CVE-2022-23227

NUUO NVRmini2 devices (up to v3.11) are affected by a Missing Authentication vulnerability that allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users due to handle_import_user.php not requiring authentication. When paired with CVE-2011-5...

CVE-2021-34993

CVE-2021-34993 is an authentication-bypass vulnerability in Commvault CommCell’s CVSearchService. Remote attackers can bypass authentication on affected installations (e.g., CommCell 11.22.22) due to lack of proper validation prior to authentication. Multiple sources (NVD description referencing ...

CVE-2021-45422

Affected software: Reprise License Manager (RLM) 14.2. Vulnerability: reflected cross-site scripting (XSS) in the /goform/activate_process endpoint, via the count parameter in GET requests. Root cause: improper validation of user-controlled data leading to client-side code execution. Impact: coul...

CVE-2022-23134

The CVE-2022-23134 entry details an authentication/authorization issue in Zabbix Frontend: after initial setup, some setup.php steps are accessible by unauthenticated users, potentially allowing bypass of checks and changes to frontend configuration. Connected advisories confirm real-world impact...

CVE-2022-23131

CVE-2022-23131 affects the Zabbix Frontend when SAML SSO is enabled (non-default). A malicious, unauthenticated actor can modify session data because user logins stored in the session are not verified, potentially escalating privileges to admin and taking over the frontend. The vulnerability requ...

CVE-2022-21969

CVE-2022-21969 is a Microsoft Exchange Server Remote Code Execution vulnerability identified in the Exchange certificate handling RPC path. The root cause described in the connected material centers on deserialization of crafted ExchangeCertificateRpc input via a BinaryFormatter-based chain (Exch...

CVE-2022-21919

CVE-2022-21919 is a Windows User Profile Service elevation-of-privilege bug. Connected docs describe the root cause as improper validation in profext.dll’s CreateDirectoryJunction, enabling a directory junction attack to escalate to SYSTEM by abusing UI/UX (Narrator/consent.exe) and UAC. Some sou...

CVE-2022-21907

CVE-2022-21907 concerns the HTTP Protocol Stack (http.sys) in Windows, enabling remote code execution via specially crafted packets. Public documentation and PoCs indicate impact on Windows 10 (notably 2004) and Windows Server variants, with multiple exploits and PoCs surfacing publicly. Mitigati...

CVE-2022-21894

CVE-2022-21894 is a Secure Boot security feature bypass exploited by the BlackLotus UEFI bootkit. It bypasses Secure Boot to load malicious EFI components, enabling persistence, disabling HVCI and Defender, and prior to OS load. Attack requires elevated privileges or physical access; bootkit impl...

CVE-2022-21887

CVE-2022-21887 is a Win32k local elevation-of-privilege vulnerability in Windows. Public advisories indicate it affects Win32k and can enable attackers to escalate privileges on a vulnerable system. Public exploits have been reported for this CVE. Microsoft mitigation involves installing the Janu...

CVE-2022-21882

CVE-2022-21882 is a Windows Win32k local privilege-escalation vulnerability. It arises when an incomplete patch for CVE-2021-1732 leaves a bypass path that lets attackers trigger the vulnerability via a manipulated user-callback flow in Win32k, enabling a full compromise of the affected process. ...

CVE-2021-25032

The CVE concerns the WordPress plugins PublishPress Capabilities and PublishPress Capabilities Pro (versions before 2.3.1). The issue stems from missing authorization and CSRF checks when updating plugin settings via the init hook, and failure to validate that updated options belong to the plugin...

CVE-2021-35247

CVE-2021-35247 affects SolarWinds Serv-U where the LDAP authentication input validator improperly sanitized characters in the web login interface. Public documentation from SolarWinds notes that versions up to 15.2.5 were affected and fixed in 15.3; SolarWinds recommends updating Serv-U to the la...

CVE-2022-22265

Technical details about CVE-2022-22265 are not publicly provided in the connected documents. The sources mention the vulnerability at a high level; monitor official advisories for patches affecting Samsung NPU drivers.

CVE-2022-21662

CVE-2022-21662 affects WordPress core; vulnerability allows low-privileged authenticated users (e.g., authors) to execute JavaScript via stored XSS, potentially impacting high-privilege users. It has been patched in WordPress 5.8.3, with older affected versions fixed via security releases back to...

CVE-2021-31589

BeyondTrust Secure Remote Access Base software up to version 6.0.1 is affected by a cross-site scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via unsanitized web requests, with documented impact including potential execution of JavaScript i...

CVE-2021-43711

The CVE-2021-43711 entry concerns TOTOLINK EX200, specifically the downloadFlile.cgi binary in version V4.0.3c.7646_B20201211. The issue is a command injection vulnerability that occurs when handling GET parameters; the parameter name can be constructed to achieve unauthenticated command executio...

CVE-2021-44168

Fortinet FortiOS FortiGate vulnerability CVE-2021-44168: a local authenticated attacker can exploit the FortiOS “execute restore src-vis” path to download arbitrary files on the device via specially crafted update packages, potentially yielding a root shell via LD_PRELOAD. Published exploit code ...

CVE-2021-20167

Netgear RAX43 firmware version 1.0.3.96 is affected by a command injection vulnerability in the readycloud CGI app. The issue is exploitable via the name parameter in the readycloud_control.cgi CGI (and, per related nuclei templates, a related buffer overrun in the cgi-bin endpoint that can redir...

CVE-2021-20166

Netgear RAX43 firmware 1.0.3.96 is affected by a buffer overrun in the cgi-bin URL parsing endpoint (CVE-2021-20166). Nuclei templates also describe a related issue: command injection/authentication bypass in readycloud_control.cgi’s name parameter, and note that this vulnerability combines CVE-2...