by Kastro CVE-2022-46502 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 590 of 786
mitre
CVE-2022-46478 · mitre
The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arb…
CVE-2022-45299 · mitre
An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL.
CVE-2022-47864 · mitre
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.
CVE-2022-47865 · mitre
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.
CVE-2022-47866 · mitre
Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.
CVE-2022-46471 · mitre
Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consulting_id parameter at /healthcare/Adm…
CVE-2022-48252 · mitre
The jokob-sk/Pi.Alert fork (before 22.12.20) of Pi.Alert allows Remote Code Execution via nmap_scan.php (scan parameter) OS Command Injec…
CVE-2022-48253 · mitre
nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote se…
CVE-2023-23566 · mitre
A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by bypassing 2-Step Verification when they try t…
CVE-2022-46954 · mitre
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?a…
CVE-2022-46955 · mitre
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?a…
netdata
publify
CVE-2022-1812 · publify publify/publify
Integer Overflow or Wraparound in publify/publify
CVE-2023-0299 · publify publify/publify
Improper Input Validation in publify/publify
Unknown
CVE-2022-4101 · Unknown Images Optimize and Upload CF7
Images Optimize and Upload CF7 <= 2.1.4 - Unauthenticated Arbitrary File Deletion
redhat
MAIF
thorsten
CVE-2023-0311 · thorsten thorsten/phpmyfaq
Improper Authentication in thorsten/phpmyfaq
CVE-2023-0307 · thorsten thorsten/phpmyfaq
Weak Password Requirements in thorsten/phpmyfaq
CVE-2023-0310 · thorsten thorsten/phpmyfaq
Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
CVE-2023-0306 · thorsten thorsten/phpmyfaq
Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
SourceCodester
CVE-2023-0281 · SourceCodester Online Flight Booking Management System
SourceCodester Online Flight Booking Management System judge_panel.php sql injection
CVE-2023-0324 · SourceCodester Online Tours & Travels Management System
SourceCodester Online Tours & Travels Management System page-login.php sql injection
CVE-2023-0245 · SourceCodester Online Flight Booking Management System
SourceCodester Online Flight Booking Management System add_contestant.php sql injection
CVE-2023-0283 · SourceCodester Online Flight Booking Management System
SourceCodester Online Flight Booking Management System POST Parameter review_search.php sql injection
CVE-2023-0256 · SourceCodester Online Food Ordering System
SourceCodester Online Food Ordering System Login Page sql injection
CVE-2023-0257 · SourceCodester Online Food Ordering System
SourceCodester Online Food Ordering System Menu Form unrestricted upload
VulDB
KubeOperator
CVE-2023-22480 · KubeOperator KubeOperator
KubeOperator is vulnerable to unauthorized access to system API
Netcomm
Delta Industrial Automation
CVE-2022-4616 · Delta Industrial Automation 4G Router DX-3021
The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through the network diagnosis page.
TP-Link
snyk
Delta Electronics
CVE-2022-41778 · Delta Electronics InfraSuite Device Master
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-DataCo…
abhilash1985
EXFO
CVE-2022-39184 · EXFO BV-10 Performance Endpoint Unit
EXFO - BV-10 Performance Endpoint Unit Authentication bypass
CVE-2022-39185 · EXFO BV-10 Performance Endpoint Unit
EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user.
IBM
CVE-2022-40615 · IBM Sterling Partner Engagement Manager
IBM Sterling Partner Engagement Manager SQL injection
InHand Networks
CVE-2023-22601 · InHand Networks InRouter 302
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vuln…
CVE-2023-22600 · InHand Networks InRouter 302
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vuln…
CVE-2023-22599 · InHand Networks InRouter 302
InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vuln…
NethServer
CVE-2021-4313 · NethServer phonenehome
NethServer phonenehome index.php get_country_coor sql injection
visegripped
CVE-2022-4889 · visegripped Stracker
visegripped Stracker api.php getHistory sql injection
Dell
CVE-2022-34440 · Dell Secure Connect Gateway (SCG) Policy Manager
Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability.
CVE-2022-34441 · Dell Secure Connect Gateway (SCG) Policy Manager