Skip to main content
CVE-2022-4390 Dec 09, 20:15 CRITICAL POC Act Now

A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Netgear Ax2400 Firmware
NVD
CVSS 3.1
10.0
EPSS
0.9%
CVE-2022-4375 Dec 09, 08:15 CRITICAL POC PATCH Act Now

A vulnerability was found in Mingsoft MCMS up to 5.2.9. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Mcms Mingsoft
NVD VulDB
CVSS 3.1
9.8
EPSS
2.9%
CVE-2022-45290 Dec 09, 19:15 CRITICAL POC Act Now

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Kbase Doc
NVD GitHub
CVSS 3.1
9.1
EPSS
0.9%
CVE-2022-46166 Dec 09, 21:15 CRITICAL PATCH Act Now

Spring boot admins is an open source administrative user interface for management of spring boot applications. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Java Code Injection Spring Boot Admin Codecentric
NVD GitHub
CVSS 3.1
9.8
EPSS
1.4%
CVE-2022-2993 Dec 09, 20:15 CRITICAL Act Now

There is an error in the condition of the last if-statement in the function smp_check_keys. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Zephyr Zephyrproject
NVD GitHub
CVSS 3.1
9.8
EPSS
0.6%
CVE-2022-4170 Dec 09, 18:15 CRITICAL Act Now

The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Fedora Rxvt Unicode Extra Packages For Enterprise Linux Fedoraproject
NVD
CVSS 3.1
9.8
EPSS
2.1%
CVE-2022-23484 Dec 09, 18:15 CRITICAL Act Now

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow Microsoft Debian Debian Linux +2
NVD GitHub
CVSS 3.1
9.8
EPSS
0.7%
CVE-2022-23480 Dec 09, 18:15 CRITICAL Act Now

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Debian Debian Linux Xrdp +1
NVD GitHub
CVSS 3.1
9.8
EPSS
0.8%
CVE-2022-23479 Dec 09, 18:15 CRITICAL Act Now

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Debian Debian Linux Xrdp +1
NVD GitHub
CVSS 3.1
9.8
EPSS
0.8%
CVE-2022-23478 Dec 09, 18:15 CRITICAL Act Now

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Microsoft Debian Debian Linux +2
NVD GitHub
CVSS 3.1
9.8
EPSS
0.8%
CVE-2022-23477 Dec 09, 18:15 CRITICAL Act Now

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Debian Debian Linux Xrdp +1
NVD GitHub
CVSS 3.1
9.8
EPSS
0.8%
CVE-2022-23468 Dec 09, 18:15 CRITICAL Act Now

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Microsoft Debian Debian Linux Xrdp +1
NVD GitHub
CVSS 3.1
9.8
EPSS
0.8%
CVE-2022-23493 Dec 09, 18:15 CRITICAL Act Now

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Debian Debian Linux +2
NVD GitHub
CVSS 3.1
9.1
EPSS
0.9%
CVE-2022-23483 Dec 09, 18:15 CRITICAL Act Now

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Debian Debian Linux +2
NVD GitHub
CVSS 3.1
9.1
EPSS
0.8%
CVE-2022-23482 Dec 09, 18:15 CRITICAL Act Now

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Debian Debian Linux +2
NVD GitHub
CVSS 3.1
9.1
EPSS
0.7%
CVE-2022-23481 Dec 09, 18:15 CRITICAL Act Now

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protocol (RDP). Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Debian Debian Linux +2
NVD GitHub
CVSS 3.1
9.1
EPSS
0.7%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy