High risk threats - API Security Blog

Exploit for Incorrect Permission Assignment for Critical Resource in Hasura Graphql Engine

# CVE-2022-46792 Hasura GraphQL Engine before 2.15.2 mishandles...Read More ...

December 22, 2022

CVSS3 - HIGH

CVE-2022-22184

An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of ...

December 22, 2022

CVSS3 - HIGH

Exploit for OS Command Injection in Contec Conprosys Hmi System

# CVE-2022-44456 CONPROSYS HMI System (CHS) Ver.3.4.4?and earli...Read More ...

December 22, 2022

CVSS3 - CRITICAL

Exploit for Path Traversal in Vmware Vrealize Network Insight

# CVE-2022-31703 vRealize Network Insight (vRNI) directory trav...Read More ...

December 22, 2022

CVSS3 - HIGH

Exploit for Command Injection in Vmware Vrealize Network Insight

# CVE-2022-31702 vRealize Network Insight (vRNI) contains a com...Read More ...

December 22, 2022

CVSS3 - CRITICAL

Exploit for Server-Side Request Forgery in Apache Cxf

# CVE-2022-46364 A SSRF vulnerability in parsing the href attri...Read More ...

December 22, 2022

CVSS3 - CRITICAL

Exploit for Missing Authorization in Sap Netweaver Process Integration

# CVE-2022-41272 An unauthenticated attacker over the network c...Read More ...

December 22, 2022

CVSS3 - HIGH

Exploit for Missing Authorization in Sap Netweaver Process Integration

# CVE-2022-41271 An unauthenticated user can attach to an open ...Read More ...

December 22, 2022

CVSS3 - CRITICAL