CVE-2022-26819

CVSS v3 Score
6.6
Medium
CVSS v2 Score
8.5
High

Vulnerability Description

Windows DNS Server Remote Code Execution Vulnerability

CVSS:6.6(Medium)

A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the Yoast SEO (wordpress-seo) plugin before 9.2.0 for WordPress allows an SEO Manager to perform command execu...

CVSS:6.6(Medium)

An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion and demotion operations, because of an inco...

CVSS:6.6(Medium)

In Magento prior to 1.9.4.3, Magento prior to 1.14.4.3, Magento 2.2 prior to 2.2.10, and Magento 2.3 prior to 2.3.3 or 2.3.2-p1, an authenticated user with administrative privileges for the import fea...