CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8007 matches found

CNVD•added 2022/09/19 12:00 a.m.•19 views

Shenzhen Lanning Software Co., Ltd. has SQL injection vulnerability in Lanning Intelligent Collaboration Platform

Shenzhen Lailing Software Co., Ltd. is a well-known large platform OA service provider and a leading knowledge management solution provider in China. It is a national high-tech enterprise specializing in knowledge-based consulting, software development, implementation and technical services for...

2AI score

SaveExploits0

The Hacker News•added 2022/09/15 10:14 a.m.•42 views

Webworm Hackers Using Modified RATs in Latest Cyber Espionage Attacks

A threat actor tracked under the moniker Webworm is taking advantage of bespoke variants of already existing Windows-based remote access trojans to fly under the radar, some of which are said to be in pre-deployment or testing phases. "The group has developed customized versions of three older...

1.9AI score

SaveExploits0

Tenable Nessus•added 2022/09/15 12:00 a.m.•53 views

RHEL 7 / 8 : OpenShift Container Platform 4.7.13 (RHSA-2021:2122)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2122 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

8.1CVSS6.6AI score0.3783EPSS

SaveExploits0References15

CNVD•added 2022/09/14 12:00 a.m.•73 views

Siemens Mendix SAML Module Authentication Bypass Vulnerability

Siemens Mendix SAML Module is an application module from Siemens, Germany. It is used to grant access to Mendix applications based on the end-user's identity in your identity provider. An authentication bypass vulnerability exists in Siemens Mendix SAML Module, which could be exploited by an...

9.8CVSS3.5AI score0.01116EPSS

SaveExploits0References1

ATTACKERKB•added 2022/09/13 8:15 p.m.•5 views

CVE-2022-20395

In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...

7.8CVSS5.9AI score0.00114EPSS

SaveExploits0References2

Rapid7 Blog•added 2022/09/13 8:11 p.m.•290 views

Patch Tuesday - September 2022

This month’s Patch Tuesday is on the lighter side, with 79 CVEs being fixed by Microsoft including 16 CVEs affecting Chromium, used by their Edge browser, that were already available. One zero-day was announced: CVE-2022-37969 is an elevation of privilege vulnerability affecting the Log File Syst...

1.9CVSS1.1AI score0.85762EPSS

SaveExploits14