Security Vulnerabilities - CVEs Published In 2022
TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.
CVSS Score
9.8
EPSS Score
0.023
Published
2022-08-28
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Command Injection via cgibin, ssdpcgi_main.
CVSS Score
9.8
EPSS Score
0.269
Published
2022-08-28
Trendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.
CVSS Score
9.8
EPSS Score
0.012
Published
2022-08-28
D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.
CVSS Score
9.8
EPSS Score
0.01
Published
2022-08-28
D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZED_GROUP=1 value, as demonstrated by a request for getcfg.php.
CVSS Score
9.8
EPSS Score
0.015
Published
2022-08-28
Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 0.10.38.
CVSS Score
4.3
EPSS Score
0.004
Published
2022-08-28
Use After Free in GitHub repository vim/vim prior to 9.0.0286.
CVSS Score
7.8
EPSS Score
0.005
Published
2022-08-28
Zaver through 2020-12-15 allows directory traversal via the GET /.. substring.
CVSS Score
7.5
EPSS Score
0.047
Published
2022-08-27
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVSS Score
5.5
EPSS Score
0.003
Published
2022-08-27
The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party.
CVSS Score
9.8
EPSS Score
0.016
Published
2022-08-27