Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2022-44695 |
|
Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
|
| CVE-2022-44696 |
|
Microsoft Office Visio Remote Code Execution Vulnerability
Microsoft Office Visio Remote Code Execution Vulnerability
|
| CVE-2022-44698 KEV |
|
[KEV] Vulnerability in Microsoft defender (CVE-2022-44698)
vulnerability in Microsoft defender (CVE-2022-44698). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-42475 KEV |
|
[KEV] Vulnerability in Fortinet fortios (CVE-2022-42475)
vulnerability in Fortinet fortios (CVE-2022-42475). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-26500 KEV |
|
[KEV] Path Traversal in Veeam backup-replication (CVE-2022-26500)
path traversal in Veeam backup-replication (CVE-2022-26500). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-26501 KEV |
|
[KEV] Vulnerability in Veeam backup-replication (CVE-2022-26501)
vulnerability in Veeam backup-replication (CVE-2022-26501). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-27518 KEV |
|
[KEV] Vulnerability in Citrix application-delivery-controller-adc-and-gateway (CVE-2022-27518)
vulnerability in Citrix application-delivery-controller-adc-and-gateway (CVE-2022-27518). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-4262 KEV |
|
[KEV] Vulnerability in Google chromium-v8 (CVE-2022-4262)
vulnerability in Google chromium-v8 (CVE-2022-4262). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-44960 |
|
Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44960)
cross-site scripting in webtareas-project (CVE-2022-44960). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44961 |
|
Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44961)
cross-site scripting in webtareas-project (CVE-2022-44961). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44962 |
|
Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44962)
cross-site scripting in webtareas-project (CVE-2022-44962). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44944 |
|
Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44944)
cross-site scripting in rukovoditel (CVE-2022-44944). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44946 |
|
Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44946)
cross-site scripting in rukovoditel (CVE-2022-44946). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44947 |
|
Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44947)
cross-site scripting in rukovoditel (CVE-2022-44947). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44948 |
|
Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44948)
cross-site scripting in rukovoditel (CVE-2022-44948). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44949 |
|
Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44949)
cross-site scripting in rukovoditel (CVE-2022-44949). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44950 |
|
Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44950)
cross-site scripting in rukovoditel (CVE-2022-44950). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44951 |
|
Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44951)
cross-site scripting in rukovoditel (CVE-2022-44951). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44952 |
|
Cross-Site Scripting (XSS) in rukovoditel (CVE-2022-44952)
cross-site scripting in rukovoditel (CVE-2022-44952). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44953 |
|
Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44953)
cross-site scripting in webtareas-project (CVE-2022-44953). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44954 |
|
Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44954)
cross-site scripting in webtareas-project (CVE-2022-44954). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44956 |
|
Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44956)
cross-site scripting in webtareas-project (CVE-2022-44956). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44957 |
|
Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44957)
cross-site scripting in webtareas-project (CVE-2022-44957). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44959 |
|
Cross-Site Scripting (XSS) in webtareas-project (CVE-2022-44959)
cross-site scripting in webtareas-project (CVE-2022-44959). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-44290 |
|
SQL Injection in sqli (CVE-2022-44290)
SQL injection in sqli (CVE-2022-44290). Successful exploitation can lead to full system takeover.
|
| CVE-2022-44291 |
|
SQL Injection in sqli (CVE-2022-44291)
SQL injection in sqli (CVE-2022-44291). Successful exploitation can lead to full system takeover.
|
| CVE-2021-35587 KEV |
|
[KEV] Unsafe Deserialization in Oracle fusion-middleware (CVE-2021-35587)
vulnerability in Oracle fusion-middleware (CVE-2021-35587). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-4135 KEV |
|
[KEV] Out-of-Bounds Write in Google chromium-gpu (CVE-2022-4135)
out-of-bounds write in Google chromium-gpu (CVE-2022-4135). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-40842 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-40842)
SSRF in ssrf (CVE-2022-40842). Confidential information can be exposed externally.
|
| CVE-2022-36180 |
|
Cross-Site Scripting (XSS) in fusiondirectory (CVE-2022-36180)
cross-site scripting in fusiondirectory (CVE-2022-36180). Successful exploitation can lead to full system takeover.
|
| CVE-2022-42131 |
|
Vulnerability in liferay (CVE-2022-42131)
vulnerability in liferay (CVE-2022-42131). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-42132 |
|
Information Disclosure in liferay (CVE-2022-42132)
vulnerability in liferay (CVE-2022-42132). Confidential information can be exposed externally.
|
| CVE-2022-42129 |
|
Vulnerability in liferay (CVE-2022-42129)
vulnerability in liferay (CVE-2022-42129). Risk of unauthorized operations or information disclosure. Exploitable via ``formInstanceRecordId``.
|
| CVE-2022-42130 |
|
Vulnerability in liferay (CVE-2022-42130)
vulnerability in liferay (CVE-2022-42130). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-42125 |
|
Path Traversal in path-traversal (CVE-2022-42125)
path traversal in path-traversal (CVE-2022-42125). Data can be tampered with by attackers.
|
| CVE-2022-42126 |
|
Vulnerability in liferay (CVE-2022-42126)
vulnerability in liferay (CVE-2022-42126). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-42127 |
|
Vulnerability in liferay (CVE-2022-42127)
vulnerability in liferay (CVE-2022-42127). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-42128 |
|
Vulnerability in liferay (CVE-2022-42128)
vulnerability in liferay (CVE-2022-42128). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-42123 |
|
Path Traversal in path-traversal (CVE-2022-42123)
path traversal in path-traversal (CVE-2022-42123). Data can be tampered with by attackers.
|
| CVE-2022-42124 |
|
Vulnerability in liferay (CVE-2022-42124)
vulnerability in liferay (CVE-2022-42124). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-42118 |
|
Cross-Site Scripting (XSS) in liferay (CVE-2022-42118)
cross-site scripting in liferay (CVE-2022-42118). Risk of unauthorized operations or information disclosure. Exploitable via ``tag``.
|
| CVE-2022-42119 |
|
Cross-Site Scripting (XSS) in liferay (CVE-2022-42119)
cross-site scripting in liferay (CVE-2022-42119). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-42120 |
|
SQL Injection in c (CVE-2022-42120)
SQL injection in c (CVE-2022-42120). Successful exploitation can lead to full system takeover. Exploitable via ``namespace``.
|
| CVE-2022-42121 |
|
SQL Injection in sqli (CVE-2022-42121)
SQL injection in sqli (CVE-2022-42121). Successful exploitation can lead to full system takeover.
|
| CVE-2022-42122 |
|
SQL Injection in sqli (CVE-2022-42122)
SQL injection in sqli (CVE-2022-42122). Successful exploitation can lead to full system takeover. Exploitable via ``title``.
|
| CVE-2022-41049 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2022-41049)
vulnerability in Microsoft windows (CVE-2022-41049). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-41122 |
|
Microsoft SharePoint Server Spoofing Vulnerability
Microsoft SharePoint Server Spoofing Vulnerability
|
| CVE-2022-41123 |
|
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
|
| CVE-2022-41103 |
|
Microsoft Word Information Disclosure Vulnerability
Microsoft Word Information Disclosure Vulnerability
|
| CVE-2022-41104 |
|
Microsoft Excel Security Feature Bypass Vulnerability
Microsoft Excel Security Feature Bypass Vulnerability
|