Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2022-44953 Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44953)
cross-site scripting in webtareas-project (CVE-2022-44953). Risk of unauthorized operations or information disclosure.
CVE-2022-44954 Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44954)
cross-site scripting in webtareas-project (CVE-2022-44954). Risk of unauthorized operations or information disclosure.
CVE-2022-44955 Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44955)
cross-site scripting in webtareas-project (CVE-2022-44955). Risk of unauthorized operations or information disclosure.
CVE-2022-44956 Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44956)
cross-site scripting in webtareas-project (CVE-2022-44956). Risk of unauthorized operations or information disclosure.
CVE-2022-44957 Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44957)
cross-site scripting in webtareas-project (CVE-2022-44957). Risk of unauthorized operations or information disclosure.
CVE-2022-44959 Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44959)
cross-site scripting in webtareas-project (CVE-2022-44959). Risk of unauthorized operations or information disclosure.
CVE-2022-44290 SQL Injection in sqli (CVE-2022-44290)
SQL injection in sqli (CVE-2022-44290). Successful exploitation can lead to full system takeover.
CVE-2022-44291 SQL Injection in sqli (CVE-2022-44291)
SQL injection in sqli (CVE-2022-44291). Successful exploitation can lead to full system takeover.
CVE-2022-2807 SQL Injection in sqli (CVE-2022-2807)
SQL injection in sqli (CVE-2022-2807). Successful exploitation can lead to full system takeover.
CVE-2022-46152 OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The funct...
OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The function `cleanup_shm_refs()` is called by both `entry_invoke_command()` and `entry_open_session()`. The...
CVE-2022-45205 SQL Injection in sqli (CVE-2022-45205)
SQL injection in sqli (CVE-2022-45205). Risk of unauthorized operations or information disclosure.
CVE-2022-45206 SQL Injection in sqli (CVE-2022-45206)
SQL injection in sqli (CVE-2022-45206). Successful exploitation can lead to full system takeover.
CVE-2022-45207 SQL Injection in sqli (CVE-2022-45207)
SQL injection in sqli (CVE-2022-45207). Successful exploitation can lead to full system takeover.
CVE-2022-45208 SQL Injection in sqli (CVE-2022-45208)
SQL injection in sqli (CVE-2022-45208). Risk of unauthorized operations or information disclosure.
CVE-2022-45210 SQL Injection in sqli (CVE-2022-45210)
SQL injection in sqli (CVE-2022-45210). Risk of unauthorized operations or information disclosure.
CVE-2022-37721 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2022-37721)
cross-site scripting in privilege-escalation (CVE-2022-37721). Successful exploitation can lead to full system takeover.
CVE-2022-37720 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2022-37720)
cross-site scripting in privilege-escalation (CVE-2022-37720). Successful exploitation can lead to full system takeover.
CVE-2022-35501 Cross-Site Scripting (XSS) in amasty (CVE-2022-35501)
cross-site scripting in amasty (CVE-2022-35501). Risk of unauthorized operations or information disclosure.
CVE-2022-35500 Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality.
Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality.
CVE-2022-37773 SQL Injection in sqli (CVE-2022-37773)
SQL injection in sqli (CVE-2022-37773). Confidential information can be exposed externally.
CVE-2022-42989 Cross-Site Scripting (XSS) in sankhya (CVE-2022-42989)
cross-site scripting in sankhya (CVE-2022-42989). Successful exploitation can lead to full system takeover.
CVE-2022-40842 SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-40842)
SSRF in ssrf (CVE-2022-40842). Confidential information can be exposed externally.
CVE-2022-36180 Cross-Site Scripting (XSS) in fusiondirectory (CVE-2022-36180)
cross-site scripting in fusiondirectory (CVE-2022-36180). Successful exploitation can lead to full system takeover.
CVE-2022-20950 Vulnerability in dos (CVE-2022-20950)
vulnerability in dos (CVE-2022-20950). Risk of unauthorized operations or information disclosure.
CVE-2022-20943 Vulnerability in c (CVE-2022-20943)
vulnerability in c (CVE-2022-20943). Risk of unauthorized operations or information disclosure.
CVE-2022-20946 Vulnerability in dos (CVE-2022-20946)
vulnerability in dos (CVE-2022-20946). Risk of unauthorized operations or information disclosure.
CVE-2022-20947 Buffer Overflow in dos (CVE-2022-20947)
vulnerability in dos (CVE-2022-20947). Risk of unauthorized operations or information disclosure.
CVE-2022-20927 Vulnerability in dos (CVE-2022-20927)
vulnerability in dos (CVE-2022-20927). Risk of unauthorized operations or information disclosure.
CVE-2022-20924 Vulnerability in dos (CVE-2022-20924)
vulnerability in dos (CVE-2022-20924). Risk of unauthorized operations or information disclosure.
CVE-2022-20922 Vulnerability in c (CVE-2022-20922)
vulnerability in c (CVE-2022-20922). Risk of unauthorized operations or information disclosure.
CVE-2022-20854 Vulnerability in dos (CVE-2022-20854)
vulnerability in dos (CVE-2022-20854). Risk of unauthorized operations or information disclosure.
CVE-2022-42125 Path Traversal in path-traversal (CVE-2022-42125)
path traversal in path-traversal (CVE-2022-42125). Data can be tampered with by attackers.
CVE-2022-42123 Path Traversal in path-traversal (CVE-2022-42123)
path traversal in path-traversal (CVE-2022-42123). Data can be tampered with by attackers.
CVE-2022-42120 SQL Injection in c (CVE-2022-42120)
SQL injection in c (CVE-2022-42120). Successful exploitation can lead to full system takeover. Exploitable via ``namespace``.
CVE-2022-42121 SQL Injection in sqli (CVE-2022-42121)
SQL injection in sqli (CVE-2022-42121). Successful exploitation can lead to full system takeover.
CVE-2022-42122 SQL Injection in sqli (CVE-2022-42122)
SQL injection in sqli (CVE-2022-42122). Successful exploitation can lead to full system takeover. Exploitable via ``title``.
CVE-2022-42118 Cross-Site Scripting (XSS) in liferay (CVE-2022-42118)
cross-site scripting in liferay (CVE-2022-42118). Risk of unauthorized operations or information disclosure. Exploitable via ``tag``.
CVE-2022-42119 Cross-Site Scripting (XSS) in liferay (CVE-2022-42119)
cross-site scripting in liferay (CVE-2022-42119). Risk of unauthorized operations or information disclosure.
CVE-2022-44087 Code Injection in ecisp (CVE-2022-44087)
code injection in ecisp (CVE-2022-44087). Successful exploitation can lead to full system takeover.
CVE-2022-44088 Code Injection in ecisp (CVE-2022-44088)
code injection in ecisp (CVE-2022-44088). Successful exploitation can lead to full system takeover.
CVE-2022-44089 Code Injection in ecisp (CVE-2022-44089)
code injection in ecisp (CVE-2022-44089). Successful exploitation can lead to full system takeover.
CVE-2022-41118 Windows Scripting Languages Remote Code Execution Vulnerability
Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2022-41119 Visual Studio Remote Code Execution Vulnerability
Visual Studio Remote Code Execution Vulnerability
CVE-2022-41106 Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-41107 Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-41088 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-41090 Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
CVE-2022-41056 Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
CVE-2022-41058 Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2022-41061 Microsoft Word Remote Code Execution Vulnerability
Microsoft Word Remote Code Execution Vulnerability

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →