by Kastro CVE-2022-47986 · IBM Aspera Faspex
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 581 of 786
IBM
mitre
CVE-2022-40032 · mitre
SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attac…
CVE-2022-40347 · mitre
SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' para…
CVE-2023-24236 · mitre
TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting…
CVE-2023-24238 · mitre
TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parameter at setting/del…
CVE-2021-33226 · mitre
Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt…
CVE-2022-48328 · mitre
app/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles ordered_url_params and additional_delimiters.
CVE-2020-29168 · mitre
SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via…
CVE-2021-33391 · mitre
An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode() function in gdoc.c.
CVE-2021-32163 · mitre
Authentication vulnerability in MOSN v.0.23.0 allows attacker to escalate privileges via case-sensitive JWT authorization.
CVE-2021-33949 · mitre
An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec function.
CVE-2023-23279 · mitre
Canteen Management System 1.0 is vulnerable to SQL Injection via /php_action/getOrderReport.php.
CVE-2021-33948 · mitre
SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter.
CVE-2021-35261 · mitre
File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker to execute arbitra…
CVE-2022-48337 · mitre
GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/e…
CVE-2022-40021 · mitre
QVidium Technologies Amino A140 (prior to firmware version 1.0.0-283) was discovered to contain a command injection vulnerability.
CVE-2022-48329 · mitre
MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, ap…
CVE-2021-34182 · mitre
An issue in ttyd v.1.6.3 allows attacker to execute arbitrary code via default configuration permissions.
CVE-2023-24219 · mitre
LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/UserMapper.xml.
CVE-2023-24220 · mitre
LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/RoleMapper.xml.
CVE-2023-24221 · mitre
LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/DeptMapper.xml.
CVE-2023-23064 · mitre
TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control.
CVE-2022-43969 · mitre
Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.
Cisco
Fortinet
CVE-2021-42756 · Fortinet FortiWeb
Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 a…
CVE-2022-39952 · Fortinet FortiNAC
A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.…
CVE-2021-42761 · Fortinet FortiWeb
A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all versions, 6.3.0 through 6…
CVE-2022-38375 · Fortinet FortiNAC
An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenti…
CVE-2022-39954 · Fortinet FortiNAC
An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through…
SICK AG
CVE-2023-23452 · SICK AG
Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker…
CVE-2023-23453 · SICK AG
Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker…
Feathers-Sequalize
CVE-2023-22578 · Feathers-Sequalize Sequelize.js
Sequalize - Default support for “raw attributes” when using parentheses
CVE-2023-22579 · Feathers-Sequalize Sequelize.js
Sequalize - Unsafe fall-through in getWhereConditions
SourceCodester
CVE-2023-0917 · SourceCodester Simple Customer Relationship Management System
SourceCodester Simple Customer Relationship Management System login.php sql injection
CVE-2023-0906 · SourceCodester Online Pizza Ordering System
SourceCodester Online Pizza Ordering System POST Parameter ajax.php delete_category missing authentication
CVE-2023-0883 · SourceCodester Online Pizza Ordering System
SourceCodester Online Pizza Ordering System index.php sql injection
CVE-2023-0910 · SourceCodester Online Pizza Ordering System
SourceCodester Online Pizza Ordering System GET Parameter view_prod.php sql injection
codeprojects
CVE-2023-0918 · codeprojects Pharmacy Management System
codeprojects Pharmacy Management System Avatar Image add.php unrestricted upload
intel
CVE-2022-33964 · intel
Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable es…
CVE-2022-26843 · intel
Insufficient visual distinction of homoglyphs presented to user in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.1 for Intel…
CVE-2022-29514 · intel
Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable esca…
CVE-2022-25987 · intel
Improper handling of Unicode encoding in source code to be compiled by the Intel(R) C++ Compiler Classic before version 2021.6 for Intel(…
WAGO
CVE-2022-3843 · WAGO Unmanaged Switch 852-111/000-001