Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2022-44945 SQL Injection in sqli (CVE-2022-44945)
SQL injection in sqli (CVE-2022-44945). Successful exploitation can lead to full system takeover.
CVE-2022-44944 Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44944)
cross-site scripting in rukovoditel (CVE-2022-44944). Risk of unauthorized operations or information disclosure.
CVE-2022-44946 Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44946)
cross-site scripting in rukovoditel (CVE-2022-44946). Risk of unauthorized operations or information disclosure.
CVE-2022-44947 Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44947)
cross-site scripting in rukovoditel (CVE-2022-44947). Risk of unauthorized operations or information disclosure.
CVE-2022-44948 Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44948)
cross-site scripting in rukovoditel (CVE-2022-44948). Risk of unauthorized operations or information disclosure.
CVE-2022-44949 Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44949)
cross-site scripting in rukovoditel (CVE-2022-44949). Risk of unauthorized operations or information disclosure.
CVE-2022-44950 Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44950)
cross-site scripting in rukovoditel (CVE-2022-44950). Risk of unauthorized operations or information disclosure.
CVE-2022-44951 Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44951)
cross-site scripting in rukovoditel (CVE-2022-44951). Risk of unauthorized operations or information disclosure.
CVE-2022-44952 Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44952)
cross-site scripting in rukovoditel (CVE-2022-44952). Risk of unauthorized operations or information disclosure.
CVE-2022-44953 Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44953)
cross-site scripting in webtareas-project (CVE-2022-44953). Risk of unauthorized operations or information disclosure.
CVE-2022-44954 Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44954)
cross-site scripting in webtareas-project (CVE-2022-44954). Risk of unauthorized operations or information disclosure.
CVE-2022-44955 Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44955)
cross-site scripting in webtareas-project (CVE-2022-44955). Risk of unauthorized operations or information disclosure.
CVE-2022-44956 Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44956)
cross-site scripting in webtareas-project (CVE-2022-44956). Risk of unauthorized operations or information disclosure.
CVE-2022-44957 Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44957)
cross-site scripting in webtareas-project (CVE-2022-44957). Risk of unauthorized operations or information disclosure.
CVE-2022-44959 Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44959)
cross-site scripting in webtareas-project (CVE-2022-44959). Risk of unauthorized operations or information disclosure.
CVE-2022-44290 SQL Injection in sqli (CVE-2022-44290)
SQL injection in sqli (CVE-2022-44290). Successful exploitation can lead to full system takeover.
CVE-2022-44291 SQL Injection in sqli (CVE-2022-44291)
SQL injection in sqli (CVE-2022-44291). Successful exploitation can lead to full system takeover.
CVE-2022-2807 SQL Injection in sqli (CVE-2022-2807)
SQL injection in sqli (CVE-2022-2807). Successful exploitation can lead to full system takeover.
CVE-2022-46152 OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The funct...
OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The function `cleanup_shm_refs()` is called by both `entry_invoke_command()` and `entry_open_session()`. The...
CVE-2022-45205 SQL Injection in sqli (CVE-2022-45205)
SQL injection in sqli (CVE-2022-45205). Risk of unauthorized operations or information disclosure.
CVE-2022-45206 SQL Injection in sqli (CVE-2022-45206)
SQL injection in sqli (CVE-2022-45206). Successful exploitation can lead to full system takeover.
CVE-2022-45207 SQL Injection in sqli (CVE-2022-45207)
SQL injection in sqli (CVE-2022-45207). Successful exploitation can lead to full system takeover.
CVE-2022-45208 SQL Injection in sqli (CVE-2022-45208)
SQL injection in sqli (CVE-2022-45208). Risk of unauthorized operations or information disclosure.
CVE-2022-45210 SQL Injection in sqli (CVE-2022-45210)
SQL injection in sqli (CVE-2022-45210). Risk of unauthorized operations or information disclosure.
CVE-2022-37721 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2022-37721)
cross-site scripting in privilege-escalation (CVE-2022-37721). Successful exploitation can lead to full system takeover.
CVE-2022-37720 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2022-37720)
cross-site scripting in privilege-escalation (CVE-2022-37720). Successful exploitation can lead to full system takeover.
