Latest news
Tracked as CVE-2023-21674 (CVSS score: 8.8), the flaw could allow a remote attacker to gain elevated privileges on the system
Successfully exploiting CVE-2022-44877 allows a remote attacker to gain full remote code execution on the server.
CVE-2022-39947 allows a remote authenticated attacker to execute arbitrary code on the system, caused by an OS command injection vulnerability
The PoC exploit targets CVE-2022-46164, a critical vulnerability that could allow a remote attacker to bypass security restrictions
CVE-2022-43931, is an out-of-bounds write vulnerability in Synology VPN Plus Server, allows remote attackers to execute arbitrary commands
CVE-2022-43396 could allow a remote attacker to execute arbitrary commands on the system, caused by a bypass flaw in the blocklist
Netgear has released patches to remediate a high-severity pre-authentication buffer overflow (CVE-2022-48196) affecting multiple routers
The denial of service vulnerability, assigned CVE-2022-41966, affects all versions of the XStream version prior to 1.4.20
CVE-2022-46689 could allow an authenticated attacker to gain elevated privileges on the system, caused by a race condition in the iOS kernel
CVE-2022-47949 could allow an attacker to execute code remotely in the victim's console by just having an online game with them
Plugin is estimated to have 50,000ย active installations, with the flaw (CVE-2022-45359, CVSS score: 9.8) affecting versions prior to 3.20.0