Vulnerabilities (CVE)

Total 425653 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-47034 1 Playsms 1 Playsms 2026-06-17 N/A 9.8 CRITICAL
A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication.
CVE-2022-47029 1 Actionlauncher 1 Action Launcher 2026-06-17 N/A 7.8 HIGH
An issue was found in Action Launcher v50.5 allows an attacker to escalate privilege via modification of the intent string to function update.
CVE-2022-47028 1 Actionlauncher 1 Action Launcher 2026-06-17 N/A 5.5 MEDIUM
An issue discovered in Action Launcher for Android v50.5 allows an attacker to cause a denial of service via arbitary data injection to function insert.
CVE-2022-47027 1 Timmystudios 1 Fast Typing Keyboard 2026-06-17 N/A 9.8 CRITICAL
Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal storage via a dictionary traversal vulnerability and achieve arbitrary code execution.
CVE-2022-47024 1 Vim 1 Vim 2026-06-17 N/A 7.8 HIGH
A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.
CVE-2022-47022 1 Open-mpi 1 Hwloc 2026-06-17 N/A 4.7 MEDIUM
An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.
CVE-2022-47021 2 Fedoraproject, Xiph 2 Fedora, Opusfile 2026-06-17 N/A 7.8 HIGH
A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts.
CVE-2022-47015 1 Mariadb 1 Mariadb 2026-06-17 N/A 6.5 MEDIUM
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer.
CVE-2022-47012 1 Solarwinds 1 Dynamips 2026-06-17 N/A 7.5 HIGH
Use of uninitialized variable in function gen_eth_recv in GNS3 dynamips 0.2.21.
CVE-2022-47011 1 Gnu 1 Binutils 2026-06-17 N/A 5.5 MEDIUM
An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
CVE-2022-47010 1 Gnu 1 Binutils 2026-06-17 N/A 5.5 MEDIUM
An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
CVE-2022-47008 1 Gnu 1 Binutils 2026-06-17 N/A 5.5 MEDIUM
An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
CVE-2022-47007 1 Gnu 1 Binutils 2026-06-17 N/A 5.5 MEDIUM
An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
CVE-2022-47002 1 Masacms 1 Masacms 2026-06-17 N/A 9.8 CRITICAL
A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request.
CVE-2022-46999 1 Tuzicms 1 Tuzicms 2026-06-17 N/A 9.8 CRITICAL
Tuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \App\Manage\Controller\UserController.class.php.
CVE-2022-46998 1 Taogogo 1 Taocms 2026-06-17 N/A 9.8 CRITICAL
An issue in the website background of taocms v3.0.2 allows attackers to execute a Server-Side Request Forgery (SSRF).
CVE-2022-46997 1 Passhunt Project 1 Passhunt 2026-06-17 N/A 9.8 CRITICAL
Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
CVE-2022-46996 1 Vsphere Selfuse Project 1 Vsphere Selfuse 2026-06-17 N/A 9.8 CRITICAL
vSphere_selfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
CVE-2022-46973 1 Anji-plus 1 Aj-report 2026-06-17 N/A 9.8 CRITICAL
Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.
CVE-2022-46968 1 Revenue Collection System Project 1 Revenue Collection System 2026-06-17 N/A 5.4 MEDIUM
A stored cross-site scripting (XSS) vulnerability in /index.php?page=help of Revenue Collection System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into sent messages.