stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2022-41009 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'port triger protocol (tcp|udp|tcp/udp) triger port <1-65535> forward port <1-65535> description WORD' command template.
CVE-2022-4101 (severity: CRITICAL, weakness: NVD-CWE-Other)
The Images Optimize and Upload CF7 WordPress plugin through 2.1.4 does not validate the file to be deleted via an AJAX action available to unauthenticated users, which could allow them to delete arbitrary files on the server via path traversal attack.
CVE-2022-41010 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no port triger protocol (tcp|udp|tcp/udp) triger port <1-65535> forward port <1-65535> description WORD' command template.
CVE-2022-41011 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'schedule link1 WORD link2 WORD policy (failover|backup) description (WORD|null)' command template.
CVE-2022-41012 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no schedule link1 WORD link2 WORD policy (failover|backup) description (WORD|null)' command template.
CVE-2022-41013 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'static dhcp mac WORD (WORD|null) ip A.B.C.D hostname (WORD|null) description (WORD|null)' command template.
CVE-2022-41014 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no static dhcp mac WORD (WORD|null) ip A.B.C.D hostname (WORD|null) description (WORD|null)' command template.
CVE-2022-41015 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn basic protocol (l2tp|pptp) name WORD server WORD username WORD passsword WORD firmwall (on|off) defroute (on|off)' command template.
CVE-2022-41016 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn basic protocol (l2tp|pptp) name WORD server WORD username WORD passsword WORD firmwall (on|off) defroute (on|off)' command template.
CVE-2022-41017 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn basic protocol (l2tp|pptp) name WORD server WORD username WORD passsword WORD firmwall (on|off) defroute (on|off) localip A.B.C.D' command template.
CVE-2022-41018 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn basic protocol (l2tp|pptp) name WORD server WORD username WORD passsword WORD firmwall (on|off) defroute (on|off) localip A.B.C.D' command template.
CVE-2022-41019 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn l2tp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> auth (on|off) password (WORD|null)' command template.
CVE-2022-4102 (severity: LOW, weakness: CWE-352)
The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorization and CSRF checks when deleting a template and does not ensure that the post to be deleted is a template. This could allow any authenticated users, such as subscribers, to delete arbitrary posts assuming they know the related slug.
CVE-2022-41020 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn l2tp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> auth (on|off) password (WORD|null)' command template.
CVE-2022-41021 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn l2tp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> auth (on|off) password (WORD|null) options WORD' command template.
CVE-2022-41022 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn l2tp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> auth (on|off) password (WORD|null) options WORD' command template.
CVE-2022-41023 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn pptp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> mppe (on|off) stateful (on|off)' command template.
CVE-2022-41024 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn pptp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> mppe (on|off) stateful (on|off)' command template.
CVE-2022-41025 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn pptp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> mppe (on|off) stateful (on|off) options WORD' command template.
CVE-2022-41026 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn pptp advanced name WORD dns (yes|no) mtu <128-16384> mru <128-16384> mppe (on|off) stateful (on|off) options WORD' command template.
CVE-2022-41027 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'vpn schedule name1 WORD name2 WORD policy (failover|backup) description (WORD|null)' command template.
CVE-2022-41028 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no vpn schedule name1 WORD name2 WORD policy (failover|backup) description (WORD|null)' command template.
CVE-2022-41029 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'wlan filter mac address WORD descript WORD' command template.
CVE-2022-4103 (severity: MEDIUM, weakness: CWE-352)
The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorisation and CSRF checks when creating a template, and does not ensure that the post created is a template. This could allow any authenticated users, such as subscriber to create a post (as well as any post type) with an arbitrary title
CVE-2022-41030 (severity: HIGH, weakness: CWE-120)
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no wlan filter mac address WORD descript WORD' command template.
CVE-2022-41031 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Word Remote Code Execution Vulnerability
CVE-2022-41032 (severity: HIGH, weakness: CWE-269)
NuGet Client Elevation of Privilege Vulnerability
CVE-2022-41033 (severity: HIGH, weakness: CWE-843)
Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVE-2022-41034 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Remote Code Execution Vulnerability
CVE-2022-41035 (severity: MEDIUM, weakness: CWE-362)
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2022-41036 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41037 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41038 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41039 (severity: HIGH, weakness: CWE-362)
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-4104 (severity: MEDIUM, weakness: CWE-835)
A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting in a denial-of-service.
CVE-2022-41040 (severity: HIGH, weakness: CWE-918)
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41042 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Information Disclosure Vulnerability
CVE-2022-41043 (severity: LOW, weakness: NVD-CWE-Other)
Microsoft Office Information Disclosure Vulnerability
CVE-2022-41044 (severity: HIGH, weakness: CWE-362)
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-41045 (severity: HIGH, weakness: CWE-362)
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-41047 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-41048 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-41049 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2022-4105 (severity: HIGH, weakness: CWE-79)
A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) and an HTML injection which disables the use of the history page.
