Browse CVEs

HIGH 8.8 CVE-2022-36960 SolarWinds Platform was susceptible to Improper Input Validation. This vulnerability allows a remote adversary with valid access to SolarWinds Web Co… Orion Platform 2020.2.6+ Fix from $1,9502022-11-29 HIGH 8.8 CVE-2022-46146 Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml… Exporter Toolkit 0.7.2 / 0.8.2+ Fix from $1,9502022-11-29 HIGH 7.4 CVE-2021-45036 Velneo vClient on its 28.1.3 version, could allow an attacker with knowledge of the victims's username and hashed password to spoof the victim's id a… Vclient Mitigation only Fix from $1,9502022-11-28 CRITICAL 9.8 CVE-2022-41912 The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Asser… Saml 0.4.9+ Fix from $2,3002022-11-28 CRITICAL 9.1 CVE-2022-36133 The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass. Tm C3500 Firmware Mitigation only Fix from $2,3002022-11-25 MEDIUM 5.3 CVE-2022-37774 There is a broken access control vulnerability in the Maarch RM 2.8.3 solution. When accessing some specific document (pdf, email) from an archive, a… Maarch Rm 2.8.6+ Fix from $1,6002022-11-23 HIGH 7.8 CVE-2022-37931 A vulnerability in NetBatch-Plus software allows unauthorized access to the application.  HPE has provided a workaround and fix. Please refer to HPE… Nonstop Netbatch Plus Mitigation only Fix from $1,9502022-11-22 CRITICAL 9.8 CVE-2022-40602 A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the device using an improper pre-… Lte3301 M209 Firmware 1.00+ Fix from $2,3002022-11-22 HIGH 7.5 CVE-2022-20918 A vulnerability in the Simple Network Management Protocol (SNMP) access controls for Cisco FirePOWER Software for Adaptive Security Appliance (ASA) F… Firepower Services Software For Asa 7.0.5+ Fix from $1,9502022-11-15 HIGH 7.5 CVE-2022-25667 Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking Ar9380 Firmware Mitigation only Fix from $1,9502022-11-15 MEDIUM 6.3 CVE-2022-43690 Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 did not use strict comparison for the legacy_salt so that limited authenti… Concrete Cms 8.5.10+ Fix from $1,6002022-11-14 CRITICAL 9.8 CVE-2022-3477 The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordPress theme before 5.2.2, does… Newsmag 3.5 / 5.2.2+ Fix from $2,3002022-11-14 CRITICAL 9.8 CVE-2022-34331 After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VE… Powervm Hypervisor Mitigation only Fix from $2,3002022-11-11 HIGH 7.8 CVE-2022-37345 Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated user to potentially enable e… Nuc Kit Nuc5i3ryh Firmware Patch available Fix from $1,9502022-11-11 HIGH 7.8 CVE-2022-36370 Improper authentication in BIOS firmware for some Intel(R) NUC Boards and Intel(R) NUC Kits before version MYi30060 may allow a privileged user to po… Nuc Kit Nuc5i3myhe Firmware Patch available Fix from $1,9502022-11-11 HIGH 8.8 CVE-2022-29893 Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an aut… Active Management Technology Firmware 11.8.93 / 11.12.93+ Fix from $1,9502022-11-11 CRITICAL 9.8 CVE-2022-26845 Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an una… Active Management Technology Firmware 11.8.93 / 11.12.93+ Fix from $2,3002022-11-11 HIGH 7.2 CVE-2022-27874 Improper authentication in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially e… Xmm 7560 Firmware Mitigation only Fix from $1,9502022-11-11 HIGH 7.5 CVE-2022-26508 Improper authentication in the Intel(R) SDP Tool before version 3.0.0 may allow an unauthenticated user to potentially enable information disclosure … Server Debug And Provisioning Tool 3.0.0+ Fix from $1,9502022-11-11 MEDIUM 6.7 CVE-2021-33159 Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a pri… Active Management Technology Firmware 11.8.93 / 11.12.93+ Fix from $1,6002022-11-11 MEDIUM 6.7 CVE-2022-21794 Improper authentication in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, Intel(R) NUC Kits before versi… Nuc Kit Nuc8i7hnk Firmware Mitigation only Fix from $1,6002022-11-11 HIGH 8.8 CVE-2022-39038 Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user… Agentflow Mitigation only Fix from $1,9502022-11-10 CRITICAL 9.8 CVE-2022-38119 UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication… Upsmon Pro Mitigation only Fix from $2,3002022-11-10 MEDIUM 6.6 CVE-2022-44244 An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator. Lin Cms No fix yet Fix from $1,6002022-11-09 CRITICAL 9.8 CVE-2022-39892 Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature. Pass 4.0.05.1+ Fix from $2,3002022-11-09 CRITICAL 9.8 CVE-2022-31685 VMware Workspace ONE Assist prior to 22.10 contains an Authentication Bypass vulnerability. A malicious actor with network access to Workspace ONE As… Workspace One Assist 22.10+ Fix from $2,3002022-11-09 CRITICAL 9.8 CVE-2022-31686 VMware Workspace ONE Assist prior to 22.10 contains a Broken Authentication Method vulnerability. A malicious actor with network access to Workspace … Workspace One Assist 22.10+ Fix from $2,3002022-11-09 CRITICAL 9.8 CVE-2022-27510 Unauthorized access to Gateway user capabilities Gateway 12.1-55.289 / 12.1-65.21+ Fix from $2,3002022-11-08 HIGH 7.5 CVE-2022-39387 XWiki OIDC has various tools to manipulate OpenID Connect protocol in XWiki. Prior to version 1.29.1, even if a wiki has an OpenID provider configure… Openid Connect 1.29.1+ Fix from $1,9502022-11-04 MEDIUM 6.5 CVE-2022-43451 OpenHarmony-v3.1.2 and prior versions had an Multiple path traversal vulnerability in appspawn and nwebspawn services. Local attackers can create arb… Openharmony after 3.1.2 Fix from $1,6002022-11-03