Overview 857 matches · 84 in Waratek scope · 20 protected · 0 exploited · 0 CISA KEV · 0 public PoC
Protected by Waratek
20
2.3%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
64
7.5%
Outside Waratek scope
46
5.4%
Not applicable
727
84.8%
Withdrawn CVE
0
0.0%
blocked by ARMR today
20
2.3%
partly blocked
0
0.0%
not blocked
837
97.7%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
857
100.0%
No public exploit
0
0.0%
split by
peak 167 / year
19961
Not applicable1
High1
not blocked1
Forecast only1
19972
Not applicable2
Low2
not blocked2
Forecast only2
19980
19990
20001
Outside Waratek scope1
High1
not blocked1
Forecast only1
20012
Not applicable2
Medium2
not blocked2
Forecast only2
20029
No exploit published2
Not applicable7
Critical1
High3
Medium3
Low2
not blocked9
Forecast only9
20031
Not applicable1
Critical1
not blocked1
Forecast only1
20041
Not applicable1
Medium1
not blocked1
Forecast only1
200511
Not applicable11
High5
Medium6
not blocked11
Forecast only11
20066
Not applicable6
High4
Medium2
not blocked6
Forecast only6
20075
Not applicable5
High4
Medium1
not blocked5
Forecast only5
20089
Outside Waratek scope1
Not applicable8
High8
Medium1
not blocked9
Forecast only9
20093
Not applicable3
Medium3
not blocked3
Forecast only3
20109
No exploit published1
Not applicable8
Critical1
High6
Medium2
not blocked9
Forecast only9
20114
Not applicable4
Critical1
High2
Medium1
not blocked4
Forecast only4
201246
Not applicable46
High4
Medium42
not blocked46
Forecast only46
201321
No exploit published1
Outside Waratek scope1
Not applicable19
High15
Medium6
not blocked21
Forecast only21
201416
Protected by Waratek2
Not applicable14
High4
Medium12
blocked by ARMR today2
not blocked14
Forecast only16
201519
Outside Waratek scope2
Not applicable17
High10
Medium8
Low1
not blocked19
Forecast only19
201632
Protected by Waratek4
No exploit published1
Outside Waratek scope2
Not applicable25
Critical5
High16
Medium9
Low2
blocked by ARMR today4
not blocked28
Forecast only32
201723
No exploit published1
Outside Waratek scope1
Not applicable21
Critical8
High13
Medium2
not blocked23
Forecast only23
201833
Protected by Waratek1
Outside Waratek scope1
Not applicable31
Critical9
High17
Medium7
blocked by ARMR today1
not blocked32
Forecast only33
201952
Protected by Waratek1
No exploit published2
Outside Waratek scope7
Not applicable42
Critical17
High26
Medium9
blocked by ARMR today1
not blocked51
Forecast only52
202066
No exploit published8
Outside Waratek scope10
Not applicable48
Critical21
High35
Medium10
not blocked66
Forecast only66
2021167
Protected by Waratek2
No exploit published22
Outside Waratek scope15
Not applicable128
Critical37
High86
Medium44
blocked by ARMR today2
not blocked165
Forecast only167
202297
Protected by Waratek5
No exploit published11
Outside Waratek scope1
Not applicable80
Critical22
High41
Medium34
blocked by ARMR today5
not blocked92
Forecast only97
2023114
Protected by Waratek3
No exploit published9
Not applicable102
Critical26
High60
Medium28
blocked by ARMR today3
not blocked111
Forecast only114
202485
Protected by Waratek1
No exploit published6
Outside Waratek scope3
Not applicable75
Critical16
High59
Medium10
blocked by ARMR today1
not blocked84
Forecast only85
202517
Protected by Waratek1
Outside Waratek scope1
Not applicable15
Critical5
High7
Medium5
blocked by ARMR today1
not blocked16
Forecast only17
20265
Not applicable5
Critical3
High2
not blocked5
Forecast only5
19961999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2023-26477 | Critical | 2023-03-02 | No exploit published | Forecast only | XWiki Platform is a generic wiki platform. Starting in versions 6.3-rc-1 and 6.2.4, it's possible to inject arbitrary wiki syntax including Groovy, Python and Velocity script macros via the `newThemeName` request parameter (URL parameter), in combination with additional parameters. This has been patched in the supported versions 13.10.10, 14.9-rc-1, and 14.4.6. As a workaround, it is possible to edit `FlamingoThemesCode.WebHomeSheet` and manually perform the changes from the patch fixing the issue. |
| CVE-2023-26475 | Critical | 2023-03-02 | No exploit published | Forecast only | XWiki Platform is a generic wiki platform. Starting in version 2.3-milestone-1, the annotation displayer does not execute the content in a restricted context. This allows executing anything with the right of the author of any document by annotating the document. This has been patched in XWiki 13.10.11, 14.4.7 and 14.10. There is no easy workaround except to upgrade. |
