stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2022-37920 (severity: HIGH, weakness: NVD-CWE-Other)
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
CVE-2022-37921 (severity: HIGH, weakness: NVD-CWE-Other)
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
CVE-2022-37922 (severity: HIGH, weakness: NVD-CWE-Other)
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
CVE-2022-37923 (severity: HIGH, weakness: NVD-CWE-Other)
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
CVE-2022-37924 (severity: HIGH, weakness: CWE-78)
Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
CVE-2022-37925 (severity: MEDIUM, weakness: CWE-79)
A vulnerability within the web-based management interface of Aruba EdgeConnect Enterprise could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
CVE-2022-37926 (severity: MEDIUM, weakness: CWE-79)
A vulnerability within the web-based management interface of EdgeConnect Enterprise could allow a remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface by uploading a specially crafted file. A successful exploit could allow an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.
CVE-2022-37927 (severity: MEDIUM, weakness: CWE-601)
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Hewlett Packard Enterprise HPE OneView Global Dashboard (OVGD).
CVE-2022-37928 (severity: MEDIUM, weakness: CWE-345)
Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.
CVE-2022-37929 (severity: MEDIUM, weakness: CWE-269)
Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.
CVE-2022-3793 (severity: MEDIUM, weakness: NVD-CWE-Other)
An improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to read variables set directly in a GitLab CI/CD configuration file they don't have access to.
CVE-2022-37930 (severity: MEDIUM, weakness: CWE-200)
A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary Flash Arrays which could potentially allow local disclosure of sensitive information.
CVE-2022-37931 (severity: HIGH, weakness: CWE-287)
A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix. Please refer to HPE Security Bulletin HPESBNS04388 for details.
CVE-2022-37932 (severity: CRITICAL, weakness: NVD-CWE-Other)
A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in Hewlett Packard Enterprise OfficeConnect 1820, 1850 and 1920S Network switches versions: Prior to PT.02.14; Prior to PC.01.22; Prior to PO.01.21; Prior to PD.02.22;
CVE-2022-37933 (severity: HIGH, weakness: CWE-74)
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be exploited to allow local unauthorized data injection. HPE has made the following software updates to resolve the vulnerability in HPE Superdome Flex firmware 3.60.50 and below and Superdome Flex 280 servers firmware 1.40.60 and below.
CVE-2022-37934 (severity: HIGH, weakness: CWE-22)
A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allow remote directory traversal in HPE OfficeConnect 1820 switch series version PT.02.17 and below, HPE OfficeConnect 1850 switch series version PC.01.23 and below, and HPE OfficeConnect 1850 (10G aggregator) switch version PO.01.22 and below.
CVE-2022-37935 (severity: MEDIUM, weakness: NVD-CWE-Other)
HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.
CVE-2022-37936 (severity: CRITICAL, weakness: CWE-502)
Unauthenticated Java deserialization vulnerability in Serviceguard Manager
CVE-2022-37937 (severity: CRITICAL, weakness: CWE-787)
Pre-auth memory corruption in HPE Serviceguard
CVE-2022-37938 (severity: CRITICAL, weakness: CWE-918)
Unauthenticated server side request forgery in HPE Serviceguard Manager
CVE-2022-37939 (severity: MEDIUM, weakness: NVD-CWE-Other)
A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be locally exploited to allow disclosure of information. HPE has made the following software to resolve the vulnerability in HPE Superdome Flex Servers v3.65.8 and Superdome Flex 280 Servers v1.45.8.
CVE-2022-3794 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various AJAX actions in versions up to, and including, 2.5.6. Authenticated users can use an easily available nonce value to create header templates and make additional changes to the site, as the plugin does not use capability checks for this purpose.
CVE-2022-37940 (severity: MEDIUM, weakness: CWE-601)
Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exploited to allow host header injection and URL redirection. HPE has made the following software to resolve the vulnerability in HPE FlexFabric 5700 Switch Series version R2432P61 or later.
CVE-2022-37952 (severity: MEDIUM, weakness: CWE-79)
A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<v07.09.15) could allow an attacker to compromise a victim's browser. WorkstationST is only deployed in specific, controlled environments rendering attack complexity significantly higher than if the attack were conducted on the software in isolation. WorkstationST v07.09.15 can be found in ControlST v07.09.07 SP8 and greater.
