# CVEs published 2022-08-25

232 CVEs were published on August 25, 2022: 2 critical, 13 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2022-36168](https://cve.now/CVE-2022-36168.md): A directory traversal vulnerability was discovered in Wuzhicms 4.1.0. (no CVSS)
- [CVE-2022-36226](https://cve.now/CVE-2022-36226.md): SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx. (no CVSS)
- [CVE-2021-3020](https://cve.now/CVE-2021-3020.md): An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. (no CVSS)
- [CVE-2021-32570](https://cve.now/CVE-2021-32570.md): In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group can retrieve the data from cert (no CVSS)
- [CVE-2022-35192](https://cve.now/CVE-2022-35192.md): D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Servic (no CVSS)
- [CVE-2022-30984](https://cve.now/CVE-2022-30984.md): A buffer overflow vulnerability in the Rubrik Backup Service (RBS) Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1, 7.0. (no CVSS)
- [CVE-2022-29850](https://cve.now/CVE-2022-29850.md): Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence (no CVSS)
- [CVE-2022-36121](https://cve.now/CVE-2022-36121.md): An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. (no CVSS)
- [CVE-2022-36120](https://cve.now/CVE-2022-36120.md): An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. (no CVSS)
- [CVE-2022-36119](https://cve.now/CVE-2022-36119.md): An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. (no CVSS)
- [CVE-2022-36118](https://cve.now/CVE-2022-36118.md): An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. (no CVSS)
- [CVE-2022-36117](https://cve.now/CVE-2022-36117.md): An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. (no CVSS)
- [CVE-2022-36116](https://cve.now/CVE-2022-36116.md): An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. (no CVSS)
- [CVE-2022-36115](https://cve.now/CVE-2022-36115.md): An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. (no CVSS)
- [CVE-2022-37316](https://cve.now/CVE-2022-37316.md): Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance system that could po (CVSS 6.5)
- [CVE-2022-37318](https://cve.now/CVE-2022-37318.md): Archer Platform 6.9 SP2 P2 before 6.11 P3 (6.11.0.3) contain a reflected XSS vulnerability. (CVSS 7.0)
- [CVE-2022-37317](https://cve.now/CVE-2022-37317.md): Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability. (CVSS 7.6)
- [CVE-2022-28747](https://cve.now/CVE-2022-28747.md): Key reuse in GoSecure Titan Inbox Detection & Response (IDR) through 2022-04-05 leads to remote code execution. (no CVSS)
- [CVE-2022-31798](https://cve.now/CVE-2022-31798.md): Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card\_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) whe (no CVSS)
- [CVE-2022-31499](https://cve.now/CVE-2022-31499.md): Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. (no CVSS)
- [CVE-2022-31269](https://cve.now/CVE-2022-31269.md): Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doo (no CVSS)
- [CVE-2022-36721](https://cve.now/CVE-2022-36721.md): Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /admin/modify.php. (no CVSS)
- [CVE-2022-36720](https://cve.now/CVE-2022-36720.md): Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/modify1.php. (no CVSS)
- [CVE-2022-36719](https://cve.now/CVE-2022-36719.md): Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the ok parameter at /admin/history.php. (no CVSS)
- [CVE-2022-36715](https://cve.now/CVE-2022-36715.md): Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php. (no CVSS)
- [CVE-2022-36716](https://cve.now/CVE-2022-36716.md): Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/changestock.php. (no CVSS)
- [CVE-2021-43329](https://cve.now/CVE-2021-43329.md): A SQL injection vulnerability in license\_update.php in Mumara Classic through 2.93 allows a remote unauthenticated attacker to execute arbit (no CVSS)
- [CVE-2022-36696](https://cve.now/CVE-2022-36696.md): Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php (no CVSS)
- [CVE-2022-36697](https://cve.now/CVE-2022-36697.md): Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php (no CVSS)
- [CVE-2022-36695](https://cve.now/CVE-2022-36695.md): Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php (no CVSS)
- [CVE-2022-36692](https://cve.now/CVE-2022-36692.md): Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php (no CVSS)
- [CVE-2022-36693](https://cve.now/CVE-2022-36693.md): Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php (no CVSS)
- [CVE-2022-36700](https://cve.now/CVE-2022-36700.md): Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /items/manage\_item. (no CVSS)
- [CVE-2022-36701](https://cve.now/CVE-2022-36701.md): Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /items/view\_item.ph (no CVSS)
- [CVE-2022-36698](https://cve.now/CVE-2022-36698.md): Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /categories/view\_ca (no CVSS)
- [CVE-2022-36703](https://cve.now/CVE-2022-36703.md): Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /stocks/manage\_stoc (no CVSS)
- [CVE-2022-36699](https://cve.now/CVE-2022-36699.md): Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /categories/manage\_ (no CVSS)
- [CVE-2022-2997](https://cve.now/CVE-2022-2997.md): Session Fixation in snipe/snipe-it (CVSS 4.6, snipe/snipe-it)
- [CVE-2020-27802](https://cve.now/CVE-2020-27802.md): An floating point exception was discovered in the elf\_lookup function in p\_lx\_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. (no CVSS, upx)
- [CVE-2020-27801](https://cve.now/CVE-2020-27801.md): A heap-based buffer over-read was discovered in the get\_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. (no CVSS, upx)
- [CVE-2020-27800](https://cve.now/CVE-2020-27800.md): A heap-based buffer over-read was discovered in the get\_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. (no CVSS, upx)
- [CVE-2020-27799](https://cve.now/CVE-2020-27799.md): A heap-based buffer over-read was discovered in the acc\_ua\_get\_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file. (no CVSS, upx)
- [CVE-2020-27798](https://cve.now/CVE-2020-27798.md): An invalid memory address reference was discovered in the adjABS function in p\_lx\_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. (no CVSS, upx)
- [CVE-2020-27797](https://cve.now/CVE-2020-27797.md): An invalid memory address reference was discovered in the elf\_lookup function in p\_lx\_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. (no CVSS, upx)
- [CVE-2020-27796](https://cve.now/CVE-2020-27796.md): A heap-based buffer over-read was discovered in the invert\_pt\_dynamic function in p\_lx\_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. (no CVSS, upx)
- [CVE-2021-3914](https://cve.now/CVE-2021-3914.md): It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. (no CVSS, smallrye-health · io.smallrye:smallrye-health-ui)
- [CVE-2021-3929](https://cve.now/CVE-2021-3929.md): A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. (no CVSS, QEMU)
- [CVE-2021-23172](https://cve.now/CVE-2021-23172.md): A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. (no CVSS, SoX)
- [CVE-2021-4112](https://cve.now/CVE-2021-4112.md): A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. (no CVSS, ansible-tower)
- [CVE-2021-23159](https://cve.now/CVE-2021-23159.md): A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx\_read\_w\_buf() in formats\_i.c file. (no CVSS, SoX)
- [CVE-2021-23210](https://cve.now/CVE-2021-23210.md): A floating point exception (divide-by-zero) issue was discovered in SoX in functon read\_samples() of voc.c file. (no CVSS, SoX)
- [CVE-2021-33844](https://cve.now/CVE-2021-33844.md): A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. (no CVSS, SoX)
- [CVE-2022-36527](https://cve.now/CVE-2022-36527.md): Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field un (no CVSS, com.jflyfox:jflyfox\_jfinal)
- [CVE-2022-20824](https://cve.now/CVE-2022-20824.md): Cisco FXOS and NX-OS Software Cisco Discovery Protocol Denial of Service and Arbitrary Code Execution Vulnerability (CVSS 8.8, Cisco NX-OS Software)
- [CVE-2022-20823](https://cve.now/CVE-2022-20823.md): Cisco NX-OS Software OSPFv3 Denial of Service Vulnerability (CVSS 8.6, Cisco NX-OS Software)
- [CVE-2022-20865](https://cve.now/CVE-2022-20865.md): Cisco FXOS Software Command Injection Vulnerability (CVSS 6.7, Cisco Firepower Extensible Operating System)
- [CVE-2022-20921](https://cve.now/CVE-2022-20921.md): Cisco ACI Multi-Site Orchestrator Privilege Escalation Vulnerability (CVSS 8.8, Cisco ACI Multi-Site Orchestrator Software)
- [CVE-2021-43767](https://cve.now/CVE-2021-43767.md): Odyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is configured to use the PostgreSQL server using 'tru (no CVSS, Odyssey)
- [CVE-2021-43766](https://cve.now/CVE-2021-43766.md): Odyssey passes to server unencrypted bytes from man-in-the-middle When Odyssey is configured to use certificate Common Name for client authe (no CVSS, Odyssey)
- [CVE-2021-42523](https://cve.now/CVE-2021-42523.md): There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c sep (no CVSS, colord)
- [CVE-2021-42522](https://cve.now/CVE-2021-42522.md): There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. (no CVSS, GNOME anjuta)
- [CVE-2021-4022](https://cve.now/CVE-2021-4022.md): A vulnerability was found in rizin. (no CVSS, rizin)
- [CVE-2022-2255](https://cve.now/CVE-2022-2255.md): A vulnerability was found in mod\_wsgi. (no CVSS, mod\_wsgi · mod-wsgi)
- [CVE-2022-37952](https://cve.now/CVE-2022-37952.md): WorkstationST - Reflected XSS in iHistorian Data Display Tags (CVSS 4.7, GE Gas Power WorkstationST)
- [CVE-2022-37953](https://cve.now/CVE-2022-37953.md): WorkstationST - Response Splitting in AM Gateway Challenge-Response (CVSS 4.7, GE Gas Power WorkstationST)
- [CVE-2022-23235](https://cve.now/CVE-2022-23235.md): Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which (no CVSS, Active IQ Unified Manager)
- [CVE-2022-23715](https://cve.now/CVE-2022-23715.md): A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearc (no CVSS, Elastic Cloud Enterprise)
- [CVE-2022-36358](https://cve.now/CVE-2022-36358.md): WordPress SEO Scout plugin \<= 0.9.83 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, SEO Scout)
- [CVE-2022-2465](https://cve.now/CVE-2022-2465.md): ISaGRAF Workbench Deserialization of Untrusted Data CWE-502 (CVSS 8.6, Rockwell Automation ISaGRAF Workbench)
- [CVE-2022-2464](https://cve.now/CVE-2022-2464.md): ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22 (CVSS 7.7, Rockwell Automation ISaGRAF Workbench)
- [CVE-2022-2463](https://cve.now/CVE-2022-2463.md): ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22 (CVSS 6.1, Rockwell Automation ISaGRAF Workbench)
- [CVE-2022-2991](https://cve.now/CVE-2022-2991.md): A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. (no CVSS, kernel)
- [CVE-2022-37160](https://cve.now/CVE-2022-37160.md): Claroline 13.5.7 and prior allows an authenticated attacker to elevate privileges via the arbitrary creation of a privileged user. (no CVSS)
- [CVE-2022-37159](https://cve.now/CVE-2022-37159.md): Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload. (no CVSS)
- [CVE-2022-37161](https://cve.now/CVE-2022-37161.md): Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload. (no CVSS)
- [CVE-2022-37162](https://cve.now/CVE-2022-37162.md): Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS). (no CVSS)
- [CVE-2022-37158](https://cve.now/CVE-2022-37158.md): RuoYi v3.8.3 has a Weak password vulnerability in the management system. (no CVSS)
- [CVE-2022-37292](https://cve.now/CVE-2022-37292.md): Tenda AX12 V22.03.01.21\_CN is vulnerable to Buffer Overflow. (no CVSS)
- [CVE-2022-37238](https://cve.now/CVE-2022-37238.md): MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter. (no CVSS)
- [CVE-2022-37239](https://cve.now/CVE-2022-37239.md): MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles\_list\_ajax endpoint. (no CVSS)
- [CVE-2022-37240](https://cve.now/CVE-2022-37240.md): MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter. (no CVSS)
- [CVE-2022-37241](https://cve.now/CVE-2022-37241.md): MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data\_leak\_list\_ajax endpoin (no CVSS)
- [CVE-2022-37242](https://cve.now/CVE-2022-37242.md): MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter. (no CVSS)
- [CVE-2022-37243](https://cve.now/CVE-2022-37243.md): MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint. (no CVSS)
