Security Vulnerabilities - CVEs Published In 2022
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) accesses a resource using an incompatible type, which could allow an attacker to crash the server with a malicious payload.
CVSS Score
8.6
EPSS Score
0.011
Published
2022-09-23
MZ Automation's libIEC61850 (versions 1.4 and prior; version 1.5 prior to commit a3b04b7bc4872a5a39e5de3fdc5fbde52c09e10e) is vulnerable to a stack-based buffer overflow, which could allow an attacker to crash the device or remotely execute arbitrary code.
CVSS Score
10.0
EPSS Score
0.016
Published
2022-09-23
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PCA Predict plugin <= 1.0.3 at WordPress.
CVSS Score
4.8
EPSS Score
0.006
Published
2022-09-23
Authenticated (subscriber+) Race Condition vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress allows attackers to increase/decrease votes.
CVSS Score
4.3
EPSS Score
0.005
Published
2022-09-23
Cross-Site Request Forgery (CSRF) vulnerability in Rate my Post – WP Rating System plugin <= 3.3.4 at WordPress.
CVSS Score
4.3
EPSS Score
0.003
Published
2022-09-23
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CPO Shortcodes plugin <= 1.5.0 at WordPress.
CVSS Score
4.8
EPSS Score
0.006
Published
2022-09-23
Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat.
CVSS Score
9.8
EPSS Score
0.099
Published
2022-09-23
Tenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set
CVSS Score
9.8
EPSS Score
0.012
Published
2022-09-23
Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service (DoS) or Remote Code Execution (RCE) via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExternal parameters.
CVSS Score
9.8
EPSS Score
0.141
Published
2022-09-23
Tenda AC18 router V15.03.05.19 contains a stack overflow vulnerability in the formSetQosBand->FUN_0007db78 function with the request /goform/SetNetControlList/
CVSS Score
7.2
EPSS Score
0.011
Published
2022-09-23