Vulnerabilities (CVE)

Total 424294 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-27524 1 Autodesk 1 Dwg Trueview 2026-06-17 5.8 MEDIUM 7.1 HIGH
An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVE-2022-27523 1 Autodesk 1 Dwg Trueview 2026-06-17 5.8 MEDIUM 7.1 HIGH
A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVE-2022-27518 1 Citrix 4 Application Delivery Controller, Application Delivery Controller Firmware, Gateway and 1 more 2026-06-17 N/A 9.8 CRITICAL
Unauthenticated remote arbitrary code execution
CVE-2022-27516 1 Citrix 3 Application Delivery Controller, Application Delivery Controller Firmware, Gateway 2026-06-17 N/A 5.3 MEDIUM
User login brute force protection functionality bypass
CVE-2022-27513 1 Citrix 3 Application Delivery Controller, Application Delivery Controller Firmware, Gateway 2026-06-17 N/A 8.3 HIGH
Remote desktop takeover via phishing
CVE-2022-27512 1 Citrix 1 Application Delivery Management 2026-06-17 5.0 MEDIUM 5.3 MEDIUM
Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM.
CVE-2022-27511 1 Citrix 1 Application Delivery Management 2026-06-17 7.8 HIGH 8.1 HIGH
Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted.
CVE-2022-27510 1 Citrix 3 Application Delivery Controller, Application Delivery Controller Firmware, Gateway 2026-06-17 N/A 9.8 CRITICAL
Unauthorized access to Gateway user capabilities
CVE-2022-27509 1 Citrix 3 Application Delivery Controller, Application Delivery Controller Firmware, Gateway 2026-06-17 N/A 6.1 MEDIUM
Unauthenticated redirection to a malicious website
CVE-2022-27508 1 Citrix 2 Application Delivery Controller, Gateway 2026-06-17 N/A 7.5 HIGH
Unauthenticated denial of service
CVE-2022-27507 1 Citrix 2 Application Delivery Controller, Gateway 2026-06-17 N/A 6.5 MEDIUM
Authenticated denial of service
CVE-2022-27506 1 Citrix 26 Sd-wan 1000, Sd-wan 1000 Firmware, Sd-wan 110 and 23 more 2026-06-17 6.8 MEDIUM 2.7 LOW
Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI
CVE-2022-27505 1 Citrix 24 Sd-wan 1000, Sd-wan 1000 Firmware, Sd-wan 110 and 21 more 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
Reflected cross site scripting (XSS)
CVE-2022-27503 1 Citrix 1 Storefront Server 2026-06-17 2.6 LOW 6.1 MEDIUM
Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9
CVE-2022-27502 2 Microsoft, Realvnc 2 Windows, Vnc Server 2026-06-17 7.2 HIGH 7.8 HIGH
RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM.
CVE-2022-27500 1 Intel 1 Support 2026-06-17 N/A 5.5 MEDIUM
Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated user to potentially enable information disclosure via local access.
CVE-2022-27499 1 Intel 1 Sgx Sdk 2026-06-17 N/A 2.5 LOW
Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access.
CVE-2022-27498 1 Lansweeper 1 Lansweeper 2026-06-17 N/A 6.5 MEDIUM
A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2022-27497 1 Intel 1 Active Management Technology Firmware 2026-06-17 N/A 8.6 HIGH
Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access.
CVE-2022-27496 1 Zero-channel Plus Project 1 Zero-channel Plus 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting vulnerability in Zero-channel BBS Plus v0.7.4 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.