| CVE-2022-36021 | Medium | 2023-03-01 | Not applicable | Forecast only | Redis is an in-memory database that persists on disk. Authenticated users can use string matching commands (like `SCAN` or `KEYS`) with a specially crafted pattern to trigger a denial-of-service attack on Redis, causing it to hang and consume 100% CPU time. The problem is fixed in Redis versions 6.0.18, 6.2.11, 7.0.9. |
| CVE-2022-48343 | Medium | 2023-02-23 | Not applicable | Forecast only | In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process. |
| CVE-2022-29273 | Medium | 2023-02-22 | Not applicable | Forecast only | pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters. |
| CVE-2023-25762 | Medium | 2023-02-15 | No exploit published | Forecast only | Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names. |
| CVE-2023-24580 | High | 2023-02-15 | Not applicable | Forecast only | An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack. |
| CVE-2023-23836 | High | 2023-02-15 | Not applicable | Forecast only | SolarWinds Platform version 2022.4.1 was found to be susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to the SolarWinds Web Console to execute arbitrary commands. |
| CVE-2022-38111 | High | 2023-02-15 | Not applicable | Forecast only | SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands. |
| CVE-2023-0286 | High | 2023-02-08 | Not applicable | Forecast only | There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call, enabling them to read memory contents or enact a denial of service. In most cases, the attack requires the attacker to provide both the certificate chain and CRL, neither of which need to have a valid signature. If the attacker only controls one of these inputs, the other input must already contain an X.400 address as a CRL distribution point, which is uncommon. As such, this vulnerability is most likely to only affect applications which have implemented their own functionality for retrieving CRLs over a network. |
| CVE-2023-23076 | Critical | 2023-02-01 | Not applicable | Forecast only | OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules. |
| CVE-2023-23074 | Medium | 2023-02-01 | Not applicable | Forecast only | Cross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component. |
| CVE-2023-22374 | High | 2023-02-01 | Not applicable | Forecast only | A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2022-41142 | High | 2023-01-26 | Not applicable | Forecast only | This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges to the level of an administrator. Was ZDI-CAN-18304. |
| CVE-2023-22458 | Medium | 2023-01-20 | Not applicable | Forecast only | Redis is an in-memory database that persists on disk. Authenticated users can issue a `HRANDFIELD` or `ZRANDMEMBER` command with specially crafted arguments to trigger a denial-of-service by crashing Redis with an assertion failure. This problem affects Redis versions 6.2 or newer up to but not including 6.2.9 as well as versions 7.0 up to but not including 7.0.8. Users are advised to upgrade. There are no known workarounds for this vulnerability. |
| CVE-2022-46889 | Medium | 2023-01-19 | Not applicable | Forecast only | A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to permanently inject arbitrary web script or HTML via the title parameter used in /subtitles.php. |
| CVE-2022-37436 | Medium | 2023-01-17 | Not applicable | Forecast only | Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client. |
| CVE-2022-23521 | Critical | 2023-01-17 | Not applicable | Forecast only | Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `.gitattributes` file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this pattern. When parsing gitattributes, multiple integer overflows can occur when there is a huge number of path patterns, a huge number of attributes for a single pattern, or when the declared attribute names are huge. These overflows can be triggered via a crafted `.gitattributes` file that may be part of the commit history. Git silently splits lines longer than 2KB when parsing gitattributes from a file, but not when parsing them from the index. Consequentially, the failure mode depends on whether the file exists in the working tree, the index or both. This integer overflow can result in arbitrary heap reads and writes, which may result in remote code execution. The problem has been patched in the versions published on 2023-01-17, going back to v2.30.7. Users are advised to upgrade. There are no known workarounds for this issue. |