CVE-2022-35501 Cross-Site Scripting (XSS) in amasty (CVE-2022-35501)
cross-site scripting in amasty (CVE-2022-35501). Risk of unauthorized operations or information disclosure.
CVE-2022-35500 Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality.
Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality.
CVE-2022-37773 SQL Injection in sqli (CVE-2022-37773)
SQL injection in sqli (CVE-2022-37773). Confidential information can be exposed externally.
CVE-2022-42989 Cross-Site Scripting (XSS) in sankhya (CVE-2022-42989)
cross-site scripting in sankhya (CVE-2022-42989). Successful exploitation can lead to full system takeover.
CVE-2022-40842 SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-40842)
SSRF in ssrf (CVE-2022-40842). Confidential information can be exposed externally.
CVE-2022-36180 Cross-Site Scripting (XSS) in fusiondirectory (CVE-2022-36180)
cross-site scripting in fusiondirectory (CVE-2022-36180). Successful exploitation can lead to full system takeover.
CVE-2022-20950 Vulnerability in dos (CVE-2022-20950)
vulnerability in dos (CVE-2022-20950). Risk of unauthorized operations or information disclosure.
CVE-2022-20943 Vulnerability in c (CVE-2022-20943)
vulnerability in c (CVE-2022-20943). Risk of unauthorized operations or information disclosure.
CVE-2022-20946 Vulnerability in dos (CVE-2022-20946)
vulnerability in dos (CVE-2022-20946). Risk of unauthorized operations or information disclosure.
CVE-2022-20947 Buffer Overflow in dos (CVE-2022-20947)
vulnerability in dos (CVE-2022-20947). Risk of unauthorized operations or information disclosure.
CVE-2022-20927 Vulnerability in dos (CVE-2022-20927)
vulnerability in dos (CVE-2022-20927). Risk of unauthorized operations or information disclosure.
CVE-2022-20924 Vulnerability in dos (CVE-2022-20924)
vulnerability in dos (CVE-2022-20924). Risk of unauthorized operations or information disclosure.
CVE-2022-20922 Vulnerability in c (CVE-2022-20922)
vulnerability in c (CVE-2022-20922). Risk of unauthorized operations or information disclosure.
CVE-2022-20854 Vulnerability in dos (CVE-2022-20854)
vulnerability in dos (CVE-2022-20854). Risk of unauthorized operations or information disclosure.
CVE-2022-42125 Path Traversal in path-traversal (CVE-2022-42125)
path traversal in path-traversal (CVE-2022-42125). Data can be tampered with by attackers.
CVE-2022-42123 Path Traversal in path-traversal (CVE-2022-42123)
path traversal in path-traversal (CVE-2022-42123). Data can be tampered with by attackers.
CVE-2022-42120 SQL Injection in c (CVE-2022-42120)
SQL injection in c (CVE-2022-42120). Successful exploitation can lead to full system takeover. Exploitable via ``namespace``.
CVE-2022-42121 SQL Injection in sqli (CVE-2022-42121)
SQL injection in sqli (CVE-2022-42121). Successful exploitation can lead to full system takeover.
CVE-2022-42122 SQL Injection in sqli (CVE-2022-42122)
SQL injection in sqli (CVE-2022-42122). Successful exploitation can lead to full system takeover. Exploitable via ``title``.
CVE-2022-42118 Cross-Site Scripting (XSS) in liferay (CVE-2022-42118)
cross-site scripting in liferay (CVE-2022-42118). Risk of unauthorized operations or information disclosure. Exploitable via ``tag``.
CVE-2022-42119 Cross-Site Scripting (XSS) in liferay (CVE-2022-42119)
cross-site scripting in liferay (CVE-2022-42119). Risk of unauthorized operations or information disclosure.
CVE-2022-44087 Code Injection in ecisp (CVE-2022-44087)
code injection in ecisp (CVE-2022-44087). Successful exploitation can lead to full system takeover.
CVE-2022-44088 Code Injection in ecisp (CVE-2022-44088)
code injection in ecisp (CVE-2022-44088). Successful exploitation can lead to full system takeover.
CVE-2022-44089 Code Injection in ecisp (CVE-2022-44089)
code injection in ecisp (CVE-2022-44089). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →