-38827
|
TOTOLINK T6 Buffer Overflow (CVE-2022-38827)
|
Critical
|
11 Dec 2022 |
11 Dec 2022 |
CPAI-2022-1036
|
|
CVE-2022-38545
|
Valine Cross Site Scripting (CVE-2022-38545)
|
Critical
|
11 Dec 2022 |
11 Dec 2022 |
CPAI-2022-1034
|
|
CVE-2022-30413 CVE-2022-30838
|
Covid-19 Travel Pass Management System SQL Injection (CVE-2022-30413; CVE-2022-30838)
|
Critical
|
11 Dec 2022 |
11 Dec 2022 |
CPAI-2022-1029
|
|
CVE-2022-25072
|
TP-Link Archer A54 Stack Overflow (CVE-2022-25072)
|
Critical
|
11 Dec 2022 |
11 Dec 2022 |
CPAI-2022-1028
|
|
CVE-2022-30521
|
D-Link DIR-890L Stack Overflow (CVE-2022-30521)
|
Critical
|
11 Dec 2022 |
11 Dec 2022 |
CPAI-2022-1026
|
|
CVE-2022-30063
|
FTCMS Remote Code Execution (CVE-2022-30063)
|
Critical
|
11 Dec 2022 |
11 Dec 2022 |
CPAI-2022-1019
|
|
CVE-2022-25434 CVE-2022-25435 CVE-2022-25437 CVE-2022-25439 CVE-2022-25440 CVE-2022-26278 CVE-2022-27016 CVE-2022-27022
|
Tenda AC9 Stack Overflow (CVE-2022-25434; CVE-2022-25435; CVE-2022-25437; CVE-2022-25439; CVE-2022-25440; CVE-2022-26278; CVE-2022-27016; CVE-2022-27022)
|
Critical
|
11 Dec 2022 |
11 Dec 2022 |
CPAI-2022-1005
|
|
CVE-2022-28021
|
Purchase Order Management System Remote Code Execution (CVE-2022-28021)
|
Critical
|
13 Nov 2022 |
11 Dec 2022 |
CPAI-2022-0797
|
|
CVE-2022-27268 CVE-2022-27269 CVE-2022-27270 CVE-2022-27271 CVE-2022-27273 CVE-2022-27275 CVE-2022-27276
|
InHand Networks InRouter 900 Command Injection (CVE-2022-27268; CVE-2022-27269; CVE-2022-27270; CVE-2022-27271; CVE-2022-27273; CVE-2022-27275; CVE-2022-27276)
|
Critical
|
11 Dec 2022 |
11 Dec 2022 |
CPAI-2022-0452
|
|
CVE-2022-33107
|
ThinkPHP Remote Code Execution (CVE-2022-33107)
|
Critical
|
11 Dec 2022 |
11 Dec 2022 |
CPAI-2021-1481
|
|
CVE-2021-30180
|
Apache Dubbo Remote Code Execution (CVE-2021-30180)
|
Critical
|
11 Dec 2022 |
11 Dec 2022 |
CPAI-2022-1048
|
|
CVE-2022-32994
|
Halo CMS Arbitrary File Upload (CVE-2022-32994)
|
Medium
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2021-1472
|
|
CVE-2021-28662
|
Squid Proxy Denial of Service (CVE-2021-28662)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2021-1471
|
|
CVE-2021-28958
|
Zoho ManageEngine ADSelfService Plus Command Injection (CVE-2021-28958)
|
Medium
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2021-1470
|
|
CVE-2021-31813
|
Zoho ManageEngine Applications Manager Cross-Site Scripting (CVE-2021-31813)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2021-1469
|
|
CVE-2021-32608
|
SmartStore SmartStoreNET Cross-Site Scripting (CVE-2021-32608)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2021-1468
|
|
CVE-2021-32607
|
SmartStore SmartStoreNET Cross-Site Scripting (CVE-2021-32607)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2021-1466
|
|
CVE-2021-37918
|
Zoho ManageEngine ADManager Plus ModifyPhotoAction File Upload (CVE-2021-37918)
|
High
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2021-1465
|
|
CVE-2021-43829
|
Patrowl PatrowlManager Unrestricted File Upload (CVE-2021-43829)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2022-1040
|
|
CVE-2022-23329
|
UJCMS Jspxcms Command Injection (CVE-2022-23329)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2022-1038
|
|
CVE-2022-28531
|
Covid-19 Directory on Vaccination System SQL Injection (CVE-2022-28531)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2022-1022
|
|
CVE-2022-4116
|
Java Quarkus Framework Remote Code Execution (CVE-2022-4116)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2022-1018
|
|
CVE-2022-31830
|
Baidu Kity Minder Server-Side Request Forgery (CVE-2022-31830)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2022-1017
|
|
CVE-2022-29632
|
Roncoo Education Arbitrary File Upload (CVE-2022-29632)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2022-1007
|
|
CVE-2022-37113
|
BlueCMS SQL Injection (CVE-2022-37113)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2022-0998
|
|
CVE-2022-28082
|
Tenda AX12 Stack Overflow (CVE-2022-28082)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2022-0995
|
|
CVE-2022-25414 CVE-2022-25417 CVE-2022-25418 CVE-2022-25427 CVE-2022-25428 CVE-2022-25429 CVE-2022-25431 CVE-2022-25433 CVE-2022-28560
|
Tenda AC9 Stack Overflow (CVE-2022-25414; CVE-2022-25417; CVE-2022-25418; CVE-2022-25427; CVE-2022-25428; CVE-2022-25429; CVE-2022-25431; CVE-2022-25433; CVE-2022-28560)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2022-0980
|
|
CVE-2022-40851
|
Tenda AC15 Stack Overflow (CVE-2022-40851)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2022-0970
|
|
CVE-2022-29328
|
D-Link DAP-1330 Stack Overflow (CVE-2022-29328)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2022-0863
|
|
CVE-2022-35555
|
Tenda W6 Command Injection (CVE-2022-35555)
|
Critical
|
8 Dec 2022 |
8 Dec 2022 |
CPAI-2022-0859
|
|
CVE-2022-40855
|
Tenda W20E Stack Overflow (CVE-2022-40855)
|
Critical
|
7 Dec 2022 |
7 Dec 2022 |
CPAI-2020-3621
|
|
CVE-2020-4211
|
IBM Spectrum Protect Plus Command Injection (CVE-2020-4211)
|
Critical
|
7 Dec 2022 |
7 Dec 2022 |
CPAI-2019-2703
|
|
CVE-2019-12815
|
ProFTPD Authentication Bypass (CVE-2019-12815)
|
High
|
7 Dec 2022 |
7 Dec 2022 |
CPAI-2022-1054
|
|
|
Dridex Manager Phishing Attempt
|
Medium
|
7 Dec 2022 |
7 Dec 2022 |
CPAI-2021-1463
|
|
CVE-2021-38428
|
Delta Industrial Automation DIALink Cross-Site Scripting (CVE-2021-38428)
|