| CVE-2023-21758 | High | 2023-01-10 | Not applicable | Forecast only | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
| CVE-2023-21547 | High | 2023-01-10 | Not applicable | Forecast only | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability |
| CVE-2022-47523 | Critical | 2023-01-05 | Not applicable | Forecast only | Zoho ManageEngine Access Manager Plus before 4309, Password Manager Pro before 12210, and PAM360 before 5801 are vulnerable to SQL Injection. |
| CVE-2022-43396 | High | 2022-12-30 | Protected by Waratek | Forecast only | In the fix for CVE-2022-24697, a blacklist is used to filter user input commands. But there is a risk of being bypassed. The user can control the command by controlling the kylin.engine.spark-cmd parameter of conf. |
| CVE-2022-47938 | Medium | 2022-12-23 | Not applicable | Forecast only | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT. |
| CVE-2022-44456 | Critical | 2022-12-19 | Not applicable | Forecast only | CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the product is running by sending a specially crafted request. |
| CVE-2022-44690 | High | 2022-12-13 | Not applicable | Forecast only | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2022-41076 | High | 2022-12-13 | Not applicable | Forecast only | PowerShell Remote Code Execution Vulnerability |
| CVE-2022-44635 | High | 2022-11-29 | Not applicable | Forecast only | Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability in a file upload component of Apache Fineract, allowing an attacker to run remote code. This issue affects Apache Fineract version 1.8.0 and prior versions. We recommend users to upgrade to 1.8.1. |
| CVE-2022-40770 | High | 2022-11-23 | Not applicable | Forecast only | Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. This can be exploited by high-privileged users. |
| CVE-2022-42904 | High | 2022-11-18 | Not applicable | Forecast only | Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings. |
| CVE-2022-45402 | Medium | 2022-11-15 | Not applicable | Forecast only | In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint. |
| CVE-2022-43672 | Critical | 2022-11-12 | Not applicable | Forecast only | Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection (in a different software component relative to CVE-2022-43671. |
| CVE-2022-43671 | Critical | 2022-11-12 | Not applicable | Forecast only | Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection. |
| CVE-2022-36958 | High | 2022-10-20 | Not applicable | Forecast only | SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands. |
| CVE-2022-38421 | High | 2022-10-14 | Not applicable | Forecast only | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but does require administrator privileges. |
| CVE-2022-38419 | High | 2022-10-14 | Not applicable | Forecast only | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction. |
| CVE-2022-38418 | Critical | 2022-10-14 | Not applicable | Forecast only | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. |
| CVE-2022-35711 | Critical | 2022-10-14 | Not applicable | Forecast only | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server. |
| CVE-2022-35690 | Critical | 2022-10-14 | Not applicable | Forecast only | Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server. |
| CVE-2022-24697 | Critical | 2022-10-13 | Protected by Waratek | Forecast only | Kylin's cube designer function has a command injection vulnerability when overwriting system parameters in the configuration overwrites menu. RCE can be implemented by closing the single quotation marks around the parameter value of “-- conf=” to inject any operating system command into the command line parameters. This vulnerability affects Kylin 2 version 2.6.5 and earlier, Kylin 3 version 3.1.2 and earlier, and Kylin 4 version 4.0.1 and earlier. |
| CVE-2022-38053 | High | 2022-10-11 | Not applicable | Forecast only | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2022-38044 | High | 2022-10-11 | Not applicable | Forecast only | Windows CD-ROM File System Driver Remote Code Execution Vulnerability |
| CVE-2022-39288 | High | 2022-10-10 | Not applicable | Forecast only | fastify is a fast and low overhead web framework, for Node.js. Affected versions of fastify are subject to a denial of service via malicious use of the Content-Type header. An attacker can send an invalid Content-Type header that can cause the application to crash. This issue has been addressed in commit `fbb07e8d` and will be included in release version 4.8.1. Users are advised to upgrade. Users unable to upgrade may manually filter out http content with malicious Content-Type headers. |
