Security Vulnerabilities - CVEs Published In 2022
A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw allows an attacker to take advantage of this issue as the module is handling the parameter insecurely, leading to the password leaking in the logs.
CVSS Score
7.5
EPSS Score
0.008
Published
2022-10-28
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php.
CVSS Score
9.8
EPSS Score
0.009
Published
2022-10-28
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php.
CVSS Score
9.8
EPSS Score
0.007
Published
2022-10-28
SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php.
CVSS Score
9.8
EPSS Score
0.008
Published
2022-10-28
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php.
CVSS Score
9.8
EPSS Score
0.007
Published
2022-10-28
Files or Directories Accessible to External Parties vulnerability in OpenNebula on Linux allows File Discovery.
CVSS Score
6.5
EPSS Score
0.008
Published
2022-10-28
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.
CVSS Score
5.4
EPSS Score
0.005
Published
2022-10-28
SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS_User.php.
CVSS Score
9.8
EPSS Score
0.008
Published
2022-10-28
SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php.
CVSS Score
6.1
EPSS Score
0.005
Published
2022-10-28
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php.
CVSS Score
9.8
EPSS Score
0.009
Published
2022-10-28