CVE-2022-43000 to CVE-2022-43999

149 CVEs with public proof-of-concept exploits.

• CVE-2022-430001 PoCD-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4_pskpwd parameter at /goform/form2WizardStep4.
• CVE-2022-430011 PoCD-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function.
• CVE-2022-430021 PoCD-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54_pskpwd parameter at /goform/form2WizardStep54.
• CVE-2022-430031 PoCD-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setRepeaterSecurity function.
• CVE-2022-430142 PoCsOpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the joborderID parameter.
• CVE-2022-430152 PoCsOpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the entriesPerPage parameter.
• CVE-2022-430162 PoCsOpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback component.
• CVE-2022-430172 PoCsOpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the indexFile component.
• CVE-2022-430182 PoCsOpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the email parameter in the Check Email…
• CVE-2022-430201 PoCOpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag update function.
• CVE-2022-430211 PoCOpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable.
• CVE-2022-430221 PoCOpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag deletion function.
• CVE-2022-430231 PoCOpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function.
• CVE-2022-430391 PoCGPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_isom_meta_restore_items_ref…
• CVE-2022-430401 PoCGPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gf_isom_box_dump_start_ex at…
• CVE-2022-430421 PoCGPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function FixSDTPInTRAF at…
• CVE-2022-430431 PoCGPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function BD_CheckSFTimeOffset at…
• CVE-2022-430441 PoCGPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_isom_get_meta_item_info at…
• CVE-2022-430451 PoCGPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_dump_vrml_sffield at…
• CVE-2022-430461 PoCFood Ordering Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component…
• CVE-2022-430711 PoCA stack overflow in the Catalog::readPageLabelTree2(Object*) function of XPDF v4.04 allows attackers to cause a Denial of Service (DoS)…
• CVE-2022-430811 PoCFast Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /fastfood/purchase.php.
• CVE-2022-430831 PoCAn arbitrary file upload vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary code…
• CVE-2022-430851 PoCAn arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a…
• CVE-2022-430961 PoCMediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.
• CVE-2022-430971 PoCPhpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripting (XSS)…
• CVE-2022-431011 PoCTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.
• CVE-2022-431021 PoCTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function.
• CVE-2022-431031 PoCTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the list parameter in the formSetQosBand function.
• CVE-2022-431041 PoCTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function.
• CVE-2022-431051 PoCTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function.
• CVE-2022-431061 PoCTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the schedStartTime parameter in the setSchedWifi function.
• CVE-2022-431071 PoCTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function.
• CVE-2022-431081 PoCTenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.
• CVE-2022-431101 PoCVoltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system…
• CVE-2022-431172 PoCsSourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain multiple cross-site scripting (XSS)…
• CVE-2022-431191 PoCA cross-site scripting (XSS) vulnerability in Clansphere CMS v2011.4 allows attackers to execute arbitrary web scripts or HTML via a…
• CVE-2022-431381 PoCDolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API.
• CVE-2022-431402 PoCskkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component…
• CVE-2022-431432 PoCsA cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts or HTML via a…
• CVE-2022-431441 PoCA cross-site scripting (XSS) vulnerability in Canteen Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via…
• CVE-2022-431481 PoCrtf2html v0.2.0 was discovered to contain a heap overflow in the component /rtf2html/./rtf_tools.h.
• CVE-2022-431511 PoCtimg v1.4.4 was discovered to contain a memory leak via the function timg::QueryBackgroundColor() at /timg/src/term-query.cc.
• CVE-2022-431521 PoCtsMuxer v2.6.16 was discovered to contain a heap overflow via the function BitStreamWriter::flushBits() at /tsMuxer/bitStream.h.
• CVE-2022-431642 PoCsA stored cross-site scripting (XSS) vulnerability in the Global Lists feature (/index.php?module=global_lists/lists) of Rukovoditel v3.2.1…
• CVE-2022-431652 PoCsA stored cross-site scripting (XSS) vulnerability in the Global Variables feature (/index.php?module=global_vars/vars) of Rukovoditel…
• CVE-2022-431662 PoCsA stored cross-site scripting (XSS) vulnerability in the Global Entities feature (/index.php?module=entities/entities) of Rukovoditel…
• CVE-2022-431672 PoCsA stored cross-site scripting (XSS) vulnerability in the Users Alerts feature (/index.php?module=users_alerts/users_alerts) of Rukovoditel…
• CVE-2022-431681 PoCRukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reports_id parameter.
