Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-26 21:03Z
2022-05-04
2022-05-04 20:15Z
CRIT

CVE-2022-29155 — Openldap Openldap: In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-29155

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the search filter is processed, due to a lack of proper escaping. CVSSv3.1 9.8 (CRITICAL) · EPSS 99th percentile

CWECWE 89VNDOpenldapTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2022-05-04
2022-05-04 18:38Z
INFO

Impacket 0.10.0

Impacket releases·github.com

Impacket 0.10.0 released with significant library improvements including Python 2.7 deprecation, refactored testing infrastructure, and multiple new attack capabilities. Notable additions include MS-DSSP protocol implementation, ADCS ESC1/ESC6 attack support, Shadow Credentials attack, Kerberos Key List attack implementation, and enhanced ntlmrelayx.py with multi-relay and StartTLS support.

SRFNetworkTACTA0006SRFIdentityTACTA0008VNDImpacketTYPToolSTGDiscoverySTGCred Access
78
Edit Score
2022-05-04
2022-05-04 15:15Z
CRIT

CVE-2022-29347 — Web\@rchiv_project Web\@rchiv: An arbitrary file upload vulnerability in Web@rchiv 1.0 allows attackers to execute arbitrary commands

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-29347

An arbitrary file upload vulnerability in Web@rchiv 1.0 allows attackers to execute arbitrary commands via a crafted PHP file. CVSSv3.1 9.8 (CRITICAL) · EPSS 79th percentile

CWECWE 434VNDWeb Rchiv ProjectTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2022-05-04
2022-05-04 15:15Z
CRIT

CVE-2022-28568 — Simple_doctor\'s_appointment_system_project Simple_doctor\'s_appointment_system: Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-28568

Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image upload from the administrator panel. An attacker can obtain remote command execution just by knowing the path where the images are stored. CVSSv3.1 9.8 (CRITICAL) · EPSS 89th percentile

CWECWE 434VNDSourcecodesterVNDSimple Doctor S Appointment System ProjectTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2022-05-04
2022-05-04 01:15Z
HIGH

CVE-2021-43164 — Ruijienetworks Reyeeos: A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-43164

A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the updateVersion function in /cgi-bin/luci/api/wireless. CVSSv3.1 8.8 (HIGH) · EPSS 98th percentile

CWECWE 78VNDCodeVNDRuijienetworksTYPVulnerability
8.8
CVSS v3.1
100
Edit Score
2022-05-04
2022-05-04 01:15Z
CRIT

CVE-2021-43163 — Ruijienetworks Reyeeos: A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-43163

A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the checkNet function in /cgi-bin/luci/api/auth. CVSSv3.1 9.8 (CRITICAL) · EPSS 80th percentile

CWECWE 77VNDCodeVNDRuijienetworksTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2022-05-04
2022-05-04 01:15Z
HIGH

CVE-2021-43162 — Ruijienetworks Reyeeos: A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-43162

A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the runPackDiagnose function in /cgi-bin/luci/api/diagnose. CVSSv3.1 8.8 (HIGH) · EPSS 75th percentile

CWECWE 77VNDCodeVNDRuijienetworksTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
728 × 90 / responsive · programmatic ad slot
2022-05-04
2022-05-04 01:15Z
HIGH

CVE-2021-43161 — Ruijienetworks Reyeeos: A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-43161

A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the doSwitchApi function in /cgi-bin/luci/api/switch. CVSSv3.1 8.8 (HIGH) · EPSS 75th percentile

CWECWE 77VNDCodeVNDRuijienetworksTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2022-05-04
2022-05-04 01:15Z
HIGH

CVE-2021-43160 — Ruijienetworks Reyeeos: A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-43160

A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the switchFastDhcp function in /cgi-bin/luci/api/diagnose. CVSSv3.1 8.8 (HIGH) · EPSS 75th percentile

CWECWE 77VNDCodeVNDRuijienetworksTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2022-05-04
2022-05-04 01:15Z
HIGH

CVE-2021-43159 — Ruijienetworks Reyeeos: A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-43159

A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P55 via the setSessionTime function in /cgi-bin/luci/api/common.. CVSSv3.1 8.8 (HIGH) · EPSS 77th percentile

CWECWE 77VNDCodeVNDRuijienetworksTYPVulnerability
8.8
CVSS v3.1
95
Edit Score
2022-05-03
2022-05-03 16:15Z
HIGH

CVE-2022-1292 — Siemens Brownfield_connectivity_gateway: The c_rehash script does not properly sanitise shell metacharacters to prevent command injection.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-1292

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed i CVSSv3.1 7.3 (HIGH) · EPSS 100th percentile

CWECWE 78VNDSiemensVNDOpensslTYPVulnerability
7.3
CVSS v3.1
100
Edit Score
2022-05-03
2022-05-03 04:15Z
HIGH

CVE-2022-20767 — Cisco Secure_firewall_threat_defense: A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense (FTD)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-20767

A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of the DNS reputation enforcement rule. An attacker could exploit this vulnerability by sending crafted UDP packets through an affected device to force a buildup of UDP connections. A successful exploit could allow CVSSv3.1 8.6 (HIGH) · EPSS 74th percentile

CWECWE 770CWECWE 399VNDCiscoVNDSnortTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2022-05-03
2022-05-03 04:15Z
HIGH

CVE-2022-20760 — Cisco Secure_firewall_threat_defense: A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-20760

