Skip to main content
CVE-2022-42075 Oct 07, 19:15 CRITICAL POC Act Now

Wedding Planner v1.0 is vulnerable to arbitrary code execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Wedding Planner Wedding Planner Project
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
1.1%
CVE-2022-40872 Oct 07, 11:15 CRITICAL POC Act Now

An SQL injection vulnerability issue was discovered in Sourcecodester Simple E-Learning System 1.0., in /vcs/classRoom.php?classCode=, classCode. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Simple E Learning System Simple E Learning System Project
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-40835 Oct 07, 11:15 CRITICAL POC Act Now

B.C. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Codeigniter
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-40834 Oct 07, 11:15 CRITICAL POC Act Now

B.C. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Codeigniter
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-40833 Oct 07, 11:15 CRITICAL POC Act Now

B.C. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Codeigniter
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-40832 Oct 07, 11:15 CRITICAL POC Act Now

B.C. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Codeigniter
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-40831 Oct 07, 11:15 CRITICAL POC Act Now

B.C. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Codeigniter
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-40830 Oct 07, 11:15 CRITICAL POC Act Now

B.C. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Codeigniter
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-40829 Oct 07, 11:15 CRITICAL POC Act Now

B.C. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Codeigniter
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-40828 Oct 07, 11:15 CRITICAL POC Act Now

B.C. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Codeigniter
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-40827 Oct 07, 11:15 CRITICAL POC Act Now

B.C. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Codeigniter
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-40826 Oct 07, 11:15 CRITICAL POC Act Now

B.C. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Codeigniter
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-40825 Oct 07, 11:15 CRITICAL POC Act Now

B.C. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Codeigniter
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-40824 Oct 07, 11:15 CRITICAL POC Act Now

B.C. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Codeigniter
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-3414 Oct 07, 06:15 CRITICAL POC Act Now

A vulnerability was found in SourceCodester Web-Based Student Clearance System. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Web Based Student Clearance System Web Based Student Clearance System Project
NVD VulDB
CVSS 3.1
9.8
EPSS
0.5%
CVE-2022-31680 Oct 07, 21:15 CRITICAL POC THREAT Act Now

The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Deserialization VMware Vcenter Server
NVD
CVSS 3.1
9.1
EPSS
33.1%
CVE-2022-3275 Oct 07, 21:15 CRITICAL Act Now

Command injection is possible in the puppetlabs-apt module prior to version 9.0.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Fedora Puppet Puppetlabs Mysql Fedoraproject
NVD
CVSS 3.1
9.8
EPSS
2.1%
CVE-2022-37891 Oct 07, 18:15 CRITICAL Act Now

Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Siemens Arubaos Aruba Scalance W1750D Firmware +2
NVD
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-37890 Oct 07, 18:15 CRITICAL Act Now

Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Siemens Arubaos Aruba Scalance W1750D Firmware +2
NVD
CVSS 3.1
9.8
EPSS
1.0%
CVE-2022-37889 Oct 07, 18:15 CRITICAL Act Now

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Siemens Arubaos Aruba +3
NVD
CVSS 3.1
9.8
EPSS
1.5%
CVE-2022-37887 Oct 07, 18:15 CRITICAL Act Now

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Siemens Arubaos Aruba +3
NVD
CVSS 3.1
9.8
EPSS
1.5%
CVE-2022-37886 Oct 07, 18:15 CRITICAL Act Now

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Siemens Arubaos Aruba +3
NVD
CVSS 3.1
9.8
EPSS
1.3%
CVE-2022-37885 Oct 07, 18:15 CRITICAL Act Now

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Siemens Arubaos Aruba +3
NVD
CVSS 3.1
9.8
EPSS
1.3%
CVE-2022-39862 Oct 07, 15:15 CRITICAL Act Now

Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R(11) and 3.3.03.66 in Android S(12) allows unauthorized use of javascript interface api. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Google Samsung Dynamic Lockscreen
NVD
CVSS 3.1
9.8
EPSS
0.5%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy