by Kastro CVE-2022-47966 · Zoho ManageEngine
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 589 of 786
Zoho
mitre
CVE-2020-35326 · mitre
SQL Injection vulnerability in file /inxedu/demo_inxedu_open/src/main/resources/mybatis/inxedu/website/WebsiteImagesMapper.xml in inxedu…
CVE-2022-46475 · mitre
D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.
CVE-2022-46476 · mitre
D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function.
CVE-2022-47853 · mitre
TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service.
CVE-2022-47105 · mitre
Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.
CVE-2020-21152 · mitre
SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunc…
CVE-2020-23256 · mitre
An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service.
CVE-2020-29297 · mitre
Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0.
CVE-2022-47740 · mitre
Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php.
CVE-2022-46887 · mitre
Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL commands via the conuser…
CVE-2022-41417 · mitre
BlogEngine.NET v3.3.8.0 allows an attacker to create any folder with "files" prefix under ~/App_Data/.
CVE-2022-43976 · mitre
An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0.
CVE-2022-43977 · mitre
An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0.
CVE-2020-22653 · mitre
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruc…
CVE-2020-22658 · mitre
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruc…
CVE-2020-22657 · mitre
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruc…
CVE-2020-22654 · mitre
In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruc…
Unknown
CVE-2022-4060 · Unknown User Post Gallery
User Post Gallery <= 2.19 - Unauthenticated RCE
CVE-2022-4447 · Unknown Fontsy
Fontsy <= 1.8.6 - Multiple Unauthenticated SQLi
freeswitch
Ghost Foundation
CVE-2022-47194 · Ghost Foundation Ghost
An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4.
CVE-2022-47195 · Ghost Foundation Ghost
An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4.
CVE-2022-47196 · Ghost Foundation Ghost
An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4.
CVE-2022-47197 · Ghost Foundation Ghost
An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4.
git
Cisco
CVE-2023-20025 · Cisco Cisco Small Business RV Series Router Firmware
A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers could allow an unau…
shopware
GitHub
Apache Software Foundation
CVE-2022-36760 · Apache Software Foundation Apache HTTP Server
Apache HTTP Server: mod_proxy_ajp Possible request smuggling
Mahoroba Kobo, Inc.
CVE-2023-22279 · Mahoroba Kobo, Inc. MAHO-PBX NetDevancer series
MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDev…
OMRON Corporation
Hometory
Sewio
CVE-2022-45444 · Sewio RTLS Studio
CVE-2022-45444
CVE-2022-41989 · Sewio RTLS Studio
CVE-2022-41989
CVE-2022-43483 · Sewio RTLS Studio
CVE-2022-43483
CVE-2022-47911 · Sewio RTLS Studio
CVE-2022-47911
CVE-2022-46733 · Sewio RTLS Studio
CVE-2022-46733
SourceCodester
CVE-2023-0332 · SourceCodester Online Food Ordering System
SourceCodester Online Food Ordering System manage_user.php sql injection
TP-Link
zephyrproject-rtos
CVE-2022-3806 · zephyrproject-rtos zephyr
Bluetooth HCI Error Handling Double Free
CVE-2023-0397 · zephyrproject-rtos zephyr
DoS: Invalid Initialization in le_read_buffer_size_complete
cakephp
Oracle Corporation
CVE-2023-21890 · Oracle Corporation Communications Converged Application Server
Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core).
Adeel Ahmed
CVE-2022-43462 · Adeel Ahmed IP Blacklist Cloud
WordPress IP Blacklist Cloud Plugin <= 5.00 is vulnerable to SQL Injection (SQLi) vulnerability
Dell EMC
CVE-2022-34442 · Dell EMC Secure Connect Gateway (SCG) Policy Manager