CVE-2022-40765

The CVE-2022-40765 issue affects Mitel MiVoice Connect, specifically the Edge Gateway component, where insufficient restriction of URL parameters allows an authenticated attacker with internal network access to perform a command injection. Connected sources confirm an internal-network, authentica...

CVE-2022-41840

Welcart eCommerce WordPress plugin = 2.7.8) or apply the patch referenced by Patchstack. Note: The Nuclei template confirms unauthenticated local file inclusion; no further exploit details are provided in the available documents. If exploitation activity is observed in the wild, refer to the patc...

CVE-2022-23748

CVE-2022-23748 describes a DLL sideloading vulnerability in mDNSResponder.exe (Audinate Dante environment) where the executable’s DLL loading path/conditions allow loading of malicious DLLs. Connected docs confirm the root cause is improper DLL loading, enabling a local attacker to leverage the D...

CVE-2022-40881

CVE-2022-40881 affects SolarView Compact 6.00 (CONTEC) with a remote command-injection via the web server page network_test.php. Multiple connected sources confirm an OS command injection vulnerability on the product’s web interface (CWE-78) that allows an attacker to execute arbitrary commands o...

CVE-2022-3980

CVE-2022-3980 affects Sophos Mobile on-premises (versions 5.0.0–9.7.4) and is caused by XML External Entity (XXE) processing, enabling SSRF and potential code execution. Exploitation could allow reading arbitrary server files and SSRF attacks; base CVSS v3.1 score is 9.8 (CRITICAL). Affected soft...

CVE-2022-40843

Affected product: Tenda AC1200 V-W15Ev2 (W15Ev2, firmware version V15.11.0.10(1576)). Vulnerability: Improper authorization/improper session management allows bypassing the router login page. This can lead to reading the router’s syslog.log file which contains the MD5 password of the Administrato...

CVE-2022-41128

CVE-2022-41128 is a Windows Scripting Languages Remote Code Execution vulnerability in the JScript9 scripting language. Reports consistently describe a network-exploitable RCE where visiting a malicious site can trigger memory corruption and arbitrary code execution on affected Windows systems. E...

CVE-2022-41091

CVE-2022-41091 is a Windows security feature bypass in Mark of the Web (MOTW). The vulnerability allows bypassing MOTW protections, with a CVSS v3.1 base score of 5.4 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L). Public sources note exploitation in the wild and patches are delivered via Microsoft’s upda...

CVE-2022-41049

CVE-2022-41049 refers to a Windows Mark of the Web (MotW) security feature bypass vulnerability. Affected: Windows MotW handling; Root cause: bypass of MotW checks that normally protect against untrusted content. Impact: limited loss of integrity and availability of security features; exploitatio...

CVE-2022-41125

CVE-2022-41125 affects Windows CNG Key Isolation Service (Windows Cryptographic Next Generation). The underlying issue is an Elevation of Privilege in that service, enabling an authenticated attacker to gain SYSTEM privileges. Patch guidance is to install the Microsoft updates for this CVE (per M...

CVE-2022-41073

CVE-2022-41073 — Windows Print Spooler Elevation of Privilege affects Windows Print Spooler. Connected docs note exploitation in the wild and public patching via Microsoft updates (Nov 2022 Patch Tuesday). Remediation is to apply the Microsoft update for CVE-2022-41073 per MSRC/update guidance in...

CVE-2022-41080

CVE-2022-41080 is an Elevation of Privilege vulnerability in Microsoft Exchange Server. The connected sources describe it as an unspecified Exchange Privilege Escalation that is chainable with CVE-2022-41082 (which enables RCE). Public technical details in the provided documents are limited: no e...

CVE-2022-31199

CVE-2022-31199 is an insecure object deserialization vulnerability in Netwrix Auditor’s User Activity Video Recording component that can allow an unauthenticated attacker to execute arbitrary code as NT AUTHORITY\SYSTEM on Netwrix Auditor servers and monitored agents. The CVE is described as a re...

CVE-2022-3481

CVE-2022-3481 concerns the WordPress plugin WooCommerce Dropshipping (versions before 4.4). The issue is an unauthenticated SQL injection via a REST endpoint due to improper sanitization and escaping of a parameter used in a SQL statement. The vulnerability affects endpoints exposed to unauthenti...

CVE-2022-42827

CVE-2022-42827 is an Apple kernel out-of-bounds write vulnerability. It affects iOS/iPadOS; exploit could allow arbitrary code execution with kernel privileges. Fixed in iOS 15.7.1/iPadOS 15.7.1 and iOS 16.x/iPadOS 16.x. Some sources indicate active exploitation; update to patched releases is rec...

CVE-2022-3723

CVE-2022-3723 is a Type Confusion in V8 affecting Google Chrome (Chromium-based) up to version 107.0.5304.87. The root cause is a V8 type confusion that can allow remote heap corruption via a crafted HTML page. Documents in connected data indicate Chrome/Chromium-based products are vulnerable and...

CVE-2022-3801

CVE-2022-3801 is confirmed by multiple sources as a SQL injection vulnerability in IBAX go-ibax, affecting an unknown part of file /api/v2/open/rowsInfo. The root cause is described as manipulation of the argument order enabling remote exploitation; public exploits/triage have been disclosed (VDB...

CVE-2022-3254

CVE-2022-3254 affects the WordPress AWP Classifieds Plugin (versions prior to 4.3). The issue is an SQL injection caused by improper sanitization/escaping of parameters in an unauthenticated AJAX action, and is triggered when a specific premium module is active. The vulnerability allows execution...

CVE-2022-0074

CVE-2022-0074 affects LiteSpeed/OpenLiteSpeed Web Server and Container. Affected: OpenLiteSpeed Web Server and LiteSpeed Web Server Container, versions 1.6.15–before 1.7.16.1. Root cause: Untrusted Search Path, enabling Privilege Escalation. Impact: Privilege elevation as stated across Red Hat, N...

CVE-2022-0073

CVE-2022-0073 affects LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards. The vulnerability is an Improper Input Validation that enables Command Injection. Affected versions are OpenLiteSpeed Web Server 1.7.0.x up to 1.7.16.0 (and corresponding OpenLiteSpeed/LiteS...