Security Vulnerabilities - CVEs Published In 2022
H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateIpv6Params.
CVSS Score
9.8
EPSS Score
0.012
Published
2022-08-25
H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateSnat.
CVSS Score
9.8
EPSS Score
0.013
Published
2022-08-25
H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateMacClone.
CVSS Score
9.8
EPSS Score
0.012
Published
2022-08-25
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint.
CVSS Score
5.4
EPSS Score
0.007
Published
2022-08-25
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.
CVSS Score
9.8
EPSS Score
0.015
Published
2022-08-25
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoint.
CVSS Score
5.4
EPSS Score
0.006
Published
2022-08-25
MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.
CVSS Score
9.8
EPSS Score
0.015
Published
2022-08-25
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.
CVSS Score
5.4
EPSS Score
0.006
Published
2022-08-25
A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash which could lead to a denial of service attack.
CVSS Score
7.5
EPSS Score
0.063
Published
2022-08-25
TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi.
CVSS Score
7.8
EPSS Score
0.01
Published
2022-08-25