Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Schneider-electric Apc Easy Ups Online Monitoring SoftwareMalicious File Upload

Risk 86
Severity
9.8
Malicious File Upload
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker uploads a malicious JSP file. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)

First published (updated )
CVE-2022-42971

Schneider-electric Apc Easy Ups Online Monitoring SoftwareA CWE-306: Missing Authentication for Critical Function The software does not perform any authentica…

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)

First published (updated )
CVE-2022-42970

Microsoft Windows 7Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Risk 66
Severity
9.1
Integer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

First published (updated )
CVE-2023-21557

Microsoft Windows 7Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

First published (updated )
CVE-2022-34722

Microsoft Windows Server 2012 R2Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

First published (updated )
CVE-2022-34721
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft Windows 7Windows TCP/IP Remote Code Execution Vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows TCP/IP Remote Code Execution Vulnerability

First published (updated )
CVE-2022-34718

Microsoft Windows ServerWindows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

First published (updated )
CVE-2022-35744

Microsoft Windows 7Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

First published (updated )
CVE-2022-30133

Microsoft Windows Server 2012 R2Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Risk 79
Severity
9.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-30139, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161.

1 / 2
First published (updated )
CVE-2022-30141

Microsoft Windows ServerWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Risk 78
Severity
9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Windows LDAP Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22012, CVE-2022-22013, CVE-2022-22014, CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29137, CVE-2022-29139, CVE-2022-29141.

1 / 2
First published (updated )
CVE-2022-29131
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft Windows Server 2012 R2Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Risk 78
Severity
9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Windows LDAP Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22012, CVE-2022-22013, CVE-2022-22014, CVE-2022-29129, CVE-2022-29130, CVE-2022-29131, CVE-2022-29137, CVE-2022-29139, CVE-2022-29141.

1 / 2
First published (updated )
CVE-2022-29128

Microsoft Windows 7Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Windows LDAP Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22013, CVE-2022-22014, CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29131, CVE-2022-29137, CVE-2022-29139, CVE-2022-29141.

1 / 2
First published (updated )
CVE-2022-22012

Microsoft Windows Server 2012 R2Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Windows LDAP Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22012, CVE-2022-22013, CVE-2022-22014, CVE-2022-29128, CVE-2022-29129, CVE-2022-29131, CVE-2022-29137, CVE-2022-29139, CVE-2022-29141.

1 / 2
First published (updated )
CVE-2022-29130

Microsoft Windows ServerWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Risk 78
Severity
9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Windows LDAP Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22012, CVE-2022-22013, CVE-2022-22014, CVE-2022-29128, CVE-2022-29130, CVE-2022-29131, CVE-2022-29137, CVE-2022-29139, CVE-2022-29141.

1 / 2
First published (updated )
CVE-2022-29129

Microsoft Windows ServerWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Risk 79
Severity
9.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21972.

1 / 2
First published (updated )
CVE-2022-23270
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft Windows ServerWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Risk 79
Severity
9.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-23270.

1 / 2
First published (updated )
CVE-2022-21972

Microsoft Windows Server 2012 R2Windows Server Service Remote Code Execution Vulnerability

Risk 79
Severity
9.3
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Server Service Remote Code Execution Vulnerability

First published (updated )
CVE-2022-24541

Microsoft Windows 7Remote Procedure Call Runtime Remote Code Execution Vulnerability

Risk 87
Severity
10
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Remote Procedure Call Runtime Remote Code Execution Vulnerability

First published (updated )
CVE-2022-26809

Microsoft Windows 7Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Risk 79
Severity
9.3
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

First published (updated )
CVE-2022-26919

Microsoft Windows Server 2012 R2Remote Procedure Call Runtime Remote Code Execution Vulnerability

Risk 79
Severity
9.3
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Remote Procedure Call Runtime Remote Code Execution Vulnerability

First published (updated )
CVE-2022-24492
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft Windows 7Windows Graphics Component Remote Code Execution Vulnerability

Risk 79
Severity
9.3
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Graphics Component Remote Code Execution Vulnerability

First published (updated )
CVE-2022-26903

Microsoft Windows Server 2012 R2Remote Desktop Client Remote Code Execution Vulnerability

Risk 79
Severity
9.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Remote Desktop Client Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21851.

1 / 2
First published (updated )
CVE-2022-21850

Microsoft Windows Server 2012 R2Remote Desktop Client Remote Code Execution Vulnerability

Risk 79
Severity
9.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Remote Desktop Client Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21850.

1 / 2
First published (updated )
CVE-2022-21851

Microsoft Windows ServerRemote Procedure Call Runtime Remote Code Execution Vulnerability

Risk 78
Severity
9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Remote Procedure Call Runtime Remote Code Execution Vulnerability.

1 / 2
First published (updated )
CVE-2022-21922

Microsoft Windows Server 2012 R2Active Directory Domain Services Elevation of Privilege Vulnerability

Risk 78
Severity
9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Active Directory Domain Services Elevation of Privilege Vulnerability.

1 / 2
First published (updated )
CVE-2022-21857
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft Windows 7Windows Kerberos Elevation of Privilege Vulnerability

Risk 78
Severity
9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Windows Kerberos Elevation of Privilege Vulnerability.

1 / 2
First published (updated )
CVE-2022-21920

Microsoft Windows 10Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

Risk 86
Severity
9.8
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

First published (updated )
CVE-2021-43217

Microsoft Windows 10iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution

First published (updated )
CVE-2021-43215

Microsoft Windows 10Windows WLAN AutoConfig Service Remote Code Execution Vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Windows WLAN AutoConfig Service Remote Code Execution Vulnerability

First published (updated )
CVE-2021-36965

Microsoft Windows 10Windows TCP/IP Remote Code Execution Vulnerability

Risk 82
Severity
9.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Windows TCP/IP Remote Code Execution Vulnerability

First published (updated )
CVE-2021-26424
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203