Skip to main content
CVE-2022-23642 Feb 18, 23:15 HIGH POC PATCH THREAT Act Now

Sourcegraph is a code search and navigation engine. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE Code Injection Sourcegraph
NVD GitHub Exploit-DB
CVSS 3.1
8.8
EPSS
74.3%
CVE-2022-25335 Feb 18, 18:15 HIGH POC This Week

RigoBlock Dragos through 2022-02-17 lacks the onlyOwner modifier for setMultipleAllowances. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Drago
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2022-0666 Feb 18, 15:15 HIGH POC PATCH THREAT This Week

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Code Injection Microweber
NVD GitHub
CVSS 3.1
7.5
EPSS
44.3%
CVE-2022-25299 Feb 18, 13:15 HIGH POC PATCH This Week

This affects the package cesanta/mongoose before 7.6. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Path Traversal Mongoose Cesanta
NVD GitHub
CVSS 3.1
7.5
EPSS
1.4%
CVE-2022-25298 Feb 18, 13:15 HIGH POC PATCH This Week

This affects the package sprinfall/webcc before 0.3.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Path Traversal Webcc
NVD GitHub
CVSS 3.1
7.5
EPSS
1.7%
CVE-2022-0660 Feb 18, 11:15 HIGH POC PATCH This Week

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Microweber
NVD GitHub
CVSS 3.1
7.5
EPSS
6.9%
CVE-2022-24971 Feb 18, 20:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

RCE Buffer Overflow Information Disclosure Pdf Reader Pdf Editor +1
NVD
CVSS 3.1
8.8
EPSS
2.7%
CVE-2022-24369 Feb 18, 20:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Pdf Reader Pdf Editor +1
NVD
CVSS 3.1
8.8
EPSS
2.5%
CVE-2022-24367 Feb 18, 20:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Pdf Reader Pdf Editor +1
NVD
CVSS 3.1
8.8
EPSS
2.5%
CVE-2022-24366 Feb 18, 20:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Pdf Reader Pdf Editor +1
NVD
CVSS 3.1
8.8
EPSS
2.5%
CVE-2022-24365 Feb 18, 20:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Pdf Reader Pdf Editor +1
NVD
CVSS 3.1
8.8
EPSS
2.5%
CVE-2022-24364 Feb 18, 20:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Pdf Reader Pdf Editor +1
NVD
CVSS 3.1
8.8
EPSS
2.5%
CVE-2022-24363 Feb 18, 20:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Pdf Reader Pdf Editor +1
NVD
CVSS 3.1
8.8
EPSS
2.5%
CVE-2022-24362 Feb 18, 20:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Pdf Reader Pdf Editor +1
NVD
CVSS 3.1
8.8
EPSS
2.5%
CVE-2022-24361 Feb 18, 20:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Pdf Reader Pdf Editor +1
NVD
CVSS 3.1
8.8
EPSS
2.5%
CVE-2022-24360 Feb 18, 20:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Pdf Reader Pdf Editor +1
NVD
CVSS 3.1
8.8
EPSS
2.5%
CVE-2022-24359 Feb 18, 20:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Pdf Reader Pdf Editor +1
NVD
CVSS 3.1
8.8
EPSS
2.5%
CVE-2022-24358 Feb 18, 20:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

RCE Buffer Overflow Information Disclosure Pdf Reader Pdf Editor +1
NVD
CVSS 3.1
8.8
EPSS
2.5%
CVE-2022-24357 Feb 18, 20:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Pdf Reader Pdf Editor +1
NVD
CVSS 3.1
8.8
EPSS
2.5%
CVE-2022-24356 Feb 18, 20:15 HIGH PATCH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 macOS. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

RCE Buffer Overflow Information Disclosure Apple Pdf Reader +2
NVD
CVSS 3.1
8.8
EPSS
2.3%
CVE-2022-24355 Feb 18, 20:15 HIGH This Week

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow TP-Link Stack Overflow Tl Wr940n Firmware
NVD
CVSS 3.1
8.8
EPSS
2.1%
CVE-2022-24354 Feb 18, 20:15 HIGH This Week