- [CVE-2022-37244](https://cve.now/CVE-2022-37244.md): MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. (no CVSS)
- [CVE-2022-37245](https://cve.now/CVE-2022-37245.md): MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint. (no CVSS)
- [CVE-2022-37822](https://cve.now/CVE-2022-37822.md): Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetRouteStatic. (no CVSS)
- [CVE-2022-37816](https://cve.now/CVE-2022-37816.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetIpMacBind. (no CVSS)
- [CVE-2022-37820](https://cve.now/CVE-2022-37820.md): Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ddnsEn parameter in the function formSetSysToolDDNS. (no CVSS)
- [CVE-2022-37814](https://cve.now/CVE-2022-37814.md): Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the device\_id parameters in the function (no CVSS)
- [CVE-2022-37817](https://cve.now/CVE-2022-37817.md): Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetIpMacBind. (no CVSS)
- [CVE-2022-37824](https://cve.now/CVE-2022-37824.md): Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGusetBasic. (no CVSS)
- [CVE-2022-37815](https://cve.now/CVE-2022-37815.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex. (no CVSS)
- [CVE-2022-37813](https://cve.now/CVE-2022-37813.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetSysTime. (no CVSS)
- [CVE-2022-37818](https://cve.now/CVE-2022-37818.md): Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand. (no CVSS)
- [CVE-2022-37809](https://cve.now/CVE-2022-37809.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the speed\_dir parameter in the function formSetSpeedWan. (no CVSS)
- [CVE-2022-37810](https://cve.now/CVE-2022-37810.md): Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac. (no CVSS)
- [CVE-2022-37808](https://cve.now/CVE-2022-37808.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the index parameter in the function formWifiWpsOOB. (no CVSS)
- [CVE-2022-37823](https://cve.now/CVE-2022-37823.md): Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetVirtualSer. (no CVSS)
- [CVE-2022-37821](https://cve.now/CVE-2022-37821.md): Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ProvinceCode parameter in the function formSetProvince. (no CVSS)
- [CVE-2022-37819](https://cve.now/CVE-2022-37819.md): Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime. (no CVSS)
- [CVE-2022-36455](https://cve.now/CVE-2022-36455.md): TOTOLink A3600R V4.1.2cu.5182\_B20201102 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.c (no CVSS)
- [CVE-2022-37807](https://cve.now/CVE-2022-37807.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function formSetClientState. (no CVSS)
- [CVE-2022-37806](https://cve.now/CVE-2022-37806.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromDhcpListClient. (no CVSS)
- [CVE-2022-37805](https://cve.now/CVE-2022-37805.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromWizardHandle. (no CVSS)
- [CVE-2022-37811](https://cve.now/CVE-2022-37811.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the startIp parameter in the function formSetPPTPServer. (no CVSS)
- [CVE-2022-37812](https://cve.now/CVE-2022-37812.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg. (no CVSS)
- [CVE-2022-37803](https://cve.now/CVE-2022-37803.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat. (no CVSS)
- [CVE-2022-37800](https://cve.now/CVE-2022-37800.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function fromSetRouteStatic. (no CVSS)
- [CVE-2022-37801](https://cve.now/CVE-2022-37801.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand. (no CVSS)
- [CVE-2022-37802](https://cve.now/CVE-2022-37802.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromNatStaticSetting. (no CVSS)
- [CVE-2022-37804](https://cve.now/CVE-2022-37804.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo. (no CVSS)
- [CVE-2022-37798](https://cve.now/CVE-2022-37798.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetVirtualSer. (no CVSS)
- [CVE-2022-37799](https://cve.now/CVE-2022-37799.md): Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter at the function setSmartPowerManagement. (no CVSS)
- [CVE-2022-37100](https://cve.now/CVE-2022-37100.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateMacClone. (no CVSS)
- [CVE-2022-37098](https://cve.now/CVE-2022-37098.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateIpv6Params. (no CVSS)
- [CVE-2022-37095](https://cve.now/CVE-2022-37095.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateWanParams. (no CVSS)
- [CVE-2022-37096](https://cve.now/CVE-2022-37096.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EnableIpv6. (no CVSS)
- [CVE-2022-37097](https://cve.now/CVE-2022-37097.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPInfoById. (no CVSS)
- [CVE-2022-37099](https://cve.now/CVE-2022-37099.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateSnat. (no CVSS)
- [CVE-2022-37093](https://cve.now/CVE-2022-37093.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function AddMacList. (no CVSS)
- [CVE-2022-37094](https://cve.now/CVE-2022-37094.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit\_BasicSSID\_5G. (no CVSS)
- [CVE-2022-37092](https://cve.now/CVE-2022-37092.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById. (no CVSS)
- [CVE-2022-37090](https://cve.now/CVE-2022-37090.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit\_BasicSSID. (no CVSS)
- [CVE-2022-37091](https://cve.now/CVE-2022-37091.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditWlanMacList. (no CVSS)
- [CVE-2022-37088](https://cve.now/CVE-2022-37088.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAP5GWifiById. (no CVSS)
- [CVE-2022-37087](https://cve.now/CVE-2022-37087.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetMobileAPInfoById. (no CVSS)
- [CVE-2022-37089](https://cve.now/CVE-2022-37089.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditMacList. (no CVSS)
- [CVE-2022-37085](https://cve.now/CVE-2022-37085.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the AddWlanMacList function. (no CVSS)
- [CVE-2022-37086](https://cve.now/CVE-2022-37086.md): H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Asp\_SetTimingtimeWifiAndLed. (no CVSS)
- [CVE-2022-37084](https://cve.now/CVE-2022-37084.md): TOTOLINK A7000R V9.1.0u.6115\_B20201022 was discovered to contain a stack overflow via the sPort parameter at the addEffect function. (no CVSS)
- [CVE-2022-37083](https://cve.now/CVE-2022-37083.md): TOTOLINK A7000R V9.1.0u.6115\_B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setD (no CVSS)
- [CVE-2022-37082](https://cve.now/CVE-2022-37082.md): TOTOLINK A7000R V9.1.0u.6115\_B20201022 was discovered to contain a command injection vulnerability via the host\_time parameter at the functi (no CVSS)
- [CVE-2022-37080](https://cve.now/CVE-2022-37080.md): TOTOLINK A7000R V9.1.0u.6115\_B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg. (no CVSS)
- [CVE-2022-37081](https://cve.now/CVE-2022-37081.md): TOTOLINK A7000R V9.1.0u.6115\_B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setT (no CVSS)
- [CVE-2022-37079](https://cve.now/CVE-2022-37079.md): TOTOLINK A7000R V9.1.0u.6115\_B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the functio (no CVSS)
- [CVE-2022-37078](https://cve.now/CVE-2022-37078.md): TOTOLINK A7000R V9.1.0u.6115\_B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLan (no CVSS)
- [CVE-2022-37077](https://cve.now/CVE-2022-37077.md): TOTOLINK A7000R V9.1.0u.6115\_B20201022 was discovered to contain a stack overflow via the pppoeUser parameter. (no CVSS)
- [CVE-2022-37074](https://cve.now/CVE-2022-37074.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switch\_debug\_info\_set. (no CVSS)
- [CVE-2022-37076](https://cve.now/CVE-2022-37076.md): TOTOLINK A7000R V9.1.0u.6115\_B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the functio (no CVSS)
- [CVE-2022-37072](https://cve.now/CVE-2022-37072.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanLinkspyMulti. (no CVSS)
- [CVE-2022-37075](https://cve.now/CVE-2022-37075.md): TOTOLink A7000R V9.1.0u.6115\_B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg. (no CVSS)
- [CVE-2022-36519](https://cve.now/CVE-2022-36519.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function AddWlanMacList. (no CVSS)