CVE-2022-37953 (severity: MEDIUM, weakness: CWE-113)
An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (<v07.09.15) and could allow an attacker to compromise a victim's browser/session. WorkstationST is only deployed in specific, controlled environments rendering attack complexity significantly higher than if the attack were conducted on the software in isolation. WorkstationST v07.09.15 can be found in ControlST v07.09.07 SP8 and greater.
CVE-2022-37954 (severity: HIGH, weakness: NVD-CWE-Other)
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2022-37955 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Group Policy Elevation of Privilege Vulnerability
CVE-2022-37956 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-37957 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-37958 (severity: HIGH, weakness: NVD-CWE-Other)
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
CVE-2022-37959 (severity: MEDIUM, weakness: NVD-CWE-Other)
Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability
CVE-2022-37961 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-37962 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2022-37963 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-37964 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-37965 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
CVE-2022-37966 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
CVE-2022-37967 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-37968 (severity: CRITICAL, weakness: NVD-CWE-Other)
Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster. Additionally, because Azure Stack Edge allows customers to deploy Kubernetes workloads on their devices via Azure Arc, Azure Stack Edge devices are also vulnerable to this vulnerability.
CVE-2022-37969 (severity: HIGH, weakness: CWE-787)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-3797 (severity: MEDIUM, weakness: CWE-601)
A vulnerability was found in eolinker apinto-dashboard. It has been rated as problematic. This issue affects some unknown processing of the file /login. The manipulation of the argument callback leads to open redirect. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212633 was assigned to this vulnerability.
CVE-2022-37970 (severity: HIGH, weakness: NVD-CWE-Other)
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2022-37971 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Windows Defender Elevation of Privilege Vulnerability
CVE-2022-37972 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Endpoint Configuration Manager Spoofing Vulnerability
CVE-2022-37973 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Local Session Manager (LSM) Denial of Service Vulnerability
CVE-2022-37974 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Mixed Reality Developer Tools Information Disclosure Vulnerability
CVE-2022-37975 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Group Policy Elevation of Privilege Vulnerability
CVE-2022-37976 (severity: HIGH, weakness: NVD-CWE-Other)
Active Directory Certificate Services Elevation of Privilege Vulnerability
CVE-2022-37977 (severity: MEDIUM, weakness: NVD-CWE-Other)
Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
CVE-2022-37978 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Active Directory Certificate Services Security Feature Bypass
CVE-2022-37979 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2022-3798 (severity: HIGH, weakness: CWE-707)
A vulnerability classified as critical has been found in IBAX go-ibax. Affected is an unknown function of the file /api/v2/open/tablesInfo. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-212634 is the identifier assigned to this vulnerability.
CVE-2022-37980 (severity: HIGH, weakness: NVD-CWE-Other)
Windows DHCP Client Elevation of Privilege Vulnerability
CVE-2022-37981 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Event Logging Service Denial of Service Vulnerability
CVE-2022-37982 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2022-37983 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2022-37984 (severity: HIGH, weakness: NVD-CWE-Other)
Windows WLAN Service Elevation of Privilege Vulnerability
CVE-2022-37985 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-37986 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Win32k Elevation of Privilege Vulnerability
CVE-2022-37987 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-37988 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-37989 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVE-2022-3799 (severity: HIGH, weakness: CWE-707)
A vulnerability classified as critical was found in IBAX go-ibax. Affected by this vulnerability is an unknown functionality of the file /api/v2/open/tablesInfo. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212635.
CVE-2022-37990 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-37991 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-37992 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Group Policy Elevation of Privilege Vulnerability
CVE-2022-37993 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Group Policy Preference Client Elevation of Privilege Vulnerability
CVE-2022-37994 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Group Policy Preference Client Elevation of Privilege Vulnerability
CVE-2022-37995 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-37996 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Kernel Memory Information Disclosure Vulnerability
CVE-2022-37997 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-37998 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Local Session Manager (LSM) Denial of Service Vulnerability
CVE-2022-37999 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Group Policy Preference Client Elevation of Privilege Vulnerability
CVE-2022-3800 (severity: HIGH, weakness: CWE-707)
A vulnerability, which was classified as critical, has been found in IBAX go-ibax. Affected by this issue is some unknown functionality of the file /api/v2/open/rowsInfo. The manipulation of the argument table_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212636.
