CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2022-25323

2022-02-24

N/A

6.1 MEDIUM

ZEROF Web Server 2.0 allows /admin.back XSS.

CVE-2022-25322

2022-02-24

N/A

9.8 CRITICAL

ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.

CVE-2022-25321

2022-02-24

N/A

6.1 MEDIUM

An issue was discovered in Cerebrate through 1.4. XSS could occur in the bookmarks component.

CVE-2022-25320

2022-02-24

N/A

5.3 MEDIUM

An issue was discovered in Cerebrate through 1.4. Username enumeration could occur.

CVE-2022-2532

2022-08-25

N/A

6.1 MEDIUM

The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVE-2022-25319

2022-02-25

N/A

5.3 MEDIUM

An issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled.

CVE-2022-25318

2022-02-25

N/A

4.3 MEDIUM

An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups.

CVE-2022-25317

2022-02-25

N/A

6.1 MEDIUM

An issue was discovered in Cerebrate through 1.4. genericForm allows reflected XSS in form descriptions via a user-controlled description.

CVE-2022-25315

2022-10-05

N/A

9.8 CRITICAL

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

CVE-2022-25314

2022-10-05

N/A

7.5 HIGH

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.

« Previous 1 … 10,427 10,428 10,429 10,430 10,431 … 11,258 Next »