VYPR

CVEs

130,588 total · page 1658 of 2,612

AllCriticalHighKEV
  • CVE-2022-30170HigSep 13, 2022
    Microsoft
    Windows Credential Roaming Service
    risk 0.48cvss 7.3epss 0.02

    Windows Credential Roaming Service Elevation of Privilege Vulnerability

  • CVE-2022-26929HigSep 13, 2022
    Microsoft
    .net Framework
    risk 0.51cvss 7.8epss 0.02

    .NET Framework Remote Code Execution Vulnerability

  • CVE-2022-26928HigSep 13, 2022
    Microsoft
    Windows Photo Import API
    risk 0.46cvss 7.0epss 0.01

    Windows Photo Import API Elevation of Privilege Vulnerability

  • CVE-2022-32190HigSep 13, 2022
    Golang
    Go
    risk 0.42cvss 7.5epss 0.02

    JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath("https://go.dev", "../go") returns the URL "https://go.dev/../go", despite the JoinPath documentation stating that ../ path elements are removed from the result.

  • CVE-2022-3179HigSep 13, 2022
    Rdiffweb
    Rdiffweb
    risk 0.50cvss 8.8epss 0.01

    Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.

  • CVE-2022-36103HigSep 13, 2022
    Siderolabs
    Talos Linux
    risk 0.40cvss 7.2epss 0.01

    Talos Linux is a Linux distribution built for Kubernetes deployments. Talos worker nodes use a join token to get accepted into the Talos cluster. Due to improper validation of the request while signing a worker node CSR (certificate signing request) Talos control plane node…

  • CVE-2022-3170HigSep 13, 2022
    Linux
    Kernel
    risk 0.00cvss 7.8epss 0.00

    An out-of-bounds access issue was found in the Linux kernel sound subsystem. It could occur when the 'id->name' provided by the user did not end with '\0'. A privileged local user could pass a specially crafted name through ioctl() interface and crash the system or potentially…

  • CVE-2022-3029HigSep 13, 2022
    Nlnetlabs
    Routinator
    risk 0.42cvss 7.5epss 0.01

    In NLnet Labs Routinator 0.9.0 up to and including 0.11.2, due to a mistake in error handling, data in RRDP snapshot and delta files that isn’t correctly base 64 encoded is treated as a fatal error and causes Routinator to exit. Worst case impact of this vulnerability is…

  • CVE-2022-39801HigSep 13, 2022
    SAP
    Access Control
    risk 0.49cvss 7.5epss 0.01

    SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even after it is closed in Firefighter Logon Pad. This attack can be launched only within the firewall. On successful exploitation the attacker can gain access to…

  • CVE-2022-35292HigSep 13, 2022
    SAP
    Business One (B1i)
    risk 0.51cvss 7.8epss 0.00

    In SAP Business One application when a service is created, the executable path contains spaces and isn’t enclosed within quotes, leading to a vulnerability known as Unquoted Service Path which allows a user to gain SYSTEM privileges. If the service is exploited by adversaries,…

  • CVE-2022-38100HigSep 13, 2022
    CME
    CMS8000
    risk 0.49cvss 7.5epss 0.01

    The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. A threat actor with network access can remotely issue a specially formatted UDP request that will cause the entire device to crash and require a physical reboot. A UDP broadcast…

  • CVE-2022-2990HigSep 13, 2022
    Buildah Project
    Buildah
    risk 0.39cvss 7.1epss 0.00

    An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access…

  • CVE-2022-2989HigSep 13, 2022
    Podman
    Podman
    risk 0.39cvss 7.1epss 0.00

    An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access…

  • CVE-2022-1278HigSep 13, 2022
    Wildfly
    Wildfly
    risk 0.49cvss 7.5epss 0.01

    A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.

  • CVE-2022-38616HigSep 13, 2022
    Smartvista
    SVFE2
    risk 0.57cvss 8.8epss 0.01

    SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /feegroups/tgrt_group.jsf.

  • CVE-2022-3174HigSep 13, 2022
    Rdiffweb
    Rdiffweb
    risk 0.42cvss 7.5epss 0.01

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.

