Security Vulnerabilities - CVEs Published In 2022
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA
Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.
CVSS Score
8.8
EPSS Score
0.003
Published
2022-11-21
Sourcecodester Event Registration App v1.0 was discovered to contain multiple CSV injection vulnerabilities via the First Name, Contact and Remarks fields. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file.
CVSS Score
7.8
EPSS Score
0.006
Published
2022-11-21
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter.
CVSS Score
9.8
EPSS Score
0.007
Published
2022-11-21
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic.
CVSS Score
9.8
EPSS Score
0.011
Published
2022-11-21
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic.
CVSS Score
9.8
EPSS Score
0.008
Published
2022-11-21
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart.
CVSS Score
9.8
EPSS Score
0.007
Published
2022-11-21
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow. via function formWifiWpsOOB.
CVSS Score
9.8
EPSS Score
0.007
Published
2022-11-21
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set.
CVSS Score
9.8
EPSS Score
0.007
Published
2022-11-21
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.
CVSS Score
9.8
EPSS Score
0.007
Published
2022-11-21
Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName.
CVSS Score
9.8
EPSS Score
0.007
Published
2022-11-21