• CVE-2022-431692 PoCsA stored cross-site scripting (XSS) vulnerability in the Users Access Groups feature (/index.php?module=users_groups/users_groups) of…
• CVE-2022-431702 PoCsA stored cross-site scripting (XSS) vulnerability in the Dashboard Configuration feature (index.php?module=dashboard_configure/index) of…
• CVE-2022-431711 PoCA heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a…
• CVE-2022-431831 PoCXXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.
• CVE-2022-431851 PoCA stored cross-site scripting (XSS) vulnerability in the Configuration/Holidays module of Rukovoditel v3.2.1 allows attackers to execute…
• CVE-2022-431921 PoCAn arbitrary file upload vulnerability in the component /dede/file_manage_control.php of Dedecms v5.7.101 allows attackers to execute…
• CVE-2022-432211 PoCopen5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. This vulnerability allows attackers to cause…
• CVE-2022-432221 PoCopen5gs v2.4.11 was discovered to contain a memory leak in the component src/smf/pfcp-path.c. This vulnerability allows attackers to cause…
• CVE-2022-432231 PoCopen5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a…
• CVE-2022-432291 PoCSimple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at…
• CVE-2022-432351 PoCLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_hevc_epel_pixels_8_sse in sse-motion.cc…
• CVE-2022-432361 PoCLibde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via put_qpel_fallback<unsigned short> in…
• CVE-2022-432371 PoCLibde265 v1.0.8 was discovered to contain a stack-buffer-overflow vulnerability via void put_epel_hv_fallback<unsigned short> in…
• CVE-2022-432381 PoCLibde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_h_3_v_3_sse in sse-motion.cc. This vulnerability…
• CVE-2022-432391 PoCLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_chroma<unsigned short> in motion.cc. This…
• CVE-2022-432401 PoCLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_hevc_qpel_h_2_v_1_sse in sse-motion.cc…
• CVE-2022-432411 PoCLibde265 v1.0.8 was discovered to contain an unknown crash via ff_hevc_put_hevc_qpel_v_3_8_sse in sse-motion.cc. This vulnerability allows…
• CVE-2022-432421 PoCLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via mc_luma<unsigned char> in motion.cc. This vulnerability…
• CVE-2022-432431 PoCLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via ff_hevc_put_weighted_pred_avg_8_sse in sse-motion.cc…
• CVE-2022-432441 PoCLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_qpel_fallback<unsigned short> in…
• CVE-2022-432451 PoCLibde265 v1.0.8 was discovered to contain a segmentation violation via apply_sao_internal<unsigned short> in sao.cc. This vulnerability…
• CVE-2022-432481 PoCLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_weighted_pred_avg_16_fallback in…
• CVE-2022-432491 PoCLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_epel_hv_fallback<unsigned short> in…
• CVE-2022-432501 PoCLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_qpel_0_0_fallback_16 in fallback-motion.cc. This…
• CVE-2022-432521 PoCLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_epel_16_fallback in fallback-motion.cc. This…
• CVE-2022-432531 PoCLibde265 v1.0.8 was discovered to contain a heap-buffer-overflow vulnerability via put_unweighted_pred_16_fallback in fallback-motion.cc…
• CVE-2022-432541 PoCGPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_list_new at utils/list.c.
• CVE-2022-432551 PoCGPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_odf_new_iod at odf/odf_code.c.
• CVE-2022-432561 PoCSeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php.
• CVE-2022-432601 PoCTenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function.
• CVE-2022-432631 PoCA cross-site scripting (XSS) vulnerability in Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to execute…
• CVE-2022-432641 PoCArobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files…
• CVE-2022-432791 PoCLimeSurvey before v5.0.4 was discovered to contain a SQL injection vulnerability via the component…
• CVE-2022-432801 PoCwasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount.
• CVE-2022-432811 PoCwasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type…
• CVE-2022-432821 PoCwasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount.
• CVE-2022-432831 PoCwasm2c v1.0.29 was discovered to contain an abort in CWriter::Write.
• CVE-2022-432841 PoCNginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via njs_scope_valid_value at njs_scope.h. NOTE: the vendor…
• CVE-2022-432851 PoCNginx NJS v0.7.4 was discovered to contain a segmentation violation in njs_promise_reaction_job. NOTE: the vendor disputes the…
• CVE-2022-432861 PoCNginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory copy in the function…
• CVE-2022-432881 PoCRukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the order_by parameter at…
• CVE-2022-432891 PoCDeark v.1.6.2 was discovered to contain a stack overflow via the do_prism_read_palette() function at /modules/atari-img.c.
• CVE-2022-432931 PoCWacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability via the component \Wacom\Wacom_Tablet.exe.
• CVE-2022-433081 PoCINTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies.
