Vulnerabilities (CVE)

Total 424026 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-24565 1 Checkmk 1 Checkmk 2026-06-17 3.5 LOW 5.4 MEDIUM
Checkmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (XSS) vulnerability. The Alias of a site was not properly escaped when shown as condition for notifications.
CVE-2022-24564 1 Checkmk 1 Checkmk 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
Checkmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user.
CVE-2022-24563 1 Metalgenix 1 Genixcms 2026-06-17 3.5 LOW 5.4 MEDIUM
In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_title and intro_image parameters.
CVE-2022-24553 1 Zfaka Project 1 Zfaka 2026-06-17 7.5 HIGH 9.8 CRITICAL
An issue was found in Zfaka <= 1.4.5. The verification of the background file upload function check is not strict, resulting in remote command execution.
CVE-2022-24552 1 Starwindsoftware 2 Nas, San 2026-06-17 10.0 HIGH 9.8 CRITICAL
A flaw was found in the REST API in StarWind Stack. REST command, which manipulates a virtual disk, doesn’t check input parameters. Some of them go directly to bash as part of a script. An attacker with non-root user access can inject arbitrary data into the command that will be executed with root privileges. This affects StarWind SAN and NAS v0.2 build 1633.
CVE-2022-24551 1 Starwindsoftware 2 Nas, San 2026-06-17 9.0 HIGH 8.8 HIGH
A flaw was found in StarWind Stack. The endpoint for setting a new password doesn’t check the current username and old password. An attacker could reset any local user password (including system/administrator user) using any available user This affects StarWind SAN and NAS v0.2 build 1633.
CVE-2022-24550 1 Microsoft 8 Windows 10, Windows 11, Windows 8.1 and 5 more 2026-06-17 7.2 HIGH 7.8 HIGH
Windows Telephony Server Elevation of Privilege Vulnerability
CVE-2022-24549 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2026-06-17 4.6 MEDIUM 7.8 HIGH
Windows AppX Package Manager Elevation of Privilege Vulnerability
CVE-2022-24548 1 Microsoft 1 Malware Protection Engine 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
Microsoft Defender Denial of Service Vulnerability
CVE-2022-24547 1 Microsoft 8 Windows 10, Windows 11, Windows 8.1 and 5 more 2026-06-17 4.6 MEDIUM 7.8 HIGH
Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVE-2022-24546 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2026-06-17 4.6 MEDIUM 7.8 HIGH
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2022-24544 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2026-06-17 4.6 MEDIUM 7.8 HIGH
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-24543 1 Microsoft 1 Windows Upgrade Assistant 2026-06-17 6.8 MEDIUM 7.8 HIGH
Windows Upgrade Assistant Remote Code Execution Vulnerability
CVE-2022-24542 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2026-06-17 4.6 MEDIUM 7.8 HIGH
Windows Win32k Elevation of Privilege Vulnerability
CVE-2022-24541 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2026-06-17 9.3 HIGH 8.8 HIGH
Windows Server Service Remote Code Execution Vulnerability
CVE-2022-24540 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2026-06-17 4.4 MEDIUM 7.0 HIGH
Windows ALPC Elevation of Privilege Vulnerability
CVE-2022-24539 1 Microsoft 3 Windows Server 2016, Windows Server 2019, Windows Server 2022 2026-06-17 6.8 MEDIUM 8.1 HIGH
Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability
CVE-2022-24538 1 Microsoft 4 Windows Server 2012, Windows Server 2016, Windows Server 2019 and 1 more 2026-06-17 4.0 MEDIUM 6.5 MEDIUM
Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
CVE-2022-24537 1 Microsoft 6 Windows 10, Windows 11, Windows Server and 3 more 2026-06-17 6.9 MEDIUM 7.8 HIGH
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2022-24536 1 Microsoft 5 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 2 more 2026-06-17 9.0 HIGH 7.2 HIGH
Windows DNS Server Remote Code Execution Vulnerability