CVE-2022-41050 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
CVE-2022-41051 (severity: HIGH, weakness: NVD-CWE-Other)
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVE-2022-41052 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2022-41053 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kerberos Denial of Service Vulnerability
CVE-2022-41054 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2022-41055 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Human Interface Device Information Disclosure Vulnerability
CVE-2022-41056 (severity: HIGH, weakness: NVD-CWE-Other)
Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
CVE-2022-41057 (severity: HIGH, weakness: NVD-CWE-Other)
Windows HTTP.sys Elevation of Privilege Vulnerability
CVE-2022-41058 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2022-4106 (severity: HIGH, weakness: CWE-552)
The Wholesale Market for WooCommerce WordPress plugin before 1.0.7 does not have authorisation check, as well as does not validate user input used to generate system path, allowing unauthenticated attackers to download arbitrary file from the server.
CVE-2022-41060 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Word Information Disclosure Vulnerability
CVE-2022-41061 (severity: HIGH, weakness: CWE-94)
Microsoft Word Remote Code Execution Vulnerability
CVE-2022-41062 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41063 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-41064 (severity: MEDIUM, weakness: NVD-CWE-Other)
.NET Framework Information Disclosure Vulnerability
CVE-2022-41066 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Business Central Information Disclosure Vulnerability
CVE-2022-4107 (severity: MEDIUM, weakness: NVD-CWE-Other)
The SMSA Shipping for WooCommerce WordPress plugin before 1.0.5 does not have authorisation and proper CSRF checks, as well as does not validate the file to be downloaded, allowing any authenticated users, such as subscriber to download arbitrary file from the server
CVE-2022-41073 (severity: HIGH, weakness: CWE-787)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-41074 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-41076 (severity: HIGH, weakness: NVD-CWE-Other)
PowerShell Remote Code Execution Vulnerability
CVE-2022-41077 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Fax Compose Form Elevation of Privilege Vulnerability
CVE-2022-41078 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Server Spoofing Vulnerability
CVE-2022-41079 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Server Spoofing Vulnerability
CVE-2022-4108 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Wholesale Market for WooCommerce WordPress plugin before 1.0.8 does not validate user input used to generate system path, allowing high privilege users such as admin to download arbitrary file from the server even when they should not be able to (for example in multisite)
CVE-2022-41080 (severity: CRITICAL, weakness: NVD-CWE-Other)
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41081 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-41082 (severity: HIGH, weakness: CWE-502)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-41083 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Code Elevation of Privilege Vulnerability
CVE-2022-41085 (severity: HIGH, weakness: NVD-CWE-Other)
Azure CycleCloud Elevation of Privilege Vulnerability
CVE-2022-41086 (severity: MEDIUM, weakness: CWE-362)
Windows Group Policy Elevation of Privilege Vulnerability
CVE-2022-41088 (severity: HIGH, weakness: CWE-362)
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2022-41089 (severity: HIGH, weakness: NVD-CWE-Other)
.NET Framework Remote Code Execution Vulnerability
CVE-2022-4109 (severity: LOW, weakness: NVD-CWE-Other)
The Wholesale Market for WooCommerce WordPress plugin before 2.0.0 does not validate user input against path traversal attacks, allowing high privilege users such as admin to download arbitrary logs from the server even when they should not be able to (for example in multisite)
CVE-2022-41090 (severity: MEDIUM, weakness: CWE-362)
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
CVE-2022-41091 (severity: MEDIUM, weakness: CWE-863)
Windows Mark of the Web Security Feature Bypass Vulnerability
CVE-2022-41092 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Win32k Elevation of Privilege Vulnerability
CVE-2022-41093 (severity: HIGH, weakness: CWE-362)
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-41094 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2022-41095 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVE-2022-41096 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2022-41097 (severity: MEDIUM, weakness: NVD-CWE-Other)
Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability
CVE-2022-41098 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows GDI+ Information Disclosure Vulnerability
CVE-2022-41099 (severity: MEDIUM, weakness: NVD-CWE-Other)
BitLocker Security Feature Bypass Vulnerability
CVE-2022-4110 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Eventify™ WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVE-2022-41100 (severity: HIGH, weakness: CWE-362)
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVE-2022-41101 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2022-41102 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2022-41103 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Word Information Disclosure Vulnerability
CVE-2022-41104 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Excel Security Feature Bypass Vulnerability
CVE-2022-41105 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Excel Information Disclosure Vulnerability
CVE-2022-41106 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2022-41107 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2022-41109 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Win32k Elevation of Privilege Vulnerability
CVE-2022-4111 (severity: MEDIUM, weakness: CWE-1284)
Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.
CVE-2022-41113 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2022-41114 (severity: HIGH, weakness: CWE-362)
Windows Bind Filter Driver Elevation of Privilege Vulnerability
CVE-2022-41115 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
CVE-2022-41116 (severity: MEDIUM, weakness: CWE-362)
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
CVE-2022-41118 (severity: HIGH, weakness: CWE-362)
Windows Scripting Languages Remote Code Execution Vulnerability
CVE-2022-41119 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Remote Code Execution Vulnerability
CVE-2022-4112 (severity: MEDIUM, weakness: NVD-CWE-Other)
The Quizlord WordPress plugin through 2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVE-2022-41120 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
CVE-2022-41121 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2022-41122 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2022-41123 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41125 (severity: HIGH, weakness: CWE-787)
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability