NVD-CWE-noinfo

CVE-2022-44089

February 23, 2023 by godfreyd94

ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component IS_GETCACHE.

CVE-2022-44118

February 23, 2023 by godfreyd94

dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.

CVE-2022-44136

February 23, 2023 by godfreyd94

Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).

CVE-2022-4415

February 23, 2023 by godfreyd94

A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.

An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. Direct access to the API is possible on TCP port 8888 via programs located in the cgi-bin folder without any authentication.

CVE-2022-44014

February 23, 2023 by godfreyd94

An issue was discovered in Simmeth Lieferantenmanager before 5.6. In the design of the API, a user is inherently able to fetch arbitrary SQL tables. This leaks all user passwords and MSSQL hashes via /DS/LM_API/api/SelectionService/GetPaggedTab.