cve.bz

Matching records, newest first, page 17

Filter
  1. 7.5CVE-2022-27924KEVExploitEPSS 94%

    Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.

  2. 9.8CVE-2022-21445KEVEPSS 62%

    Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows u…

  3. 9.8CVE-2022-29464KEVExploitEPSS >99.9%

    Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such a…

  4. 6.8CVE-2022-28810KEVExploitEPSS 71%

    Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature. Due to the use of a default administrator passwor…

  5. 7.0CVE-2022-26904KEVExploitEPSS 17%

    Windows User Profile Service Elevation of Privilege Vulnerability

  6. 7.8CVE-2022-24521KEVEPSS 7.1%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  7. 10.0CVE-2022-24816KEVExploitEPSS >99.9%

    JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java c…

  8. 7.8CVE-2022-22960KEVExploitEPSS 36%

    VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'.

  9. 9.8CVE-2022-22954KEVExploitEPSS >99.9%

    VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in rem…

  10. 8.8CVE-2022-0609KEVEPSS 22%

    Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  11. 9.8CVE-2022-22965KEVExploitEPSS 99.6%

    A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deplo…

  12. 9.8CVE-2022-22963KEVExploitEPSS >99.9%

    In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution …

  13. 9.8CVE-2022-26871KEVEPSS 19%

    An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.

  14. 6.5CVE-2022-22948KEVExploitEPSS 13%

    The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

  15. 9.8CVE-2022-26258KEVEPSS 92%

    D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

  16. 7.8CVE-2022-0995KEVExploitEPSS 8.9%

    An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a de…

  17. 9.8CVE-2022-1040KEVExploitEPSS 99.7%

    An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.

  18. 8.8CVE-2022-22620KEVEPSS 16%

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 (v. 16612.4.9.1.8 and 15612.4.9.1.8). Processing maliciously crafted web content …

  19. 9.8CVE-2022-22587KEVEPSS 12%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel p…

  20. 9.8CVE-2022-26501KEVEPSS 4.1%

    Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).

  21. 8.8CVE-2022-26500KEVEPSS 5.8%

    Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and execute arbitrary code.

  22. 7.8CVE-2021-39793KEVEPSS 0.7%

    In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction…

  23. 9.8CVE-2022-26143KEVExploitEPSS 87%

    The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service (performance degradation and excessive …

  24. 7.8CVE-2022-0847KEVExploitEPSS 93%

    A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged lo…

  25. 9.8CVE-2022-26318KEVExploitEPSS 78%

    On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

  26. 10.0CVE-2022-22947KEVExploitEPSS 98%

    In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted r…

  27. 7.8CVE-2022-0492KEVExploitEPSS 5.5%

    A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and…

  28. 7.8CVE-2022-22706KEVEPSS 1.1%

    Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0.

  29. 8.8CVE-2022-23176KEVEPSS 11%

    WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 1…

  30. 10.0CVE-2022-0543KEVExploitEPSS 99.3%

    It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

  31. 9.8CVE-2021-45382KEVExploitEPSS 98%

    A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826…

  32. 7.8CVE-2021-3560KEVExploitEPSS 24%

    It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, creat…

  33. 9.8CVE-2022-24086KEVExploitEPSS 99.1%

    Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result…

  34. 8.8CVE-2021-4102KEVEPSS 7.8%

    Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  35. 8.4CVE-2022-0185KEVEPSS 25%

    A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user names…

  36. 9.8CVE-2022-24112KEVExploitEPSS 96%

    An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was chan…

  37. 8.0CVE-2022-20708KEVEPSS 15%

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication a…

  38. 8.0CVE-2022-20703KEVEPSS 9.2%

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication a…

  39. 7.8CVE-2022-20701KEVEPSS 9.7%

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication a…

  40. 9.8CVE-2022-20700KEVEPSS 5.7%

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication a…

  41. 9.8CVE-2022-20699KEVExploitEPSS 72%

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication a…

  42. 10.0CVE-2022-22536KEVExploitEPSS 98%

    SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can pre…

  43. 7.8CVE-2022-22718KEVEPSS 18%

    Windows Print Spooler Elevation of Privilege Vulnerability

  44. 7.8CVE-2022-21999KEVExploitEPSS 41%

    Windows Print Spooler Elevation of Privilege Vulnerability

  45. 7.8CVE-2022-21971KEVEPSS 54%

    Windows Runtime Remote Code Execution Vulnerability

  46. 6.1CVE-2022-24682KEVExploitEPSS 31%

    An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside…

  47. 7.8CVE-2021-4034KEVExploitEPSS 95%

    A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current ve…

  48. 7.2CVE-2021-40407KEVEPSS 48%

    An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS type, the ddns->domain variable, that has the value of the domain parameter pro…

  49. 7.0CVE-2021-22600KEVEPSS 6.6%

    A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past …

  50. 9.8CVE-2021-35587KEVExploitEPSS 96%

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthentica…