CVE-2022-20704

MEDIUM Year: 2022
CVSS v3 Score
4.8
Medium
CVSS v2 Score
5.8
Medium
Weakness Type
CWE-121
View all →

Vulnerability Description

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Related Vulnerabilities

CVE-2024-31079

MEDIUM
CVSS:4.8(Medium)

When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX worker processes to terminate or cause other potential impact. This attack requir...

CWE-1212024

CVE-2024-39779

MEDIUM
CVSS:4.7(Medium)

Stack-based buffer overflow in some drivers for Intel(R) Ethernet Connection I219 Series before version 12.19.1.39 may allow an authenticated user to potentially enable denial of service via local acc...

CWE-1212024

CVE-2025-46397

MEDIUM
CVSS:4.7(Medium)

In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation at the bezier_spline function.

CWE-1212025

CVE-2025-46398

MEDIUM
CVSS:4.7(Medium)

In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation via read_objects function.

CWE-1212025

CVE-2024-20998

MEDIUM
CVSS:4.9(Medium)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerabilit...

CWE-1212024

CVE-2024-21053

MEDIUM
CVSS:4.9(Medium)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged a...

CWE-1212024