First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2022-29784

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

PublicCMS V4.0.202204.a and below contains an information leak via the component /views/directive/sys/SysConfigDataDirective.java.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jun 3, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-297886.5libmobi before v0.10 contains a NULL pointer dereference via the component mobi_buffer_getpointer. This vulnerability allows attackers to ca CVE-2022-297897.5The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerabili CVE-2022-29797.8Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary CVE-2022-297907.5The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability m CVE-2022-297917.5The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability w CVE-2022-297927.5The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality.CVE-2022-297937.5There is a configuration defect in the activation lock of mobile phones.Successful exploitation of this vulnerability may affect application CVE-2022-297949.8The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrit CVE-2022-297957.5The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kern CVE-2022-297967.5The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability w CVE-2022-297979.8There is a buffer overflow vulnerability in CV81-WDM FW 01.70.49.29.46. Successful exploitation of this vulnerability may lead to privilege CVE-2022-297987.5There is a denial of service vulnerability in CV81-WDM FW versions 01.70.49.29.46. Successful exploitation could cause denial of service.

CVE-2022-29784: Medium severity, CVSS 5.3 | Vulnix