| CVE-2022-36961 | High | 2022-09-30 | Not applicable | Forecast only | A vulnerable component of Orion Platform was vulnerable to SQL Injection, an authenticated attacker could leverage this for privilege escalation or remote code execution. |
| CVE-2022-2753 | Medium | 2022-09-19 | Not applicable | Forecast only | The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not sanitise and escape some of the reservation user inputs, allowing unauthenticated attackers to perform Cross-Site Scripting attacks logged in admin viewing the malicious reservation made |
| CVE-2022-40300 | Critical | 2022-09-16 | Not applicable | Forecast only | Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 before 4305 have multiple SQL injection vulnerabilities. |
| CVE-2022-37961 | High | 2022-09-13 | Not applicable | Forecast only | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2022-37958 | High | 2022-09-13 | Not applicable | Forecast only | SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability |
| CVE-2022-35823 | High | 2022-09-13 | Not applicable | Forecast only | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2022-37860 | Critical | 2022-09-12 | Not applicable | Forecast only | The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vulnerability. |
| CVE-2022-39810 | Medium | 2022-09-09 | Not applicable | Forecast only | An issue was discovered in WSO2 Enterprise Integrator 6.4.0. A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in the Management Console under /carbon/ndatasource/validateconnection/ajaxprocessor.jsp via the driver parameter. Session hijacking or similar attacks would not be possible. |
| CVE-2022-36096 | Critical | 2022-09-08 | No exploit published | Forecast only | The XWiki Platform Index UI is an Index of all pages, attachments, orphans and deleted pages and attachments for XWiki Platform, a generic wiki platform. Prior to versions 13.10.6 and 14.3, it's possible to store JavaScript which will be executed by anyone viewing the deleted attachments index with an attachment containing javascript in its name. This issue has been patched in XWiki 13.10.6 and 14.3. As a workaround, modify fix the vulnerability by editing the wiki page `XWiki.DeletedAttachments` with the object editor, open the `JavaScriptExtension` object and apply on the content the changes that can be found on the fix commit. |
| CVE-2022-25813 | High | 2022-09-02 | Not applicable | Forecast only | In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can insert a malicious content in a message “Subject” field from the "Contact us" page. Then a party manager needs to list the communications in the party component to activate the SSTI. A RCE is then possible. |
| CVE-2022-38772 | High | 2022-08-29 | Not applicable | Forecast only | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 125658, 126003, 126105, and 126120 allow authenticated users to make database changes that lead to remote code execution in the NMAP feature. |
| CVE-2022-30534 | High | 2022-08-22 | Not applicable | Forecast only | An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability. |
| CVE-2022-34258 | Medium | 2022-08-16 | Not applicable | Forecast only | Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker with admin privileges to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. |
| CVE-2022-37024 | High | 2022-08-10 | Not applicable | Forecast only | Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, and OpUtils before 2022-07-29 through 2022-07-30 ( 125658, 126003, 126105, and 126120) allow authenticated users to make database changes that lead to remote code execution. |
| CVE-2022-36801 | Medium | 2022-08-10 | Not applicable | Forecast only | Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting (RXSS) vulnerability in the TeamManagement.jspa endpoint. The affected versions are before version 8.20.8. |
| CVE-2022-28732 | Medium | 2022-08-04 | No exploit published | Forecast only | A carefully crafted request on WeblogPlugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.11.3 or later. |
| CVE-2022-28731 | Medium | 2022-08-04 | No exploit published | Forecast only | A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before 2.11.3, which could allow the attacker to modify the email associated with the attacked account, and then a reset password request from the login page. |
