Security Vulnerabilities - CVEs Published In 2022
Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.
CVSS Score
8.8
EPSS Score
0.014
Published
2022-10-11
Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.
CVSS Score
8.8
EPSS Score
0.013
Published
2022-10-11
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manage_user&id=.
CVSS Score
7.2
EPSS Score
0.008
Published
2022-10-11
A Stored XSS issue in Student Clearance System v.1.0 allows the injection of arbitrary JavaScript in the Student registration form.
CVSS Score
5.4
EPSS Score
0.006
Published
2022-10-11
Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 at WordPress.
CVSS Score
4.8
EPSS Score
0.006
Published
2022-10-11
Unauthenticated Options Change and Content Injection vulnerability in Qube One Redirection for Contact Form 7 plugin <= 2.4.0 at WordPress allows attackers to change options and inject scripts into the footer HTML. Requires an additional extension (plugin) AccessiBe.
CVSS Score
7.5
EPSS Score
0.007
Published
2022-10-11
Dell Container Storage Modules 1.2 contains an OS Command Injection in goiscsi and gobrick libraries. A remote unauthenticated attacker could exploit this vulnerability leading to modification of intended OS command execution.
CVSS Score
8.8
EPSS Score
0.024
Published
2022-10-11
Dell Hybrid Client below 1.8 version contains a Zip Bomb Vulnerability in UI. A guest privilege attacker could potentially exploit this vulnerability, leading to system files modification.
CVSS Score
7.1
EPSS Score
0.006
Published
2022-10-11
Dell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability. A WMS privilege attacker could potentially exploit this vulnerability, leading to DHC system not being accessible.
CVSS Score
6.5
EPSS Score
0.007
Published
2022-10-11
Dell Hybrid Client below 1.8 version contains a gedit vulnerability. A guest attacker could potentially exploit this vulnerability, allowing deletion of user and some system files and folders.
CVSS Score
7.3
EPSS Score
0.004
Published
2022-10-11