CVE-2022-28990

WASM3 v0.5.0 was discovered to contain a heap overflow via the component /wabt/bin/poc.wasm.

• CWE-787

• https://github.com/wasm3/wasm3/issues/323Exploit, Issue Tracking, Third Party Advisory
• https://github.com/wasm3/wasm3/pull/324Patch, Third Party Advisory
• https://github.com/wasm3/wasm3/issues/323Exploit, Issue Tracking, Third Party Advisory
• https://github.com/wasm3/wasm3/pull/324Patch, Third Party Advisory

Published

May 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-28980Multiple cross-site scripting (XSS) vulnerabilities in Lifer…6.1
• CVE-2022-28981Path traversal vulnerability in the Hypermedia REST APIs mod…7.5
• CVE-2022-28982A cross-site scripting (XSS) vulnerability in Liferay Portal…6.1
• CVE-2022-28985A stored cross-site scripting (XSS) vulnerability in the add…5.4
• CVE-2022-28986LMS Doctor Simple 2 Factor Authentication Plugin For Moodle …7.5
• CVE-2022-28987Zoho ManageEngine ADSelfService Plus before 6202 allows atta…5.3
• CVE-2022-28991Multi Store Inventory Management System v1.0 was discovered …7.5
• CVE-2022-28992A Cross-Site Request Forgery (CSRF) in Online Banquet Bookin…8.8
• CVE-2022-28993Multi Store Inventory Management System v1.0 allows attacker…9.8
• CVE-2022-28994Small HTTP Server version 3.06 suffers from a remote buffer …9.8
• CVE-2022-28995Rengine v1.0.2 was discovered to contain a remote code execu…9.8
• CVE-2022-28997CSZCMS v1.3.0 allows attackers to execute a Server-Side Requ…7.5