Vulnerabilities (CVE)

Total 425596 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-48279 3 Debian, Owasp, Trustwave 3 Debian Linux, Modsecurity, Modsecurity 2026-06-17 N/A 7.5 HIGH
In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-39956 but can be considered independent changes to the ModSecurity (C language) codebase.
CVE-2022-48261 1 Huawei 2 Bisheng-wnm, Bisheng-wnm Firmware 2026-06-17 N/A 7.5 HIGH
There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation of this vulnerability may cause the printer service to be abnormal.
CVE-2022-48260 1 Huawei 2 Bisheng-wnm, Bisheng-wnm Firmware 2026-06-17 N/A 7.5 HIGH
There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions.
CVE-2022-48259 1 Huawei 2 Bisheng-wnm, Bisheng-wnm Firmware 2026-06-17 N/A 9.8 CRITICAL
There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could allow attackers to gain higher privileges.
CVE-2022-48258 1 Eternal Terminal Project 1 Eternal Terminal 2026-06-17 N/A 5.3 MEDIUM
In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.
CVE-2022-48257 1 Eternal Terminal Project 1 Eternal Terminal 2026-06-17 N/A 5.3 MEDIUM
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp.
CVE-2022-48256 1 Technitium 1 Dns Server 2026-06-17 N/A 7.5 HIGH
Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records.
CVE-2022-48255 1 Huawei 2 Bisheng-wnm, Bisheng-wnm Firmware 2026-06-17 N/A 9.8 CRITICAL
There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution.
CVE-2022-48254 1 Huawei 2 Leia-b29, Leia-b29 Firmware 2026-06-17 N/A 4.6 MEDIUM
There is a data processing error vulnerability in Leia-B29 2.0.0.49(M03). Successful exploitation could bypass lock screen authentication.
CVE-2022-48253 1 Nazgul 1 Nostromo 2026-06-17 N/A 9.8 CRITICAL
nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used.
CVE-2022-48252 1 Pi.alert Project 1 Pi.alert 2026-06-17 N/A 9.8 CRITICAL
The jokob-sk/Pi.Alert fork (before 22.12.20) of Pi.Alert allows Remote Code Execution via nmap_scan.php (scan parameter) OS Command Injection.
CVE-2022-48251 1 Arm 20 Cortex-a53, Cortex-a53 Firmware, Cortex-a55 and 17 more 2026-06-17 N/A 7.5 HIGH
The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks. NOTE: the vendor reportedly offers the position "while power side channel attacks ... are possible, they are not directly caused by or related to the Arm architecture."
CVE-2022-48250 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2026-06-17 N/A 7.8 HIGH
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2022-48249 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2026-06-17 N/A 7.8 HIGH
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2022-48248 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2026-06-17 N/A 7.8 HIGH
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2022-48247 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2026-06-17 N/A 7.8 HIGH
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2022-48246 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2026-06-17 N/A 7.8 HIGH
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2022-48245 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2026-06-17 N/A 7.8 HIGH
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2022-48244 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2026-06-17 N/A 7.8 HIGH
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVE-2022-48243 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2026-06-17 N/A 7.8 HIGH
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.