CVE-2022-38000 (severity: HIGH, weakness: CWE-362)
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-38001 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Office Spoofing Vulnerability
CVE-2022-38003 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Resilient File System Elevation of Privilege
CVE-2022-38004 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Fax Service Remote Code Execution Vulnerability
CVE-2022-38005 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-38006 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-38007 (severity: HIGH, weakness: NVD-CWE-Other)
Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability
CVE-2022-38008 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-38009 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-3801 (severity: HIGH, weakness: CWE-707)
A vulnerability, which was classified as critical, was found in IBAX go-ibax. This affects an unknown part of the file /api/v2/open/rowsInfo. The manipulation of the argument order leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212637 was assigned to this vulnerability.
CVE-2022-38010 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2022-38011 (severity: HIGH, weakness: NVD-CWE-Other)
Raw Image Extension Remote Code Execution Vulnerability
CVE-2022-38012 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-38013 (severity: HIGH, weakness: NVD-CWE-Other)
.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2022-38014 (severity: HIGH, weakness: CWE-362)
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
CVE-2022-38015 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Hyper-V Denial of Service Vulnerability
CVE-2022-38016 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
CVE-2022-38017 (severity: MEDIUM, weakness: NVD-CWE-Other)
StorSimple 8000 Series Elevation of Privilege Vulnerability
CVE-2022-38019 (severity: HIGH, weakness: NVD-CWE-Other)
AV1 Video Extension Remote Code Execution Vulnerability
CVE-2022-3802 (severity: HIGH, weakness: CWE-707)
A vulnerability has been found in IBAX go-ibax and classified as critical. This vulnerability affects unknown code of the file /api/v2/open/rowsInfo. The manipulation of the argument where leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-212638 is the identifier assigned to this vulnerability.
CVE-2022-38020 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Elevation of Privilege Vulnerability
CVE-2022-38021 (severity: HIGH, weakness: CWE-362)
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
CVE-2022-38022 (severity: LOW, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-38023 (severity: HIGH, weakness: NVD-CWE-Other)
Netlogon RPC Elevation of Privilege Vulnerability
CVE-2022-38025 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Distributed File System (DFS) Information Disclosure Vulnerability
CVE-2022-38026 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows DHCP Client Information Disclosure Vulnerability
CVE-2022-38027 (severity: HIGH, weakness: CWE-362)
Windows Storage Elevation of Privilege Vulnerability
CVE-2022-38028 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-38029 (severity: HIGH, weakness: CWE-362)
Windows ALPC Elevation of Privilege Vulnerability
CVE-2022-3803 (severity: MEDIUM, weakness: CWE-707)
A vulnerability was found in eolinker apinto-dashboard and classified as problematic. This issue affects some unknown processing of the file /api/discoveries/. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212639.
CVE-2022-38030 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows USB Serial Driver Information Disclosure Vulnerability
CVE-2022-38031 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2022-38032 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
CVE-2022-38033 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability
CVE-2022-38034 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Workstation Service Elevation of Privilege Vulnerability
CVE-2022-38036 (severity: HIGH, weakness: NVD-CWE-Other)
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
CVE-2022-38037 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-38038 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-38039 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-3804 (severity: MEDIUM, weakness: CWE-707)
A vulnerability was found in eolinker apinto-dashboard. It has been classified as problematic. Affected is an unknown function of the file /login. The manipulation of the argument callback leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212640.
CVE-2022-38040 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-38041 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Secure Channel Denial of Service Vulnerability
CVE-2022-38042 (severity: HIGH, weakness: NVD-CWE-Other)
Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2022-38043 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Security Support Provider Interface Information Disclosure Vulnerability
CVE-2022-38044 (severity: HIGH, weakness: NVD-CWE-Other)
Windows CD-ROM File System Driver Remote Code Execution Vulnerability
CVE-2022-38045 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Server Service Elevation of Privilege Vulnerability
CVE-2022-38046 (severity: HIGH, weakness: NVD-CWE-Other)
Web Account Manager Information Disclosure Vulnerability
CVE-2022-38047 (severity: HIGH, weakness: CWE-362)
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-38048 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Remote Code Execution Vulnerability
CVE-2022-38049 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Graphics Remote Code Execution Vulnerability