CVE Arsenal Intel

CVE-2022-0342

USG/ZyWALL series firmware Networking ⚡ nuclei

9.8

CRITICAL

EPSS

92.4%

2022 CWE-287 0 PoCs

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware versions V1.20 through V1.33 Patch 4, which could allow an attacker to bypass the web authentication and obtain administrative access of the device.

nuclei -t CVE-2022-0342.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2022-30525

🔥 KEV USG FLEX 100(W) firmware Networking ⚡ nuclei

9.8

CRITICAL

EPSS

94.4%

2022 CWE-78 23 PoCs

A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 50(W) firmware versions 5.10 through 5.21 Patch 1, USG20(W)-VPN firmware versions 5.10 through 5.21 Patch 1, ATP series firmware versions 5.10 through 5.21 Patch 1, VPN series firmware versions 4.60 through 5.21 Patch 1, which could allow an attacker to modify specific files and then execut

nuclei -t CVE-2022-30525.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +17 más 🔍 GCVE ⚔ EDB

CVE-2022-39952

FortiNAC Web Networking ⚡ nuclei

9.8

CRITICAL

EPSS

93.8%

2022 CWE-73 4 PoCs

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP request.

nuclei -t CVE-2022-39952.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 🔍 GCVE ⚔ EDB

CVE-2022-40684

🔥 KEV Fortinet FortiOS, FortiProxy, FortiSwitchManager Web Networking ⚡ nuclei

9.8

CRITICAL

EPSS

94.4%

2022 27 PoCs

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

nuclei -t CVE-2022-40684.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +21 más 🔍 GCVE ⚔ EDB

CVE-2022-1388

🔥 KEV BIG-IP Networking ⚡ nuclei

9.8

CRITICAL

EPSS

94.5%

2022 CWE-306 87 PoCs

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

nuclei -t CVE-2022-1388.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +81 más 🔍 GCVE ⚔ EDB

CVE-2022-1040

🔥 KEV Sophos Firewall Networking ⚡ nuclei

9.8

CRITICAL

EPSS

94.4%

2022 13 PoCs

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.

nuclei -t CVE-2022-1040.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +7 más 🔍 GCVE ⚔ EDB

CVE-2022-3236

🔥 KEV Sophos Firewall Networking ⚡ nuclei

9.8

CRITICAL

EPSS

92.8%

2022 0 PoCs

A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.

nuclei -t CVE-2022-3236.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2022-22242

Junos OS Web Networking ⚡ nuclei

6.1

MEDIUM

EPSS

62.1%

2022 CWE-79 0 PoCs

A Cross-site Scripting (XSS) vulnerability in the J-Web component of Juniper Networks Junos OS allows an unauthenticated attacker to run malicious scripts reflected off of J-Web to the victim's browser in the context of their session within J-Web. This issue affects Juniper Networks Junos OS all versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S7; 19.4 versions prior to 19.4R2-S7, 19.4R3-S8; 20.1 versions prior to 20.1R3-S5; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S4; 21.1 versions prior to 21

nuclei -t CVE-2022-22242.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2022-36923

Software Genérico Web Networking ⚡ nuclei

5.4

MEDIUM

EPSS

32.5%

2022 0 PoCs

Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils before 2022-07-27 through 2022-07-28 (125657, 126002, 126104, and 126118) allow unauthenticated attackers to obtain a user's API key, and then access external APIs.

nuclei -t CVE-2022-36923.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2022-40843

Software Genérico Networking ⚡ nuclei

N/A

UNKNOWN

EPSS

40.4%

2022 1 PoC

The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of the Administrator's user account.

nuclei -t CVE-2022-40843.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2022-35416

Software Genérico Web Networking ⚡ nuclei

N/A

UNKNOWN

EPSS

6.6%

2022 1 PoC

H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS.

nuclei -t CVE-2022-35416.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2022-31845

Software Genérico Networking ⚡ nuclei

N/A

UNKNOWN

EPSS

53.1%

2022 0 PoCs

A vulnerability in live_check.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function.

nuclei -t CVE-2022-31845.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2022-29014

Software Genérico Web Networking ⚡ nuclei

N/A

UNKNOWN

EPSS

65.9%

2022 2 PoCs

A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to read arbitrary files.

nuclei -t CVE-2022-29014.yaml ⎘

↗ PoC 1 ↗ PoC 2 🔍 GCVE ⚔ EDB

CVE-2022-31846

Software Genérico Networking ⚡ nuclei

N/A

UNKNOWN

EPSS

26.4%

2022 0 PoCs

A vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function.

nuclei -t CVE-2022-31846.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2022-29383

Software Genérico Networking Database Cloud ⚡ nuclei

N/A

UNKNOWN

EPSS

75.2%

2022 3 PoCs

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi.

nuclei -t CVE-2022-29383.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 🔍 GCVE ⚔ EDB

CVE-2022-39986

Software Genérico Web Networking ⚡ nuclei

N/A

UNKNOWN

EPSS

93.1%

2022 7 PoCs

A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfg_id parameter in /ajax/openvpn/activate_ovpncfg.php and /ajax/openvpn/del_ovpncfg.php.

nuclei -t CVE-2022-39986.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +1 más 🔍 GCVE ⚔ EDB

CVE-2022-29013

Software Genérico Web Networking ⚡ nuclei

N/A

UNKNOWN

EPSS

92.6%

2022 2 PoCs

A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request.

nuclei -t CVE-2022-29013.yaml ⎘

↗ PoC 1 ↗ PoC 2 🔍 GCVE ⚔ EDB

CVE-2022-1386

Fusion Builder Web Networking Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

93.6%

2022 CWE-918 9 PoCs

The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. This could be used to interact with hosts on the server's local network bypassing firewalls and access control measures.

nuclei -t CVE-2022-1386.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +3 más 🔍 GCVE ⚔ EDB

CVE-2022-2599

Anti-Malware Security and Brute-Force Firewall Web Networking Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

30.9%

2022 CWE-79 1 PoC

The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.21.83 does not sanitise and escape some parameters before outputting them back in an admin dashboard, leading to Reflected Cross-Site Scripting

nuclei -t CVE-2022-2599.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2022-31847

Software Genérico Networking ⚡ nuclei

N/A

UNKNOWN

EPSS

50.6%

2022 0 PoCs

A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router information via a crafted POST request.

nuclei -t CVE-2022-31847.yaml ⎘

🔍 GCVE ⚔ EDB