  • CVE-2022-39156HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39155HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39154HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39153HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39152HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39151HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39150HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39149HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39148HigSep 13, 2022
    Parasolid
    Parasolid
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39147HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39146HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39145HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39144HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39143HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39142HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161),…

  • CVE-2022-39141HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter…

  • CVE-2022-39140HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter…

  • CVE-2022-39139HigSep 13, 2022
    Parasolid
    Parasolid
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter…

  • CVE-2022-39138HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter…

  • CVE-2022-39137HigSep 13, 2022
    Siemens Foundation
    Femap
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.161), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter…

  • CVE-2022-38466HigSep 13, 2022
    CoreShield
    One-Way Gateway (OWG) Software
    risk 0.51cvss 7.8epss 0.00

    A vulnerability has been identified in CoreShield One-Way Gateway (OWG) Software (All versions < V2.2). The default installation sets insecure file permissions that could allow a local attacker to escalate privileges to local administrator.

  • CVE-2022-38304HigSep 12, 2022
    Online Leave Management System Project
    Online Leave Management System
    risk 0.47cvss 7.2epss 0.01

    Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manage_leave_type.php.

  • CVE-2022-38303HigSep 12, 2022
    Online Leave Management System Project
    Online Leave Management System
    risk 0.47cvss 7.2epss 0.01

    Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manage_leave_type.php.

  • CVE-2022-38302HigSep 12, 2022
    Online Leave Management System Project
    Online Leave Management System
    risk 0.47cvss 7.2epss 0.01

    Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manage_department.php.

  • CVE-2022-38298HigSep 12, 2022
    Appsmithorg
    Appsmith
    risk 0.57cvss 8.8epss 0.01

    Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery (SSRF) via redirecting incoming requests to the AWS internal metadata endpoint.

  • CVE-2022-35572HigSep 12, 2022
    Linksys
    E5350
    risk 0.49cvss 7.5epss 0.01

    On Linksys E5350 WiFi Router with firmware version 1.0.00.037 and lower, (and potentially other vendors/devices due to code reuse), the /SysInfo.htm URI does not require a session ID. This web page calls a show_sysinfo function which retrieves WPA passwords, SSIDs, MAC…

  • CVE-2022-38610HigSep 12, 2022
    Garage Management System Project
    Garage Management System
    risk 0.47cvss 7.2epss 0.01

    Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php.

  • CVE-2022-38606HigSep 12, 2022
    Garage Management System Project
    Garage Management System
    risk 0.47cvss 7.2epss 0.01

    Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editcategory.php.

  • CVE-2022-38605HigSep 12, 2022
    Church Management System Project
    Church Management System
    risk 0.47cvss 7.2epss 0.01

    Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_event.php.

  • CVE-2022-36174HigSep 12, 2022
    FreshService
    macOS Agent
    risk 0.53cvss 8.1epss 0.01

    FreshService Windows Agent < 2.11.0 and FreshService macOS Agent < 4.2.0 and FreshService Linux Agent < 3.3.0. are vulnerable to Broken integrity checking via the FreshAgent client and scheduled update service.

  • CVE-2022-36173HigSep 12, 2022
    FreshService
    macOS Agent
    risk 0.53cvss 8.1epss 0.01

    FreshService macOS Agent < 4.4.0 and FreshServce Linux Agent < 3.4.0 are vulnerable to TLS Man-in-The-Middle via the FreshAgent client and scheduled update service.

  • CVE-2022-2979HigSep 12, 2022
    Omron
    Cx Programmer
    risk 0.51cvss 7.8epss 0.00

    Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution.

  • CVE-2022-29490HigSep 12, 2022
    Hitachienergy
    Microscada X Sys600
    risk 0.55cvss 8.5epss 0.01

    Improper Authorization vulnerability exists in the Workplace X WebUI of the Hitachi Energy MicroSCADA X SYS600 allows an authenticated user to execute any MicroSCADA internal scripts irrespective of the authenticated user's role. This issue affects: Hitachi Energy MicroSCADA X…

  • CVE-2021-44426HigSep 12, 2022
    Anydesk
    Anydesk
    risk 0.57cvss 8.8epss 0.01

    An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5. An upload of an arbitrary file to a victim's local ~/Downloads/ directory is possible if the victim is using the AnyDesk Windows client to connect to a remote machine, if an attacker is also connected…