Threat database

739 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.8	EPSS 0.4%	CVE-2022-30426n/a High7.8EPSS 0.4%2022-09-22CVE Database V5CVE-2022-30426 There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An attack could exploit this vulnerability to escalate privilege from ring 3 to ring 0, and hijack control flow during UEFI DXE execution. This affects Altos T110 F3 firmware version <= P13 (latest) and AP130 F2 firmware version <= P04 (latest) and Aspire 1600X firmware version <= P11.A3L (latest) and Aspire 1602M firmware version <= P11.A3L (latest) and Aspire 7600U firmware version <= P11.A4 (latest) and Aspire MC605 firmware version <= P11.A4L (latest) and Aspire TC-105 firmware version <= P12.B0L (latest) and Aspire TC-120 firmware version <= P11-A4 (latest) and Aspire U5-620 firmware version <= P11.A1 (latest) and Aspire X1935 firmware version <= P11.A3L (latest) and Aspire X3475 firmware version <= P11.A3L (latest) and Aspire X3995 firmware version <= P11.A3L (latest) and Aspire XC100 firmware version <= P11.B3 (latest) and Aspire XC600 firmware version <= P11.A4 (latest) and Aspire Z3-615 firmware version <= P11.A2L (latest) and Veriton E430G firmware version <= P21.A1 (latest) and Veriton B630_49 firmware version <= AAP02SR (latest) and Veriton E430 firmware version <= P11.A4 (latest) and Veriton M2110G firmware version <= P21.A3 (latest) and Veriton M2120G fir. EPSS 0.4%Vulnerability	CVE Database V5	2022-09-22
Critical	9.8	EPSS 2.7%	CVE-2022-40089n/a Critical9.8EPSS 2.7%2022-09-22CVE Database V5CVE-2022-40089 A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allow_url_include is set to On. EPSS 2.7%Vulnerability	CVE Database V5	2022-09-22
Medium	6.1	EPSS 0.8%	CVE-2022-40088n/a Medium6.1EPSS 0.8%2022-09-22CVE Database V5CVE-2022-40088 Simple College Website v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /college_website/index.php?page=. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter. EPSS 0.8%Vulnerability	CVE Database V5	2022-09-22
Critical	9.8	EPSS 1.9%	CVE-2022-40087n/a Critical9.8EPSS 1.9%2022-09-22CVE Database V5CVE-2022-40087 Simple College Website v1.0 was discovered to contain an arbitrary file write vulnerability via the function file_put_contents(). This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. EPSS 1.9%Vulnerability	CVE Database V5	2022-09-22
Critical	9.8	EPSS 1.2%	CVE-2022-31937n/a Critical9.8EPSS 1.2%2022-09-22CVE Database V5CVE-2022-31937 Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd. EPSS 1.2%Vulnerability	CVE Database V5	2022-09-22
High	7.8	EPSS 0.5%	CVE-2022-37234n/a High7.8EPSS 0.5%2022-09-22CVE Database V5CVE-2022-37234 Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binary in firmware. There is a stack overflow vulnerability caused by strncpy. EPSS 0.5%Vulnerability	CVE Database V5	2022-09-22
High	7.5	EPSS 1.8%	CVE-2022-34026n/a High7.5EPSS 1.8%2022-09-22CVE Database V5CVE-2022-34026 ICEcoder v8.1 allows attackers to execute a directory traversal. EPSS 1.8%Vulnerability	CVE Database V5	2022-09-22
Medium	6.5	EPSS 1.0%	CVE-2022-35039n/a Medium6.5EPSS 1.0%2022-09-22CVE Database V5CVE-2022-35039 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e20a0. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-22
Medium	6.5	EPSS 1.0%	CVE-2022-35038n/a Medium6.5EPSS 1.0%2022-09-22CVE Database V5CVE-2022-35038 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b064d. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-22
Medium	6.5	EPSS 1.0%	CVE-2022-35037n/a Medium6.5EPSS 1.0%2022-09-22CVE Database V5CVE-2022-35037 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6adb1e. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-22
Medium	6.5	EPSS 0.9%	CVE-2022-35036n/a Medium6.5EPSS 0.9%2022-09-22CVE Database V5CVE-2022-35036 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e1fc8. EPSS 0.9%Vulnerability	CVE Database V5	2022-09-22
Medium	6.5	EPSS 0.9%	CVE-2022-35035n/a Medium6.5EPSS 0.9%2022-09-22CVE Database V5CVE-2022-35035 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b559f. EPSS 0.9%Vulnerability	CVE Database V5	2022-09-22
Medium	6.5	EPSS 1.0%	CVE-2022-35034n/a Medium6.5EPSS 1.0%2022-09-22CVE Database V5CVE-2022-35034 OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e7e3d. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-22
Medium	6.5	EPSS 1.0%	CVE-2022-35032n/a Medium6.5EPSS 1.0%2022-09-22CVE Database V5CVE-2022-35032 OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-22
Medium	6.5	EPSS 0.9%	CVE-2022-35031n/a Medium6.5EPSS 0.9%2022-09-22CVE Database V5CVE-2022-35031 OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x703969. EPSS 0.9%Vulnerability	CVE Database V5	2022-09-22
Medium	6.5	EPSS 0.9%	CVE-2022-35030n/a Medium6.5EPSS 0.9%2022-09-22CVE Database V5CVE-2022-35030 OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe954. EPSS 0.9%Vulnerability	CVE Database V5	2022-09-22
Medium	6.5	EPSS 1.0%	CVE-2022-35029n/a Medium6.5EPSS 1.0%2022-09-22CVE Database V5CVE-2022-35029 OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6babea. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-22
Medium	6.5	EPSS 0.9%	CVE-2022-35028n/a Medium6.5EPSS 0.9%2022-09-22CVE Database V5CVE-2022-35028 OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbbb6. EPSS 0.9%Vulnerability	CVE Database V5	2022-09-22
Medium	6.5	EPSS 1.0%	CVE-2022-35027n/a Medium6.5EPSS 1.0%2022-09-22CVE Database V5CVE-2022-35027 OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-22
Medium	6.5	EPSS 1.0%	CVE-2022-35026n/a Medium6.5EPSS 1.0%2022-09-22CVE Database V5CVE-2022-35026 OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbc0b. EPSS 1.0%Vulnerability	CVE Database V5	2022-09-22

Page 25 of 37