| CVE-2022-28730 | Medium | 2022-08-04 | No exploit published | Forecast only | A carefully crafted request on AJAXPreview.jsp could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. This vulnerability leverages CVE-2021-40369, where the Denounce plugin dangerously renders user-supplied URLs. Upon re-testing CVE-2021-40369, it appears that the patch was incomplete as it was still possible to insert malicious input via the Denounce plugin. Apache JSPWiki users should upgrade to 2.11.3 or later. |
| CVE-2022-27166 | Medium | 2022-08-04 | No exploit published | Forecast only | A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. |
| CVE-2022-30287 | High | 2022-07-28 | Not applicable | Forecast only | Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class. This then leads to arbitrary deserialization of PHP objects. |
| CVE-2022-35869 | Critical | 2022-07-25 | Not applicable | Forecast only | This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentication is not required to exploit this vulnerability. The specific flaw exists within com.inductiveautomation.ignition.gateway.web.pages. The issue results from the lack of proper authentication prior to access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-17211. |
| CVE-2022-35650 | High | 2022-07-25 | Not applicable | Forecast only | The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature is only available to teachers, managers and admins by default. |
| CVE-2022-33318 | Critical | 2022-07-20 | Not applicable | Forecast only | Deserialization of Untrusted Data vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 to 10.97.1, Mitsubishi Electric ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric Iconics Digital Solutions ICONICS Suite versions 10.97 to 10.97.1, Mitsubishi Electric GENESIS32 versions 9.7 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS32 versions 9.7 and prior, and Mitsubishi Electric MC Works64 versions 4.04E and prior allows a remote unauthenticated attacker to execute an arbitrary malicious code by sending specially crafted packets to the GENESIS64, ICONICS Suite, GENESIS32, or MC Works64 server. |
| CVE-2022-21550 | Medium | 2022-07-19 | Not applicable | Forecast only | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.36 and prior, 7.5.26 and prior, 7.6.22 and prior and and 8.0.29 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). |
| CVE-2022-31097 | High | 2022-07-15 | Outside Waratek scope | Forecast only | Grafana is an open-source platform for monitoring and observability. Versions on the 8.x and 9.x branch prior to 9.0.3, 8.5.9, 8.4.10, and 8.3.10 are vulnerable to stored cross-site scripting via the Unified Alerting feature of Grafana. An attacker can exploit this vulnerability to escalate privilege from editor to admin by tricking an authenticated admin to click on a link. Versions 9.0.3, 8.5.9, 8.4.10, and 8.3.10 contain a patch. As a workaround, it is possible to disable alerting or use legacy alerting. |
| CVE-2022-32215 | Medium | 2022-07-14 | Not applicable | Forecast only | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS). |
| CVE-2022-32214 | Medium | 2022-07-14 | Not applicable | Forecast only | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). |
| CVE-2022-30216 | High | 2022-07-12 | Not applicable | Forecast only | Windows Server Service Tampering Vulnerability |
| CVE-2022-25046 | Critical | 2022-07-07 | Not applicable | Forecast only | A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request. |
| CVE-2022-2230 | High | 2022-07-01 | Not applicable | Forecast only | A Stored Cross-Site Scripting vulnerability in the project settings page in GitLab CE/EE affecting all versions from 14.4 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to execute arbitrary JavaScript code in GitLab on a victim's behalf. |
| CVE-2022-34783 | Medium | 2022-06-30 | No exploit published | Forecast only | Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. |
| CVE-2022-34777 | Medium | 2022-06-30 | No exploit published | Forecast only | Jenkins GitLab Plugin 1.5.34 and earlier does not escape multiple fields inserted into the description of webhook-triggered builds, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. |
| CVE-2022-31061 | Critical | 2022-06-28 | Not applicable | Forecast only | GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions there is a SQL injection vulnerability which is possible on login page. No user credentials are required to exploit this vulnerability. Users are advised to upgrade as soon as possible. There are no known workarounds for this issue. |
