Security Vulnerabilities - CVEs Published In 2022
Advancecomp v2.3 contains a segmentation fault.
CVSS Score
5.5
EPSS Score
0.004
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
CVSS Score
5.5
EPSS Score
0.005
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
CVSS Score
5.5
EPSS Score
0.005
Published
2022-08-29
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
CVSS Score
5.5
EPSS Score
0.005
Published
2022-08-29
Cross Site Scripting (XSS) in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field
CVSS Score
4.8
EPSS Score
0.006
Published
2022-08-29
An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.
CVSS Score
10.0
EPSS Score
0.34
Published
2022-08-29
Centreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker Configuration by adding a crafted payload into the name parameter.
CVSS Score
5.4
EPSS Score
0.01
Published
2022-08-29
The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcing comment id's might also be an option but I wouldn't count on it, since it would take a long time to find a valid one).
CVSS Score
7.1
EPSS Score
0.01
Published
2022-08-29
A SQL injection vulnerability in the product_all_one_img and image_product parameters of the ApolloTheme AP PageBuilder component through 2.4.4 for PrestaShop allows unauthenticated attackers to exfiltrate database data.
CVSS Score
9.8
EPSS Score
0.137
Published
2022-08-29
Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code because JavaScript is mishandled.
CVSS Score
7.8
EPSS Score
0.011
Published
2022-08-29