Skip to main content
CVE-2022-37962 Sep 13, 19:15 HIGH This Week

Microsoft PowerPoint Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2022-37957 Sep 13, 19:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
7.8
EPSS
13.6%
CVE-2022-37956 Sep 13, 19:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2022-37955 Sep 13, 19:15 HIGH This Week

Windows Group Policy Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
7.8
EPSS
1.9%
CVE-2022-37954 Sep 13, 19:15 HIGH This Week

DirectX Graphics Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2019 Windows Server 2022 Windows 10 +1
NVD
CVSS 3.1
7.8
EPSS
44.9%
CVE-2022-35828 Sep 13, 19:15 HIGH PATCH This Week

Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Defender For Endpoint
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-35803 Sep 13, 19:15 HIGH This Week

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
23.8%
CVE-2022-34729 Sep 13, 19:15 HIGH This Week

Windows GDI Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
10.5%
CVE-2022-34719 Sep 13, 19:15 HIGH This Week

Windows Distributed File System (DFS) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
1.0%
CVE-2022-30200 Sep 13, 19:15 HIGH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2022-26929 Sep 13, 19:15 HIGH PATCH This Week

.NET Framework Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Net Framework
NVD
CVSS 3.1
7.8
EPSS
1.3%
CVE-2022-3170 Sep 13, 16:15 HIGH PATCH This Week

An out-of-bounds access issue was found in the Linux kernel sound subsystem. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Linux Linux Kernel
NVD GitHub
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-35292 Sep 13, 16:15 HIGH This Week

In SAP Business One application when a service is created, the executable path contains spaces and isn’t enclosed within quotes, leading to a vulnerability known as Unquoted Service Path which allows. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure SAP Business One
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39156 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39155 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39154 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39153 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39152 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39151 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39150 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39149 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39148 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39147 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39146 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39145 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39144 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39143 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39142 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39141 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39140 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39139 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39138 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-39137 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Siemens Simcenter Femap Parasolid
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-38466 Sep 13, 10:15 HIGH This Week

A vulnerability has been identified in CoreShield One-Way Gateway (OWG) Software (All versions < V2.2). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Siemens Coreshield One Way Gateway
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-38012 Sep 13, 19:15 HIGH This Week

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.7), this vulnerability is no authentication required. No vendor patch available.

RCE Google Microsoft Edge Chromium
NVD
CVSS 3.1
7.7
EPSS
0.8%
CVE-2022-38769 Sep 13, 23:15 HIGH This Week

The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch cleartext passwords upon a successful login request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Mojodat Fixed Asset Management Transtek
NVD
CVSS 3.1
7.5
EPSS
0.8%
CVE-2022-39821 Sep 13, 21:15 HIGH This Week

In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Nokia 1350 Optical Management System
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2022-35838 Sep 13, 19:15 HIGH This Week

HTTP V3 Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2022 Windows 11
NVD
CVSS 3.1
7.5
EPSS
2.1%
CVE-2022-35833 Sep 13, 19:15 HIGH This Week

Windows Secure Channel Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
7.5
EPSS
2.5%
CVE-2022-34724 Sep 13, 19:15 HIGH This Week

Windows DNS Server Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +2
NVD
CVSS 3.1
7.5
EPSS
3.2%
CVE-2022-34720 Sep 13, 19:15 HIGH This Week

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.5
EPSS
3.1%
CVE-2022-36104 Sep 13, 18:15 HIGH PATCH This Week

TYPO3 is an open source PHP based web content management system released under the GNU GPL. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Allocation of Resources Without Limits vulnerability could allow attackers to exhaust system resources through uncontrolled allocation.

PHP Denial Of Service Typo3
NVD GitHub
CVSS 3.1
7.5
EPSS
1.3%
CVE-2022-32190 Sep 13, 18:15 HIGH PATCH This Week

JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Golang Go
NVD
CVSS 3.1
7.5
EPSS
1.7%
CVE-2022-3029 Sep 13, 16:15 HIGH PATCH This Week

In NLnet Labs Routinator 0.9.0 up to and including 0.11.2, due to a mistake in error handling, data in RRDP snapshot and delta files that isn’t correctly base 64 encoded is treated as a fatal error. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Routinator Nlnetlabs
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2022-39801 Sep 13, 16:15 HIGH This Week

SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even after it is closed in Firefighter Logon Pad. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass SAP Access Control
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2022-38100 Sep 13, 15:15 HIGH This Week

The CMS800 device fails while attempting to parse malformed network data sent by a threat actor. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Cms8000 Firmware Contechealth
NVD
CVSS 3.1
7.5
EPSS
0.8%
CVE-2022-1278 Sep 13, 14:15 HIGH PATCH This Week

A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Red Hat Jboss Enterprise Application Platform Expansion Pack Single Sign On Wildfly +5
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2022-38020 Sep 13, 19:15 HIGH This Week

Visual Studio Code Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Visual Studio Code
NVD
CVSS 3.1
7.3
EPSS
0.9%
CVE-2022-38011 Sep 13, 19:15 HIGH PATCH This Week

Raw Image Extension Remote Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity.

RCE Microsoft Raw Image Extension
NVD
CVSS 3.1
7.3
EPSS
0.8%
CVE-2022-30170 Sep 13, 19:15 HIGH This Week

Windows Credential Roaming Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.3
EPSS
1.5%
Prev Page 3 of 4 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy