CVE-2022-23178

creationtimestamp| type| source ---|---|--- 2022-01-15 18:50:39+00:00| seen| https://t.me/cibsecurity/35645 2024-11-25 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-25 2024-11-29 00:00:00+00:00| exploited| The Shadowserver...

File Upload Vulnerability in the Flash Flood Monitoring and Early Warning Platform of Siltronic Ltd (CNVD-2022-10326)

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A file upload vulnerability exists in the flash flood monitoring and early warning platform of Sicron Technology Co. Ltd, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in the Flash Flood Monitoring and Early Warning Platform of Siltronic Ltd (CNVD-2022-10328)

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A file upload vulnerability exists in the flash flood monitoring and early warning platform of Sicron Technology Co. Ltd, which can be exploited by an attacker to gain control of the server...

Cisco Security Manager Cross-Site Scripting Vulnerability (CNVD-2022-06385)

Cisco Security Manager CSM is a set of enterprise-class management applications from Cisco USA, which is mainly used to configure firewall, VPN and intrusion protection security services on Cisco networks and security devices.Cisco Security Manager has a cross-site scripting vulnerability, which...

Cisco Security Manager Cross-Site Scripting Vulnerability (CNVD-2022-06379)

Cisco Security Manager CSM is a set of enterprise-class management applications from Cisco USA that are used to configure firewall, VPN, and intrusion protection security services on Cisco networks and security devices.Cisco Security Manager is vulnerable to a cross-site scripting vulnerability...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-16345)

Google Android is a Linux-based open-source operating system from the US company Google. Google Android elevation of privilege vulnerability can be exploited by attackers to elevate privileges...

Siemens SICAM PQ Analyzer Search Path Vulnerability

SICAM PQ Analyzer is a power quality system software that provides options for evaluating archived PQ measurement data and fault records. A search path vulnerability exists in Siemens SICAM PQ Analyzer, which can be exploited by an attacker with write privileges to plant an executable that will r...

Google Android Denial of Service Vulnerability (CNVD-2022-15196)

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android 10, 11, and 12, which can be exploited by attackers to cause a denial of service...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-06155)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has a security vulnerability that could be exploited by an attacker to potentially cause a local privilege escalation without the need for additional executive privileges...

CISA Adds 15 Known Exploited Vulnerabilities to Catalog

CISA has added 15 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

GPAC Code Issue Vulnerability (CNVD-2022-04822)

GPAC is an open source multimedia framework. version 1.0.1 of GPAC contains a security vulnerability that can be exploited by attackers to perform denial of service attacks...

Tenable Network Security Tenable.Sc Remote Code Execution Vulnerability

Tenable Network Security Tenable.Sc is a vulnerability analysis solution from Tenable Network Security, Inc. The product supports real-time vulnerability assessment and management, etc. Tenable Network Security Tenable.Sc has a remote code execution vulnerability that can be exploited by attacker...

Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of valid...

Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability (CNVD-2022-02641)

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of effective...

Atlassian Jira Access Control Error Vulnerability (CNVD-2022-05438)

Atlassian Jira is a defect tracking management system from Atlassian Australia. An access control error vulnerability exists in Atlassian Jira Server and Data Center due to an interruption access control vulnerability in /secure/EditSubscription.jspa, which can be exploited by a remote,...

Shopware Open Redirect Vulnerability

Shopware is a set of open source e-commerce software from the German company Shopware. shopware has an open redirect vulnerability in versions prior to 5.7.7, which stems from incomplete URL handling in shopware routing and can be exploited by attackers to redirect users to arbitrary websites...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-06156)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has a security vulnerability that could be exploited by an attacker to potentially cause a local privilege escalation without the need for additional executive privileges...

Telesquare TLR-2005KSH Access Control Error Vulnerability

Telesquare Tlr-2005Ksh is a Sk Telecom Lte router from Telesquare Korea.Telesquare TLR-2005KSH is vulnerable to an access control error, which can be exploited by attackers to upload arbitrary files, including HTML and CGI formats...

Huawei HarmonyOS Invalid Address Access Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based, distributed operating system. Huawei HarmonyOS has a security vulnerability that could be exploited by an attacker to cause a device to reboot...

NETGEAR ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 SQL注入漏洞

NETGEAR SRX5308 is a firewall appliance. NETGEAR ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 SQL injection vulnerability can be exploited by attackers to obtain sensitive information...