A vulnerability in the DNS inspection handler of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service condition (DoS) on an affected device. This vulnerability is due to a lack of proper processing of incoming requests. An attacker could exploit this vulnerability by sending crafted DNS requests at a high rate to an affected device. A successful exploit could a CVSSv3.1 8.6 (HIGH) · EPSS 73th percentile

CWECWE 400VNDCiscoVNDDnsTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2022-05-03
2022-05-03 04:15Z
HIGH

CVE-2022-20759 — Cisco Secure_firewall_threat_defense: A vulnerability in the web services interface for remote access VPN features of Cisco

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-20759

A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, but unprivileged, remote attacker to elevate privileges to level 15. This vulnerability is due to improper separation of authentication and authorization scopes. An attacker could exploit this vulnerability by sending crafted HTTPS messages to the web services interface CVSSv3.1 8.8 (HIGH) · EPSS 98th percentile

CWECWE 269CWECWE 266VNDCiscoTYPVulnerability
8.8
CVSS v3.1
100
Edit Score
2022-05-03
2022-05-03 04:15Z
HIGH

CVE-2022-20757 — Cisco Secure_firewall_threat_defense: A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-20757

A vulnerability in the connection handling function in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper traffic handling when platform limits are reached. An attacker could exploit this vulnerability by sending a high rate of UDP traffic through an affected device. A successful exploit could allow the attacker to cause all new, CVSSv3.1 8.6 (HIGH) · EPSS 65th percentile

CWECWE 770VNDCiscoTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2022-05-03
2022-05-03 04:15Z
HIGH

CVE-2022-20751 — Cisco Secure_firewall_threat_defense: A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-20751

A vulnerability in the Snort detection engine integration for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause unlimited memory consumption, which could lead to a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient memory management for certain Snort events. An attacker could exploit this vulnerability by sending a series of crafted IP packets that would generate specific Snor CVSSv3.1 8.6 (HIGH) · EPSS 68th percentile

CWECWE 770VNDCiscoVNDSnortTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2022-05-03
2022-05-03 04:15Z
HIGH

CVE-2022-20746 — Cisco Secure_firewall_threat_defense: A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-20746

A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper handling of TCP flows. An attacker could exploit this vulnerability by sending a crafted stream of TCP traffic through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. CVSSv3.1 8.6 (HIGH) · EPSS 68th percentile

CWECWE 476VNDCiscoVNDTcpTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2022-05-03
2022-05-03 04:15Z
HIGH

CVE-2022-20745 — Cisco Secure_firewall_threat_defense: A vulnerability in the web services interface for remote access VPN features of Cisco

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-20745

A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper input validation when parsing HTTPS requests. An attacker could exploit this vulnerability by sending a crafted HTTPS request to an affected device. A successful exploit CVSSv3.1 8.6 (HIGH) · EPSS 70th percentile

CWECWE 20VNDCiscoTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2022-05-03
2022-05-03 04:15Z
HIGH

CVE-2022-20715 — Cisco Secure_firewall_threat_defense: A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-20715

A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper validation of errors that are logged as a result of client connections that are made using remote access VPN. An attacker could exploit this vulnerability by sending craf CVSSv3.1 8.6 (HIGH) · EPSS 68th percentile

CWECWE 20CWECWE 399VNDCiscoTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2022-05-03
2022-05-03 01:15Z
CRIT

CVE-2022-28118 — Sscms Siteserver_cms: SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-28118

SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in. CVSSv3.1 9.8 (CRITICAL) · EPSS 84th percentile

VNDSscmsVNDSiteserverTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2022-04-29
2022-04-29 12:15Z
CRIT

CVE-2021-44596 — Wondershare Dr.fone: Fone as of 2021-12-06 version is affected by Remote code execution.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-44596

Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" service(the service is running under SYSTEM privileges) and manipulate it to execute malicious executable without any validation from a remote location and gain SYSTEM privileges CVSSv3.1 9.8 (CRITICAL) · EPSS 97th percentile

VNDWondershareTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2022-04-29
2022-04-29 12:15Z
HIGH

CVE-2021-44595 — Wondershare Dr.fone: Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-44595

Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges. CVSSv3.1 8.8 (HIGH) · EPSS 97th percentile

CWECWE 862VNDWondershareTYPVulnerability
8.8
CVSS v3.1
100
Edit Score
2022-04-28
2022-04-28 14:15Z
CRIT

CVE-2021-41945 — Encode Httpx: OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client`

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2021-41945

Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`. CVSSv3.1 9.1 (CRITICAL) · EPSS 80th percentile

CWECWE 20VNDEncodeTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2022-04-26
2022-04-26 14:15Z
CRIT

CVE-2022-27985 — Cuppacms Cuppacms: v1.0 was discovered to contain a SQL injection vulnerability via /administrator/alerts/alertLightbox.php.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-27985

CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via /administrator/alerts/alertLightbox.php. CVSSv3.1 9.8 (CRITICAL) · EPSS 93th percentile

CWECWE 89VNDCuppacmsTYPVulnerability
9.8
CVSS v3.1
100
Edit Score
2022-04-26
2022-04-26 14:15Z
CRIT

CVE-2022-27984 — Cuppacms Cuppacms: v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2022-27984

CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templates/default/html/windows/right.php. CVSSv3.1 9.8 (CRITICAL) · EPSS 93th percentile

CWECWE 89VNDCuppacmsTYPVulnerability
9.8
CVSS v3.1
100
Edit Score