| CVE-2022-34176 | Medium | 2022-06-23 | No exploit published | Forecast only | Jenkins JUnit Plugin 1119.va_a_5e9068da_d7 and earlier does not escape descriptions of test results, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Run/Update permission. |
| CVE-2022-25772 | Critical | 2022-06-20 | Not applicable | Forecast only | A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript |
| CVE-2022-1707 | Medium | 2022-06-13 | Not applicable | Forecast only | The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s parameter due to the site search populating into the data layer of sites with insufficient sanitization in versions up to an including 1.15. The affected file is ~/public/frontend.php and this could be exploited by unauthenticated attackers. |
| CVE-2022-30522 | High | 2022-06-09 | Not applicable | Forecast only | If Apache HTTP Server 2.4.53 is configured to do transformations with mod_sed in contexts where the input to mod_sed may be very large, mod_sed may make excessively large memory allocations and trigger an abort. |
| CVE-2022-24422 | Critical | 2022-05-26 | Not applicable | Forecast only | Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access to the VNC Console. |
| CVE-2022-30956 | Medium | 2022-05-17 | No exploit published | Forecast only | Jenkins Rundeck Plugin 3.6.10 and earlier does not restrict URL schemes in Rundeck webhook submissions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to submit crafted Rundeck webhook payloads. |
| CVE-2022-29847 | High | 2022-05-11 | Not applicable | Forecast only | In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would allow them to relay encrypted WhatsUp Gold user credentials to an arbitrary host. |
| CVE-2022-23270 | High | 2022-05-10 | Not applicable | Forecast only | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
| CVE-2022-21972 | High | 2022-05-10 | Not applicable | Forecast only | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
| CVE-2022-29535 | Critical | 2022-05-05 | Not applicable | Forecast only | Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports. |
| CVE-2022-29155 | Critical | 2022-05-04 | Not applicable | Forecast only | In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping. |
| CVE-2022-1429 | High | 2022-04-22 | Not applicable | Forecast only | SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capable of steal the data |
| CVE-2022-21490 | Medium | 2022-04-19 | Not applicable | Forecast only | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). |
| CVE-2022-21489 | Medium | 2022-04-19 | Not applicable | Forecast only | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). |
| CVE-2022-29036 | Medium | 2022-04-12 | No exploit published | Forecast only | Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does not escape the name and description of Credentials parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. |
| CVE-2022-1190 | High | 2022-04-04 | Not applicable | Forecast only | Improper handling of user input in GitLab CE/EE versions 8.3 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowed an attacker to exploit a stored XSS by abusing multi-word milestone references in issue descriptions, comments, etc. |
| CVE-2022-28379 | Medium | 2022-04-03 | Not applicable | Forecast only | jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion. |
| CVE-2022-1181 | Medium | 2022-03-30 | Not applicable | Forecast only | Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2. |
| CVE-2022-1179 | Medium | 2022-03-30 | Not applicable | Forecast only | Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4. |
| CVE-2022-1178 | Medium | 2022-03-30 | Not applicable | Forecast only | Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4. |
| CVE-2022-0435 | High | 2022-03-25 | Not applicable | Forecast only | A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network. |
| CVE-2022-0364 | Medium | 2022-03-21 | Not applicable | Forecast only | The Modern Events Calendar Lite WordPress plugin before 6.4.0 does not sanitize and escape some of the Hourly Schedule parameters which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks |
| CVE-2022-23943 | Critical | 2022-03-14 | Not applicable | Forecast only | Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions. |
| CVE-2022-22719 | High | 2022-03-14 | Not applicable | Forecast only | A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier. |
| CVE-2022-0832 | Medium | 2022-03-04 | Not applicable | Forecast only | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3. |