- [CVE-2022-37071](https://cve.now/CVE-2022-37071.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateOne2One. (no CVSS)
- [CVE-2022-37073](https://cve.now/CVE-2022-37073.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanModeMulti. (no CVSS)
- [CVE-2022-37070](https://cve.now/CVE-2022-37070.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList. (no CVSS)
- [CVE-2022-37069](https://cve.now/CVE-2022-37069.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateSnat. (no CVSS)
- [CVE-2022-37068](https://cve.now/CVE-2022-37068.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal. (no CVSS)
- [CVE-2022-37066](https://cve.now/CVE-2022-37066.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateDDNS. (no CVSS)
- [CVE-2022-37067](https://cve.now/CVE-2022-37067.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanParamsMulti. (no CVSS)
- [CVE-2022-36520](https://cve.now/CVE-2022-36520.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function DEleteusergroup. (no CVSS)
- [CVE-2022-36518](https://cve.now/CVE-2022-36518.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditWlanMacList. (no CVSS)
- [CVE-2022-36516](https://cve.now/CVE-2022-36516.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function ap\_version\_check. (no CVSS)
- [CVE-2022-36517](https://cve.now/CVE-2022-36517.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function debug\_wlan\_advance. (no CVSS)
- [CVE-2022-36511](https://cve.now/CVE-2022-36511.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditApAdvanceInfo. (CVSS 9.8)
- [CVE-2022-36513](https://cve.now/CVE-2022-36513.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function edditactionlist. (CVSS 9.8)
- [CVE-2022-36514](https://cve.now/CVE-2022-36514.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function WanModeSetMultiWan. (no CVSS)
- [CVE-2022-36515](https://cve.now/CVE-2022-36515.md): H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function addactionlist. (no CVSS)
- [CVE-2022-36510](https://cve.now/CVE-2022-36510.md): H3C GR2200 MiniGR1A0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList. (CVSS 7.8)
- [CVE-2022-36508](https://cve.now/CVE-2022-36508.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPInfoById. (CVSS 7.8)
- [CVE-2022-36509](https://cve.now/CVE-2022-36509.md): H3C GR3200 MiniGR1B0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList. (CVSS 7.8)
- [CVE-2022-36507](https://cve.now/CVE-2022-36507.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddWlanMacList. (no CVSS)
- [CVE-2022-36503](https://cve.now/CVE-2022-36503.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateMacClone. (no CVSS)
- [CVE-2022-36504](https://cve.now/CVE-2022-36504.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit\_BasicSSID. (CVSS 7.8)
- [CVE-2022-36505](https://cve.now/CVE-2022-36505.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EDitusergroup. (no CVSS)
- [CVE-2022-36506](https://cve.now/CVE-2022-36506.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMacAccessMode. (no CVSS)
- [CVE-2022-36499](https://cve.now/CVE-2022-36499.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function DEleteusergroup. (no CVSS)
- [CVE-2022-36502](https://cve.now/CVE-2022-36502.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateWanParams. (no CVSS)
- [CVE-2022-36496](https://cve.now/CVE-2022-36496.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMobileAPInfoById. (no CVSS)
- [CVE-2022-36498](https://cve.now/CVE-2022-36498.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Asp\_SetTimingtimeWifiAndLed. (no CVSS)
- [CVE-2022-36500](https://cve.now/CVE-2022-36500.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditWlanMacList. (no CVSS)
- [CVE-2022-36501](https://cve.now/CVE-2022-36501.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateSnat. (no CVSS)
- [CVE-2022-36492](https://cve.now/CVE-2022-36492.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddMacList. (no CVSS)
- [CVE-2022-36495](https://cve.now/CVE-2022-36495.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function addactionlist. (no CVSS)
- [CVE-2022-36497](https://cve.now/CVE-2022-36497.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit\_BasicSSID\_5G. (no CVSS)
