Latest CVE Feed
-
5.5
MEDIUMCVE-2022-44874
wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component op_CallIndirect at /m3_exec.h.... Read more
Affected Products : wasm3- Published: Dec. 13, 2022
- Modified: Apr. 22, 2025
-
4.6
MEDIUMCVE-2022-44636
The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2... Read more
Affected Products : t-oscpakuc_firmware t-oscpdeuc_firmware t-oscpuabc_firmware t-nkm2akuc_firmware t-nkm2deuc_firmware t-nkm2uabc_firmware t-nklakuc_firmware t-nkldeuc_firmware t-nkluabc_firmware t-ksu2eakuc_firmware +20 more products- Published: Dec. 13, 2022
- Modified: Apr. 22, 2025
-
6.1
MEDIUMCVE-2022-44575
A vulnerability has been identified in PLM Help Server V4.2 (All versions). A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the affected application that could allow an attacker to execute malicious javascript code by t... Read more
Affected Products : plm_help_server- Published: Dec. 13, 2022
- Modified: Apr. 22, 2025
-
5.3
MEDIUMCVE-2022-31698
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to trigger a denial-of-service condition by sending a specially crafte... Read more
- Published: Dec. 13, 2022
- Modified: Apr. 22, 2025
-
9.8
CRITICALCVE-2022-46364
A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. ... Read more
Affected Products : cxf- Published: Dec. 13, 2022
- Modified: Apr. 22, 2025
-
7.5
HIGHCVE-2022-46363
A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration. The vulnerability only applies when the CXFServlet is configured with both the static-resources-list and redirect... Read more
Affected Products : cxf- Published: Dec. 13, 2022
- Modified: Apr. 22, 2025
-
9.8
CRITICALCVE-2022-46353
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA... Read more
- Published: Dec. 13, 2022
- Modified: Apr. 22, 2025
-
7.5
HIGHCVE-2022-46352
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA... Read more
- Published: Dec. 13, 2022
- Modified: Apr. 22, 2025
-
5.5
MEDIUMCVE-2022-46351
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA... Read more
- Published: Dec. 13, 2022
- Modified: Apr. 22, 2025
-
6.1
MEDIUMCVE-2022-46350
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA... Read more
- Published: Dec. 13, 2022
- Modified: Apr. 22, 2025
-
7.2
HIGHCVE-2022-46117
Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=view_product&id=.... Read more
Affected Products : helmet_store_showroom_site- Published: Dec. 14, 2022
- Modified: Apr. 22, 2025
-
8.8
HIGHCVE-2022-46074
Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missing CSRF protection.... Read more
Affected Products : helmet_store_showroom- Published: Dec. 14, 2022
- Modified: Apr. 22, 2025
-
6.1
MEDIUMCVE-2022-46073
Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).... Read more
Affected Products : helmet_store_showroom- Published: Dec. 14, 2022
- Modified: Apr. 22, 2025
-
9.8
CRITICALCVE-2022-46072
Helmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection.... Read more
Affected Products : helmet_store_showroom- Published: Dec. 14, 2022
- Modified: Apr. 22, 2025
-
9.8
CRITICALCVE-2022-46071
There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access.... Read more
Affected Products : helmet_store_showroom_site- Published: Dec. 14, 2022
- Modified: Apr. 22, 2025
-
4.5
MEDIUMCVE-2022-46062
Gym Management System v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).... Read more
Affected Products : gym_management_system- Published: Dec. 13, 2022
- Modified: Apr. 22, 2025
-
6.1
MEDIUMCVE-2022-46061
AeroCMS v0.0.1 is vulnerable to ClickJacking.... Read more
Affected Products : aerocms- Published: Dec. 13, 2022
- Modified: Apr. 22, 2025
-
7.5
HIGHCVE-2022-45688
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.... Read more
- Published: Dec. 13, 2022
- Modified: Apr. 22, 2025
-
7.8
HIGHCVE-2022-44910
Binbloom 2.0 was discovered to contain a heap buffer overflow via the read_pointer function at /binbloom-master/src/helpers.c.... Read more
Affected Products : binbloom- Published: Dec. 14, 2022
- Modified: Apr. 22, 2025
-
5.5
MEDIUMCVE-2022-3106
An issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c lacks check of the return value of kmalloc().... Read more
Affected Products : linux_kernel- Published: Dec. 14, 2022
- Modified: Apr. 22, 2025