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 1.1.4 Build 20211022 rel.59103(5553) routers. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Integer Overflow TP-Link Ac1750 Firmware
NVD
CVSS 3.1
8.8
EPSS
1.8%
CVE-2022-24046 Feb 18, 20:15 HIGH This Week

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systems) and 11.2.13 build 57923290 (S1 systems). Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Integer Overflow S1 S2 Sonos
NVD
CVSS 3.1
8.8
EPSS
4.1%
CVE-2022-24064 Feb 18, 20:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.8.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Dicom Viewer Pro Santesoft
NVD
CVSS 3.1
7.8
EPSS
1.8%
CVE-2022-24063 Feb 18, 20:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Dicom Viewer Pro Santesoft
NVD
CVSS 3.1
7.8
EPSS
1.8%
CVE-2022-24062 Feb 18, 20:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Dicom Viewer Pro Santesoft
NVD
CVSS 3.1
7.8
EPSS
1.8%
CVE-2022-24059 Feb 18, 20:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Dicom Viewer Pro Santesoft
NVD
CVSS 3.1
7.8
EPSS
1.8%
CVE-2022-24058 Feb 18, 20:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Dicom Viewer Pro Santesoft
NVD
CVSS 3.1
7.8
EPSS
2.9%
CVE-2022-24057 Feb 18, 20:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Dicom Viewer Pro Santesoft
NVD
CVSS 3.1
7.8
EPSS
1.8%
CVE-2022-24056 Feb 18, 20:15 HIGH This Week

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Dicom Viewer Pro Santesoft
NVD
CVSS 3.1
7.8
EPSS
1.8%
CVE-2022-24052 Feb 18, 20:15 HIGH PATCH This Week

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Privilege Escalation RCE Buffer Overflow Heap Overflow MariaDB +2
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2022-24051 Feb 18, 20:15 HIGH PATCH This Week

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Privilege Escalation RCE MariaDB Fedora Fedoraproject
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2022-24050 Feb 18, 20:15 HIGH PATCH This Week

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Privilege Escalation RCE Use After Free Memory Corruption MariaDB +2
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-24048 Feb 18, 20:15 HIGH PATCH This Week

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Privilege Escalation RCE Buffer Overflow Stack Overflow MariaDB +2
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2022-0646 Feb 18, 18:15 HIGH PATCH This Week

A flaw use after free in the Linux kernel Management Component Transport Protocol (MCTP) subsystem was found in the way user triggers cancel_work_sync after the unregister_netdev during removing. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Denial Of Service Linux H300s Firmware H410c Firmware H410s Firmware +7
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-23228 Feb 18, 22:15 HIGH This Week

Pexip Infinity before 27.0 has improper WebRTC input validation. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Pexip Infinity Pexip
NVD
CVSS 3.1
7.5
EPSS
1.3%
CVE-2022-23982 Feb 18, 18:15 HIGH This Week

The vulnerability discovered in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4) allows server information exposure. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Information Disclosure Wordpress Plugin Perfect Brands For Woocommerce Quadlayers
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2022-21176 Feb 18, 18:15 HIGH This Week

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input, which may allow. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi C5C Firmware Mimosa Management Platform C6X Firmware C5X Firmware +2
NVD
CVSS 3.1
7.5
EPSS
1.1%
CVE-2022-0138 Feb 18, 18:15 HIGH This Week

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Deserialization C5C Firmware Mimosa Management Platform C6X Firmware C5X Firmware +2
NVD
CVSS 3.1
7.5
EPSS
1.0%
CVE-2022-25314 Feb 18, 05:15 HIGH PATCH This Week

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Integer Overflow Debian Oracle Siemens +8
NVD GitHub
CVSS 3.1
7.5
EPSS
4.7%
CVE-2022-23650 Feb 18, 22:15 HIGH PATCH GHSA This Week

Netmaker is a platform for creating and managing virtual overlay networks using WireGuard. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Netmaker
NVD GitHub VulDB
CVSS 3.1
7.2
EPSS
0.8%
CVE-2021-4090 Feb 18, 18:15 HIGH PATCH This Week

An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Linux Memory Corruption H300s Firmware H410c Firmware +7
NVD VulDB
CVSS 3.1
7.1
EPSS
0.1%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy