CVE-2022-38181

CVE-2022-38181 affects the Arm Mali GPU kernel driver across Midgard, Bifrost, and Valhall architectures (r4p0–r32p0; r0p0–r38p1; r39p0; r19p0–r38p1). It is a use-after-free vulnerability that lets unprivileged users access freed memory, enabling memory corruption and potential local privilege es...

CVE-2016-20016

CVE-2016-20016 affects MVPower CCTV DVR models (e.g., TV-7104HE 1.8.4 115215B9 and TV7108HE). The flaw is a web shell accessible via a /shell URI that lets a remote unauthenticated attacker execute arbitrary OS commands as root. Public sources (NVD, Red Hat advisories, CVE lists) confirm the vuln...

CVE-2016-20017

CVE-2016-20017 affects D-Link DSL-2750B devices prior to firmware version 1.05. The vulnerability allows remote unauthenticated command injection via the login.cgi cli parameter, enabling total compromise of affected routers as described in multiple sources. Exploitation was observed in the wild ...

CVE-2022-22242

CVE-2022-22242 is a reflected Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS, specifically in the J-Web component. An unauthenticated attacker can cause malicious scripts to be reflected off J-Web into the victim’s browser within the J-Web session, potentially compromising ...

CVE-2022-21587

CVE-2022-21587 : An unauthenticated remote code execution in Oracle Web Applications Desktop Integrator (Upload) affects Oracle E-Business Suite 12.2.3–12.2.11. The vulnerability permits network-access via HTTP to compromise the Web Apps Desktop Integrator and can lead to full takeover, with CVSS...

CVE-2022-40684

CVE-2022-40684 is an authentication bypass affecting Fortinet products: FortiOS (versions 7.2.0–7.2.1 and 7.0.0–7.0.6), FortiProxy (7.2.0 and 7.0.0–7.0.6), and FortiSwitchManager (7.2.0 and 7.0.0). The flaw enables an unauthenticated attacker to perform administrative interface operations via spe...

CVE-2022-38028

CVE-2022-38028 is a Windows Print Spooler privilege-escalation vulnerability. It arises from improper privilege assignment in the Print Spooler service, enabling a local attacker with low privileges and no user interaction to escalate to SYSTEM. Public exploits have been observed; CISA/KEV and MS...

CVE-2022-41033

CVE-2022-41033 is a Windows Privilege Escalation affecting the COM+ Event System Service. The root cause is an improper privilege handling in the service, enabling a local attacker with low privileges to obtain SYSTEM level access, compromising confidentiality, integrity, and availability. The CV...

CVE-2022-33896

Hancom Office 2020 (Hword) vulnerability CVE-2022-33896 is a heap/buffer underflow in Hword when parsing XML-based documents. A specially crafted malicious .docx can trigger memory corruption by using memory before the allocation, potentially enabling arbitrary code execution. Affected version: H...

CVE-2022-41852

CVE-2022-41852 has been rejected and does not represent an active vulnerability entry.

CVE-2022-42013

In the connected Zerobot post, CVE-2022-42013 is noted as being mislabeled and equated with CVE-2021-42013 in prior reports. The document explicitly lists CVE-2021-42013 as an Apache vulnerability exploited by Zerobot 1.1 and also references CVE-2022-33891 (Apache Spark) among the exploited set. ...

CVE-2022-41040

CVE-2022-41040 is an Exchange Server SSRF vulnerability used to escalate privileges, often paired with CVE-2022-41082 for remote code execution (RCE). The vulnerability chain affects on‑premise Exchange Server deployments via the Autodiscover service, enabling an authenticated attacker to trigger...

CVE-2022-41082

CVE-2022-41082 is the RCE component of Microsoft Exchange’s ProxyNotShell chain. It relies on a deserialization gadget in the PSRP backend that an authenticated attacker can reach after exploiting CVE-2022-41040 SSRF. Successful exploitation yields code execution as NT AUTHORITY\SYSTEM on vulnera...

CVE-2022-20775

Cisco CVE-2022-20775 affects the Cisco Catalyst SD-WAN Controller/Manager CLI. It is a local, authenticated privilege-escalation in the CLI caused by improper access controls on commands, enabling an attacker to run commands as root. Cisco released updates addressing this, with no workarounds. Af...

CVE-2022-3075

CVE-2022-3075 affects Google Chrome/Chromium Mojo within the renderer. The issue is insufficient data validation that could allow a remote attacker who has compromised the renderer process to escape the sandbox via a crafted HTML page, potentially enabling remote code execution. Affected versions...

CVE-2022-3038

CVE-2022-3038 is a memory-unsafe issue in Google Chrome’s Network Service (Chromium-based). The connected documents indicate a use-after-free in Network Service prior to 105.0.5195.52 that can allow a remote attacker to trigger heap corruption via a crafted HTML page. Affected product/component: ...

CVE-2022-2856

CVE-2022-2856 is a Google Chrome/Chromium Intents input-validation vulnerability. Affected component: Chrome/Chromium on Android (and Chromium-derived browsers) prior to 104.0.5112.101; root cause: insufficient validation of untrusted input passed via Intents, enabling a remote attacker to load a...

CVE-2022-41352

CVE-2022-41352 affects Zimbra Collaboration (ZCS) 8.8.15 and 9.0. The issue arises from an amavis/cpio handling path traversal that can cause arbitrary file writes to /opt/zimbra/jetty/webapps/zimbra/public, enabling unauthorized access to other user accounts. Public details confirm the root caus...

CVE-2022-3236

CVE-2022-3236 — Sophos Firewall: A code injection vulnerability in the User Portal and Webadmin allows remote code execution on Sophos Firewall versions

CVE-2022-39197

CVE-2022-39197 affects HelpSystems Cobalt Strike Team Server up through version 4.7, where a cross-site scripting vulnerability in the Teamserver enables an attacker to influence the Beacon configuration by supplying a malformed username in payloads. The public data describe several PoCs and expl...