CVE-2022-36746

LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php.

Source: CVE-2022-36746

CVE-2022-27560

HCL VersionVault Express exposes administrator credentials.

Source: CVE-2022-27560

CVE-2022-27563

An unauthenticated user can overload a part of HCL VersionVault Express and cause a denial of service.

Source: CVE-2022-27563

CVE-2022-36657

Library Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /librarian/edit_book_details.php.

Source: CVE-2022-36657

CVE-2022-37173

An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:Program.exe.

Source: CVE-2022-37173

CVE-2022-36564

Incorrect access control in the install directory (C:Strawberry) of StrawberryPerl v5.32.1.1 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.

Source: CVE-2022-36564

CVE-2022-36563

Incorrect access control in the install directory (C:RailsInstaller) of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.

Source: CVE-2022-36563

CVE-2022-36561

XPDF v4.0.4 was discovered to contain a segmentation violation via the component /xpdf/AcroForm.cc:538.

Source: CVE-2022-36561

CVE-2022-36562

Incorrect access control in the install directory (C:Ruby31-x64) of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.

Source: CVE-2022-36562

CVE-2022-36731

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php.

Source: CVE-2022-36731