Search vulnerabilities

Expected end of text, found ':' (at char 31), (line:1, col:32)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,909

CVE-2022-30429

Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace title. The vulnerabilities were found in versions 3.3.29 and 8.0.1 and could also be present in all intermediate versions.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Neos
Products
Neos Cms
CVE-2022-30428

In ginadmin through 05-10-2022, the incoming path value is not filtered, resulting in arbitrary file reading.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Ginadmin Project
Products
Ginadmin
CVE-2022-30427

In ginadmin through 05-10-2022 the incoming path value is not filtered, resulting in directory traversal.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Ginadmin Project
Products
Ginadmin
CVE-2022-30425

Tenda Technology Co.,Ltd HG6 3.3.0-210926 was discovered to contain a command injection vulnerability via the pingAddr and traceAddr parameters. This vulnerability is exploited via a crafted POST request.

CVSS 3.1 · 8.8 High EPSS 20.0% KEV · Not listed
Vendors
Tenda
Products
Hg6 Hg6 Firmware
CVE-2022-30422

Proietti Tech srl Planet Time Enterprise 4.2.0.1,4.2.0.0,4.1.0.0,4.0.0.0,3.3.1.0,3.3.0.0 is vulnerable to Remote code execution via the Viewstate parameter.

CVSS 3.1 · 9.8 Critical EPSS 4.5% KEV · Not listed
Vendors
Proietti
Products
Planet Time Enterprise