Login Request a demo
CA
Product
CandidATS
by · last CVE Nov 3, 2022
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 3Medium 4Low 0
Severity
All severities8Critical1High3Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add CandidATS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-42744
9.8
1%
Nov 3
CandidATS version 3.0.0 allows an external attacker to perform CRUD operations on the application databases
Affected: 3.0.0
CVE-2022-42751
8.8
0%
Nov 3
CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application
Affected: 3.0.0
CVE-2022-42750
8.8
1%
Nov 3
CandidATS version 3.0.0 allows an external attacker to steal the cookie of arbitrary users
Affected: 3.0.0
CVE-2022-42745
7.5
1%
Nov 3
CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server
Affected: 3.0.0
CVE-2022-42749
6.1
1%
Nov 3
CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users
Affected: 3.0.0
CVE-2022-42746
6.1
1%
Nov 3
CandidATS version 3.0.0 on 'indexFile' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users
Affected: 3.0.0
CVE-2022-42747
6.1
1%
Nov 3
CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users
Affected: 3.0.0
CVE-2022-42748
6.1
1%
Nov 3
CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users
Affected: 3.0.0
Showing 8