Total
425620 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2022-48074 | 1 Nomachine | 1 Nomachine | 2026-06-17 | N/A | 5.3 MEDIUM |
| An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file. | |||||
| CVE-2022-48073 | 1 Phicomm | 2 K2, K2 Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| Phicomm K2G v22.6.3.20 was discovered to store the root and admin passwords in plaintext. | |||||
| CVE-2022-48072 | 1 Phicomm | 2 K2, K2 Firmware | 2026-06-17 | N/A | 7.8 HIGH |
| Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function. | |||||
| CVE-2022-48071 | 1 Phicomm | 2 K2, K2 Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext. | |||||
| CVE-2022-48070 | 1 Phicomm | 2 K2, K2 Firmware | 2026-06-17 | N/A | 7.8 HIGH |
| Phicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function. | |||||
| CVE-2022-48069 | 1 Totolink | 2 A830r, A830r Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| Totolink A830R V4.1.2cu.5182 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter. | |||||
| CVE-2022-48067 | 1 Totolink | 2 A830r, A830r Firmware | 2026-06-17 | N/A | 5.5 MEDIUM |
| An information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to obtain the root password via a brute-force attack. | |||||
| CVE-2022-48066 | 1 Totolink | 2 A830r, A830r Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie. | |||||
| CVE-2022-48065 | 3 Fedoraproject, Gnu, Netapp | 3 Fedora, Binutils, Ontap Select Deploy Administration Utility | 2026-06-17 | N/A | 5.5 MEDIUM |
| GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c. | |||||
| CVE-2022-48064 | 3 Fedoraproject, Gnu, Netapp | 3 Fedora, Binutils, Ontap Select Deploy Administration Utility | 2026-06-17 | N/A | 5.5 MEDIUM |
| GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack. | |||||
| CVE-2022-48063 | 1 Gnu | 1 Binutils | 2026-06-17 | N/A | 5.5 MEDIUM |
| GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack. | |||||
| CVE-2022-48023 | 1 Zammad | 1 Zammad | 2026-06-17 | N/A | 4.3 MEDIUM |
| Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags. | |||||
| CVE-2022-48022 | 1 Zammad | 1 Zammad | 2026-06-17 | N/A | 4.3 MEDIUM |
| An issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agent permissions to view information about tickets they are not authorized to see. | |||||
| CVE-2022-48021 | 1 Zammad | 1 Zammad | 2026-06-17 | N/A | 9.8 CRITICAL |
| A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message sent to the server. | |||||
| CVE-2022-48020 | 1 Vinteo | 1 Video Core | 2026-06-17 | N/A | 6.1 MEDIUM |
| Vinteo VCC v2.36.4 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the conference parameter. This vulnerability allows attackers to inject arbitrary code which will be executed by the victim user's browser. | |||||
| CVE-2022-48019 | 1 Wfs | 1 Another Eden | 2026-06-17 | N/A | 7.8 HIGH |
| The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to perform privilege escalation via a crafted payload. | |||||
| CVE-2022-48013 | 1 Opencats | 1 Opencats | 2026-06-17 | N/A | 5.4 MEDIUM |
| Opencats v0.9.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /opencats/index.php?m=calendar. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description or Title text fields. | |||||
| CVE-2022-48012 | 1 Opencats | 1 Opencats | 2026-06-17 | N/A | 6.1 MEDIUM |
| Opencats v0.9.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /opencats/index.php?m=settings&a=ajax_tags_upd. | |||||
| CVE-2022-48011 | 1 Opencats | 1 Opencats | 2026-06-17 | N/A | 9.8 CRITICAL |
| Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function. | |||||
| CVE-2022-48010 | 1 Limesurvey | 1 Limesurvey | 2026-06-17 | N/A | 5.4 MEDIUM |
| LimeSurvey v5.4.15 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /index.php/surveyAdministration/rendersidemenulink?subaction=surveytexts. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description or Welcome-message text fields. NOTE: the vendor indicates that this is not a vulnerability because the manipulation requires Superadministrator privileges, and Superadministrators are already allowed to customize surveys with JavaScript as they wish. | |||||