- [CVE-2022-36490](https://cve.now/CVE-2022-36490.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditMacList. (no CVSS)
- [CVE-2022-36493](https://cve.now/CVE-2022-36493.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById. (no CVSS)
- [CVE-2022-36491](https://cve.now/CVE-2022-36491.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateIpv6Params. (no CVSS)
- [CVE-2022-36494](https://cve.now/CVE-2022-36494.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function edditactionlist. (no CVSS)
- [CVE-2022-36489](https://cve.now/CVE-2022-36489.md): H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EnableIpv6. (no CVSS)
- [CVE-2022-36488](https://cve.now/CVE-2022-36488.md): TOTOLINK N350RT V9.3.5u.6139\_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRul (no CVSS)
- [CVE-2022-36487](https://cve.now/CVE-2022-36487.md): TOTOLINK N350RT V9.3.5u.6139\_B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function (no CVSS)
- [CVE-2022-36485](https://cve.now/CVE-2022-36485.md): TOTOLINK N350RT V9.3.5u.6139\_B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the functio (no CVSS)
- [CVE-2022-36486](https://cve.now/CVE-2022-36486.md): TOTOLINK N350RT V9.3.5u.6139\_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the functio (no CVSS)
- [CVE-2022-36484](https://cve.now/CVE-2022-36484.md): TOTOLINK N350RT V9.3.5u.6139\_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg. (no CVSS)
- [CVE-2022-36483](https://cve.now/CVE-2022-36483.md): TOTOLINK N350RT V9.3.5u.6139\_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter. (no CVSS)
- [CVE-2022-36482](https://cve.now/CVE-2022-36482.md): TOTOLINK N350RT V9.3.5u.6139\_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function se (no CVSS)
- [CVE-2022-36481](https://cve.now/CVE-2022-36481.md): TOTOLINK N350RT V9.3.5u.6139\_B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setD (no CVSS)
- [CVE-2022-36480](https://cve.now/CVE-2022-36480.md): TOTOLINK N350RT V9.3.5u.6139\_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg (no CVSS)
- [CVE-2022-36479](https://cve.now/CVE-2022-36479.md): TOTOLINK N350RT V9.3.5u.6139\_B20201216 was discovered to contain a command injection vulnerability via the host\_time parameter in the functi (no CVSS)
- [CVE-2022-36474](https://cve.now/CVE-2022-36474.md): H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function WlanWpsSet. (no CVSS)
- [CVE-2022-36477](https://cve.now/CVE-2022-36477.md): H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddWlanMacList. (no CVSS)
- [CVE-2022-36478](https://cve.now/CVE-2022-36478.md): H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit\_BasicSSID. (no CVSS)
- [CVE-2022-36473](https://cve.now/CVE-2022-36473.md): H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit\_BasicSSID\_5G. (no CVSS)
- [CVE-2022-36475](https://cve.now/CVE-2022-36475.md): H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddMacList. (no CVSS)
- [CVE-2022-36470](https://cve.now/CVE-2022-36470.md): H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAP5GWifiById. (no CVSS)
- [CVE-2022-36472](https://cve.now/CVE-2022-36472.md): H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMobileAPInfoById. (no CVSS)
- [CVE-2022-36469](https://cve.now/CVE-2022-36469.md): H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById. (no CVSS)
- [CVE-2022-36471](https://cve.now/CVE-2022-36471.md): H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMacAccessMode. (no CVSS)
- [CVE-2022-36467](https://cve.now/CVE-2022-36467.md): H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function EditMacList.d. (no CVSS)
- [CVE-2022-36468](https://cve.now/CVE-2022-36468.md): H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Asp\_SetTimingtimeWifiAndLed. (no CVSS)
- [CVE-2022-36466](https://cve.now/CVE-2022-36466.md): TOTOLINK A3700R V9.1.2u.6134\_B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg. (no CVSS)
- [CVE-2022-36465](https://cve.now/CVE-2022-36465.md): TOTOLINK A3700R V9.1.2u.6134\_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter. (no CVSS)
- [CVE-2022-36464](https://cve.now/CVE-2022-36464.md): TOTOLINK A3700R V9.1.2u.6134\_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRul (no CVSS)