• CVE-2022-433171 PoCA cross-site scripting (XSS) vulnerability in /hrm/index.php?msg of Human Resource Management System v1.0 allows attackers to execute…
• CVE-2022-433201 PoCFeehiCMS v2.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at…
• CVE-2022-433211 PoCShopwind v3.4.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the component /common/library/Page.php.
• CVE-2022-433251 PoCAn unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* -…
• CVE-2022-433261 PoCAn Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*]…
• CVE-2022-433331 PoCTelenia Software s.r.l TVox before v22.0.17 was discovered to contain a remote code execution (RCE) vulnerability in the component…
• CVE-2022-433401 PoCA Cross-Site Request Forgery (CSRF) in dzzoffice 2.02.1_SC_UTF8 allows attackers to arbitrarily create user accounts and grant…
• CVE-2022-433431 PoCN-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken() at Main.c.
• CVE-2022-433571 PoCStack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218…
• CVE-2022-433581 PoCStack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which…
• CVE-2022-433691 PoCAutoTaxi Stand Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component search.php.
• CVE-2022-433721 PoCEmlog Pro v1.7.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability at /admin/store.php.
• CVE-2022-434411 PoCA code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted…
• CVE-2022-434671 PoCAn out-of-bounds write vulnerability exists in the PQS format coord_file functionality of Open Babel 3.1.1 and master commit 530dbfa3. A…
• CVE-2022-434731 PoCA blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. A specially…
• CVE-2022-434841 PoCTERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server Framework for Java (Rich) 2.0.0.2 to 2.0.5.1 are…
• CVE-2022-435511 PoCA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can…
• CVE-2022-435712 PoCsRemote Code Execution through dashboard PDF generation component in Splunk Enterprise
• CVE-2022-435881 PoCA null pointer dereference vulnerability exists in the handle_ioctl_83150 functionality of Callback technologies CBFS Filter 20.0.8317. A…
• CVE-2022-435891 PoCA null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality of Callback technologies CBFS Filter 20.0.8317. A…
• CVE-2022-435901 PoCA null pointer dereference vulnerability exists in the handle_ioctl_0x830a0_systembuffer functionality of Callback technologies CBFS…
• CVE-2022-435911 PoCA buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can…
• CVE-2022-435921 PoCAn information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A…
• CVE-2022-435931 PoCA denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially…
• CVE-2022-435941 PoCMultiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2…
• CVE-2022-435951 PoCMultiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2…
• CVE-2022-435961 PoCAn information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO…
• CVE-2022-435971 PoCMultiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO…
• CVE-2022-435981 PoCMultiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO…
• CVE-2022-435991 PoCMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A…
• CVE-2022-436001 PoCMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A…
• CVE-2022-436011 PoCMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A…
• CVE-2022-436021 PoCMultiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A…
• CVE-2022-436031 PoCA denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A…
• CVE-2022-436041 PoCAn out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request functionality of EIP Stack Group OpENer…
• CVE-2022-436051 PoCAn out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer…
• CVE-2022-436061 PoCA use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP Stack Group…
• CVE-2022-436071 PoCAn out-of-bounds write vulnerability exists in the MOL2 format attribute and value functionality of Open Babel 3.1.1 and master commit…
• CVE-2022-436631 PoCAn integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A…
• CVE-2022-436641 PoCA use-after-free vulnerability exists within the way Ichitaro Word Processor 2022, version 1.0.1.57600, processes protected documents. A…
• CVE-2022-436651 PoCA denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8.645. A specially-crafted PE file can…
• CVE-2022-436803 PoCsIn libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in…
• CVE-2022-436811 PoCAn out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message that ends with the…
• CVE-2022-437041 PoCThe Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass the intended requirement to communicate…
• CVE-2022-437531 PoCSUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload
• CVE-2022-437693 PoCsKEVHitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
• CVE-2022-437761 PoCThe url parameter of the /api/geojson endpoint in Metabase versions <44.5 can be used to perform Server Side Request Forgery attacks…
• CVE-2022-437811 PoCThere is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to…
• CVE-2022-439393 PoCsKEVHitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions
• CVE-2022-439591 PoCInsufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through 22.200.200 allow remote administrators…
• CVE-2022-439703 PoCsBuffer overflow in Linksys WRT54GL
• CVE-2022-439713 PoCsArbitrary code execution in Linksys WUMC710
• CVE-2022-439723 PoCsNull pointer dereference in Linksys WRT54GL
• CVE-2022-439734 PoCsArbitrary code execution in Linksys WRT54GL
• CVE-2022-439971 PoCIncorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows for local privilege escalation. There is an…
• CVE-2022-439991 PoCAn issue was discovered in BACKCLICK Professional 5.9.63. Due to exposed CORBA management services, arbitrary system commands can be…