by Kastro CVE-2022-35401 · Asus RT-AX82U
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 591 of 786
Asus
mitre
CVE-2023-22671 · mitre
Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injec…
CVE-2022-47859 · mitre
Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.
CVE-2022-43974 · mitre
MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13.
CVE-2022-47860 · mitre
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.
CVE-2022-47861 · mitre
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php.
CVE-2022-47862 · mitre
Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php.
CVE-2022-47790 · mitre
Sourcecodester Dynamic Transaction Queuing System v1.0 is vulnerable to SQL Injection via /queuing/index.php?page=display&id=.
CVE-2023-22903 · mitre
api/views/user.py in LibrePhotos before e19e539 has incorrect access control.
CVE-2022-38490 · mitre
An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03.
snyk
CVE-2022-25923 · snyk
Versions of the package exec-local-bin before 1.2.0 are vulnerable to Command Injection via the theProcess() functionality due to imprope…
CVE-2022-25890 · snyk
All versions of the package wifey are vulnerable to Command Injection via the connect() function due to improper input sanitization.
careteditor
GullsEye
CVE-2022-3792 · GullsEye GullsEye terminal operating system
SQL Injection in GullsEye Terminal Operating System
SAP
CVE-2023-0017 · SAP NetWeaver AS for Java
Improper access control in SAP NetWeaver AS for Java
CVE-2023-0022 · SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP)
Code Injection vulnerability in SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP)
CVE-2023-0014 · SAP NetWeaver ABAP Server and ABAP Platform
Capture-replay vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-0016 · SAP SAP BPC MS 10.0
SQL Injection vulnerability in SAP Business Planning and Consolidation MS
CVE-2023-0018 · SAP BusinessObjects Business Intelligence Platform (Central management console)
Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Central management console)
Siemens
CVE-2022-45092 · Siemens SINEC INS
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1).
CVE-2022-43514 · Siemens Automation License Manager V5
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 S…
CVE-2022-46823 · Siemens Mendix SAML (Mendix 8 compatible)
A vulnerability has been identified in Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.4), Mendix SAML (Mendix 9 compati…
usememos
CVE-2023-0106 · usememos usememos/memos
Cross-site Scripting (XSS) - Stored in usememos/memos
zephyrproject-rtos
CVE-2021-3966 · zephyrproject-rtos zephyr
Usb bluetooth device ACL read cb buffer overflow
zte
trampgeek
redhat
SourceCodester
CVE-2022-1101 · SourceCodester Royale Event Management System
SourceCodester Royale Event Management System userregister.php improper authentication
CVE-2022-2666 · SourceCodester Loan Management System
SourceCodester Loan Management System login.php sql injection
stakira
gturri
Synology
bonitasoft
CVE-2020-36640 · bonitasoft bonita-connector-webservice
bonitasoft bonita-connector-webservice SecureWSConnector.java TransformerConfigurationException xml external entity reference
Bulutses Information Technologies
CVE-2022-4422 · Bulutses Information Technologies Bulutdesk Callcenter
SQLi in Bulutdesk Callcenter
JFrog
Talend
CVE-2021-4311 · Talend Open Studio for MDM
Talend Open Studio for MDM XML xml external entity reference
Zyxel
Hitachi Energy
CVE-2022-3927 · Hitachi Energy FOXMAN-UN
The affected products store public and private key that are used to sign and protect custom parameter set files from modification.
CVE-2022-3929 · Hitachi Energy FOXMAN-UN
Communication between the client and server partially using CORBA over TCP/IP
CVE-2021-40342 · Hitachi Energy FOXMAN-UN
Use of default key for encryption
Qualcomm, Inc.
CVE-2022-22088 · Qualcomm, Inc. Snapdragon
Integer Overflow to Buffer Overflow in Bluetooth HOST
CVE-2022-33265 · Qualcomm, Inc. Snapdragon
Information exposure in Powerline Communication Firmware
CVE-2022-33219 · Qualcomm, Inc. Snapdragon