- [CVE-2022-36463](https://cve.now/CVE-2022-36463.md): TOTOLINK A3700R V9.1.2u.6134\_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg (no CVSS)
- [CVE-2022-36462](https://cve.now/CVE-2022-36462.md): TOTOLINK A3700R V9.1.2u.6134\_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg. (no CVSS)
- [CVE-2022-36461](https://cve.now/CVE-2022-36461.md): TOTOLINK A3700R V9.1.2u.6134\_B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the functio (no CVSS)
- [CVE-2022-36459](https://cve.now/CVE-2022-36459.md): TOTOLINK A3700R V9.1.2u.6134\_B20201202 was discovered to contain a command injection vulnerability via the host\_time parameter in the functi (no CVSS)
- [CVE-2022-36460](https://cve.now/CVE-2022-36460.md): TOTOLINK A3700R V9.1.2u.6134\_B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the functio (no CVSS)
- [CVE-2022-36458](https://cve.now/CVE-2022-36458.md): TOTOLINK A3700R V9.1.2u.6134\_B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function (no CVSS)
- [CVE-2022-36456](https://cve.now/CVE-2022-36456.md): TOTOLink A720R V4.1.5cu.532\_B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi (no CVSS)
- [CVE-2022-2957](https://cve.now/CVE-2022-2957.md): SourceCodester Simple and Nice Shopping Cart Script profile.php sql injection (CVSS 6.3, SourceCodester Simple and Nice Shopping Cart Script)
- [CVE-2022-36804](https://cve.now/CVE-2022-36804.md): Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, (CVSS 8.8, KEV, Atlassian Bitbucket Server · Atlassian Bitbucket Data Center)
- [CVE-2022-34960](https://cve.now/CVE-2022-34960.md): The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to l (no CVSS)
- [CVE-2022-32427](https://cve.now/CVE-2022-32427.md): PrinterLogic Windows Client through 25.0.0.676 allows attackers to execute directory traversal. (no CVSS)
- [CVE-2021-20224](https://cve.now/CVE-2021-20224.md): An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. (no CVSS, ImageMagick)
- [CVE-2021-25642](https://cve.now/CVE-2021-25642.md): Apache Hadoop YARN remote code execution in ZKConfigurationStore of capacity scheduler (no CVSS, Apache Software Foundation Apache Hadoop · org.apache.hadoo…)
- [CVE-2021-35937](https://cve.now/CVE-2021-35937.md): A race condition vulnerability was found in rpm. (no CVSS, RPM)
- [CVE-2021-35938](https://cve.now/CVE-2021-35938.md): A symbolic link issue was found in rpm. (no CVSS, RPM)
- [CVE-2021-3979](https://cve.now/CVE-2021-3979.md): A key length flaw was found in Red Hat Ceph Storage. (no CVSS, ceph)
- [CVE-2021-42521](https://cve.now/CVE-2021-42521.md): There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. (no CVSS, vtk)
- [CVE-2022-0135](https://cve.now/CVE-2022-0135.md): An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). (no CVSS, virglrenderer)
- [CVE-2022-2031](https://cve.now/CVE-2022-2031.md): A flaw was found in Samba. (no CVSS, samba)
- [CVE-2022-22728](https://cve.now/CVE-2022-22728.md): libapreq2 multipart form parse memory corruption (no CVSS, Apache Software Foundation libapreq2)
- [CVE-2022-2959](https://cve.now/CVE-2022-2959.md): A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe\_resize\_ring(). (no CVSS, kernel · :linux\_kernel:)
- [CVE-2022-2980](https://cve.now/CVE-2022-2980.md): NULL Pointer Dereference in vim/vim (CVSS 6.3, vim/vim)
- [CVE-2022-2982](https://cve.now/CVE-2022-2982.md): Use After Free in vim/vim (CVSS 7.6, vim/vim)
- [CVE-2022-32742](https://cve.now/CVE-2022-32742.md): A flaw was found in Samba. (CVSS 4.3, samba)
- [CVE-2022-32744](https://cve.now/CVE-2022-32744.md): A flaw was found in Samba. (no CVSS, samba)
- [CVE-2022-32745](https://cve.now/CVE-2022-32745.md): A flaw was found in Samba. (no CVSS, samba)
- [CVE-2022-32746](https://cve.now/CVE-2022-32746.md): A flaw was found in the Samba AD LDAP server. (no CVSS, samba)
- [CVE-2022-38533](https://cve.now/CVE-2022-38533.md): In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd\_getl32 when called from the strip\_main function in st (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-08-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.