CVE-2022-27158

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

pearweb < 1.32 suffers from Deserialization of Untrusted Data.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published
Apr 15, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-27165.4The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Text Editor' block in versioCVE-2022-271619.8Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_viewUsersCVE-2022-271629.8CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_editUserCVE-2022-271639.8CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUserCVE-2022-271649.8CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_viewUsersCVE-2022-271659.8CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatusCVE-2022-271666.1A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which couCVE-2022-271677.1Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features whCVE-2022-271686.1Cross-site scripting vulnerability in LiteCart versions prior to 2.4.2 allows a remote attacker to inject an arbitrary script via unspecifieCVE-2022-271697.5An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Software OAS Platform V16CVE-2022-27174.9The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parCVE-2022-271707.8Protection mechanism failure in the Intel(R) Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable
CVE-2022-27158: Critical severity, CVSS 9.8 | Vulnix