Security Vulnerabilities - CVEs Published In 2022
Improper authentication in firmware for some Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS Score
5.3
EPSS Score
0.003
Published
2022-09-20
Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score
4.1
EPSS Score
0.002
Published
2022-09-20
Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score
7.9
EPSS Score
0.002
Published
2022-09-20
Cloudreve versions v1.0.0 through v3.5.3 are vulnerable to Stored Cross-Site Scripting (XSS), via the file upload functionality. A low privileged user will be able to share a file with an admin user, which could lead to privilege escalation.
CVSS Score
5.4
EPSS Score
0.006
Published
2022-09-20
HTML injection attack is closely related to Cross-site Scripting (XSS). HTML injection uses HTML to deface the page. XSS, as the name implies, injects JavaScript into the page. Both attacks exploit insufficient validation of user input.
CVSS Score
4.3
EPSS Score
0.007
Published
2022-09-20
In versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL parameters and to write arbitrary data to the MySQL database, could cause this data to be deserialized by Apache InLong, potentially leading to Remote Code Execution on the Apache InLong server. Users are advised to upgrade to Apache InLong 1.3.0 or newer.
CVSS Score
8.8
EPSS Score
0.027
Published
2022-09-20
Kayrasoft product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2.
CVSS Score
9.4
EPSS Score
0.008
Published
2022-09-20
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score
5.4
EPSS Score
0.006
Published
2022-09-20
Code Injection in GitHub repository microweber/microweber prior to 1.3.2.
CVSS Score
4.3
EPSS Score
0.019
Published
2022-09-20
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
CVSS Score
6.3
EPSS Score
0.006
Published
2022-09-20