CVE-2022-21661 vulnerabilities and exploits

(subscribe to this query)

9

CVSSv2

Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possible for an...

Apache Druid45 Github repositories available

NA

ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from ZooKeeper without validation. An attacker having access to ZooKeeper can run arbitrary commands as YARN user by exploiting this. Users should upgrade to...

Apache Hadoop4 Github repositories available

7.5

CVSSv2

Each Apache Dubbo server will set a serialization id to tell the clients which serialization protocol it is working on. But for Dubbo versions before 2.7.8 or 2.6.9, an attacker can choose which serialization id the Provider will use by tampering with the byte preamble flags,...

Apache Dubbo8 Github repositories available

NA

CVE-2021-26102 PoC of FortiWAN auth bypass (www.fortiguard.com/psirt/FG-IR-21-048)...

4 Github repositories available

6.8

CVSSv2

Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26412, CVE-2021-26854, CVE-2021-26855, CVE-2021-26858, CVE-2021-27065, CVE-2021-27078....

Microsoft Exchange Server 2010 Microsoft Exchange Server 2013 Microsoft Exchange Server 2019 Microsoft Exchange Server 201641 Github repositories available25 Articles available

NA

PoC in GitHub 2022 CVE-2022-0185 (2022-02-11) A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged...

5 Github repositories available

5

CVSSv2

An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings/settings.xml file containing admin panel credentials), as demonstrated by dav/server.php/files/personal/%2e%2e when...

Afterlogic Aurora Afterlogic Webmail Pro7 Github repositories available

7.5

CVSSv2

Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz....

Apache Ofbiz47 Github repositories available

Get Started

« PREV 1 2 3 4 5 6 7 8 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook