CVE-2022-41xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
819 records · Page 8 of 9
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the lighttpd service, which listens on TCP port 80 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it t
UpdatedMITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary commands on agents.
Updated- CVE-2022-41138: In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution. 9.8 Critical
In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.
Updated Apache Hive Metastore (HMS) uses SerializationUtilities#deserializeObjectWithTypeInformation method when filtering and fetching partitions that is unsafe and can lead to Remote Code Execution (RCE) since it allows the deserialization of arbitrary data. In real deployments, the vulnerability can be exploited only by authenticated users/clients that were able to successfully establish a connection
UpdatedCross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Vladimir Anokhin's Shortcodes Ultimate plugin <= 5.12.0 on WordPress.
Updated- CVE-2022-41135: WordPress Modula plugin <= 2.6.9 - Unauth. Plugin Settings Change vulnerability 6.5 Medium
Unauth. Plugin Settings Change vulnerability in Modula plugin <= 2.6.9 on WordPress.
Updated Cross-Site Request Forgery (CSRF) in OptinlyHQ Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms plugin <= 1.0.15 versions.
UpdatedThe affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.
UpdatedUnauthenticated Plugin Settings Change Leading To Stored XSS Vulnerability in Ezoic plugin <= 2.8.8 on WordPress.
UpdatedImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider versions prior to 4.1.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case HIve Pro
UpdatedWindows Scripting Languages Remote Code Execution Vulnerability
UpdatedMicrosoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
UpdatedWindows CNG Key Isolation Service Elevation of Privilege Vulnerability
UpdatedMicrosoft Exchange Server Elevation of Privilege Vulnerability
UpdatedMicrosoft SharePoint Server Spoofing Vulnerability
UpdatedWindows Graphics Component Elevation of Privilege Vulnerability
Updated- CVE-2022-41120: Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability 7.8 High
Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
Updated Visual Studio Remote Code Execution Vulnerability
UpdatedWindows Scripting Languages Remote Code Execution Vulnerability
Updated- CVE-2022-41116: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability 5.9 Medium
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Updated - CVE-2022-41115: Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability 6.6 Medium
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
Updated Windows Bind Filter Driver Elevation of Privilege Vulnerability
UpdatedWindows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
UpdatedWindows Win32k Elevation of Privilege Vulnerability
UpdatedMicrosoft Office Graphics Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Information Disclosure Vulnerability
UpdatedMicrosoft Excel Security Feature Bypass Vulnerability
UpdatedMicrosoft Word Information Disclosure Vulnerability
UpdatedWindows Overlay Filter Elevation of Privilege Vulnerability
UpdatedWindows Overlay Filter Elevation of Privilege Vulnerability
Updated- CVE-2022-41100: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability 7.8 High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Updated BitLocker Security Feature Bypass Vulnerability
UpdatedWindows GDI+ Information Disclosure Vulnerability
Updated- CVE-2022-41097: Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability 6.5 Medium
Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability
Updated Microsoft DWM Core Library Elevation of Privilege Vulnerability
UpdatedWindows Digital Media Receiver Elevation of Privilege Vulnerability
UpdatedWindows Hyper-V Elevation of Privilege Vulnerability
Updated- CVE-2022-41093: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability 7.8 High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Updated Windows Win32k Elevation of Privilege Vulnerability
UpdatedWindows Mark of the Web Security Feature Bypass Vulnerability
Updated- CVE-2022-41090: Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability 5.9 Medium
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Updated .NET Framework Remote Code Execution Vulnerability
Updated- CVE-2022-41088: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability 8.1 High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Updated Windows Group Policy Elevation of Privilege Vulnerability
UpdatedAzure CycleCloud Elevation of Privilege Vulnerability
UpdatedVisual Studio Code Elevation of Privilege Vulnerability
UpdatedMicrosoft Exchange Server Remote Code Execution Vulnerability
Updated- CVE-2022-41081: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability 8.1 High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Updated Microsoft Exchange Server Elevation of Privilege Vulnerability
UpdatedMicrosoft Exchange Server Spoofing Vulnerability
UpdatedMicrosoft Exchange Server Spoofing Vulnerability
UpdatedWindows Fax Compose Form Elevation of Privilege Vulnerability
UpdatedPowerShell Remote Code Execution Vulnerability
UpdatedWindows Graphics Component Information Disclosure Vulnerability
UpdatedWindows Print Spooler Elevation of Privilege Vulnerability
UpdatedMicrosoft Dynamics Business Central Information Disclosure Vulnerability
Updated.NET Framework Information Disclosure Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedMicrosoft Word Remote Code Execution Vulnerability
UpdatedMicrosoft Word Information Disclosure Vulnerability
UpdatedWindows Network Address Translation (NAT) Denial of Service Vulnerability
UpdatedWindows HTTP.sys Elevation of Privilege Vulnerability
Updated- CVE-2022-41056: Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability 7.5 High
Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
Updated Windows Human Interface Device Information Disclosure Vulnerability
UpdatedWindows Resilient File System (ReFS) Elevation of Privilege Vulnerability
UpdatedWindows Kerberos Denial of Service Vulnerability
UpdatedWindows Graphics Component Remote Code Execution Vulnerability
UpdatedAzure RTOS GUIX Studio Remote Code Execution Vulnerability
Updated- CVE-2022-41050: Windows Extensible File Allocation Table Elevation of Privilege Vulnerability 7.8 High
Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
Updated Windows Mark of the Web Security Feature Bypass Vulnerability
UpdatedMicrosoft ODBC Driver Remote Code Execution Vulnerability
UpdatedMicrosoft ODBC Driver Remote Code Execution Vulnerability
Updated- CVE-2022-41045: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability 7.8 High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Updated - CVE-2022-41044: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability 8.1 High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Updated Microsoft Office Information Disclosure Vulnerability
UpdatedVisual Studio Code Information Disclosure Vulnerability
UpdatedMicrosoft Exchange Server Elevation of Privilege Vulnerability
Updated- CVE-2022-41039: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability 8.1 High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Updated Microsoft SharePoint Server Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Spoofing Vulnerability
UpdatedVisual Studio Code Remote Code Execution Vulnerability
UpdatedWindows COM+ Event System Service Elevation of Privilege Vulnerability
UpdatedNuGet Client Elevation of Privilege Vulnerability
UpdatedMicrosoft Word Remote Code Execution Vulnerability
UpdatedSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no wlan filter mac address WORD descr
UpdatedSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'wlan filter mac address WORD descript
UpdatedSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn schedule name1 WORD name2 WORD
UpdatedSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn schedule name1 WORD name2 WORD po
UpdatedSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn pptp advanced name WORD dns (y
UpdatedSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn pptp advanced name WORD dns (yes|
UpdatedSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn pptp advanced name WORD dns (y
UpdatedSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn pptp advanced name WORD dns (yes|
UpdatedSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn l2tp advanced name WORD dns (y
UpdatedSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn l2tp advanced name WORD dns (yes|
UpdatedSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn l2tp advanced name WORD dns (y
UpdatedSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn l2tp advanced name WORD dns (yes|
Updated