by Kastro CVE-2022-44877 · CWP Control Web Panel
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 592 of 786
CWP
Fortinet
KubeOperator
SourceCodester
CVE-2022-4855 · SourceCodester Lead Management System
SourceCodester Lead Management System login.php sql injection
mitre
CVE-2022-38627 · mitre
Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a SQL…
CVE-2022-48198 · mitre
The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who control the source cod…
CVE-2022-47123 · mitre
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey3 parameter at /goform/WifiBasicSet.
CVE-2022-47128 · mitre
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet.
CVE-2022-47523 · mitre
Zoho ManageEngine Access Manager Plus before 4309, Password Manager Pro before 12210, and PAM360 before 5801 are vulnerable to SQL Inject…
CVE-2022-34322 · mitre
Multiple XSS issues were discovered in Sage Enterprise Intelligence 2021 R1.1 that allow an attacker to execute JavaScript code in the co…
CVE-2022-45995 · mitre
There is an unauthorized buffer overflow vulnerability in Tenda AX12 v22.03.01.21 _ cn.
CVE-2022-47115 · mitre
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet.
CVE-2022-47117 · mitre
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security parameter at /goform/WifiBasicSet.
CVE-2022-47118 · mitre
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet.
CVE-2022-47119 · mitre
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet.
CVE-2022-47120 · mitre
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.
CVE-2022-47121 · mitre
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet.
CVE-2022-47122 · mitre
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd_5g parameter at /goform/WifiBasicSet.
CVE-2022-47124 · mitre
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey4 parameter at /goform/WifiBasicSet.
CVE-2022-47125 · mitre
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet.
CVE-2022-47126 · mitre
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet.
CVE-2022-47127 · mitre
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd parameter at /goform/WifiBasicSet.
CVE-2022-48196 · mitre
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
CVE-2022-48195 · mitre
An issue was discovered in Mellium mellium.im/sasl before 0.3.1.
CVE-2022-47544 · mitre
An issue was discovered in Siren Investigate before 12.1.7.
Unknown
CVE-2022-4049 · Unknown WP User
WP User <= 7.0 - Unauthenticated SQLi
CVE-2022-4059 · Unknown Cryptocurrency Widgets Pack
Cryptocurrency Widgets Pack < 2.0 - Unauthenticated SQLi
CVE-2022-4297 · Unknown WP AutoComplete Search
WP AutoComplete Search <= 1.0.4 - Unauthenticated SQLi
CVE-2022-4298 · Unknown Wholesale Market
Wholesale Market < 2.2.1 - Unauthenticated Arbitrary File Download
CVE-2022-3241 · Unknown Build App Online
Build App Online < 1.0.19 - Unauthenticated SQL Injection
CVE-2022-4099 · Unknown Joy Of Text Lite
Joy Of Text Lite < 2.3.1 - Unauthenticated SQLi
CVE-2022-4357 · Unknown LetsRecover
LetsRecover < 1.2.0 - Unauthenticated SQLi
Apache
xwiki-contrib
usememos
CVE-2022-4866 · usememos usememos/memos
Cross-site Scripting (XSS) - Stored in usememos/memos
CVE-2022-4865 · usememos usememos/memos
Cross-site Scripting (XSS) - Stored in usememos/memos
Synology
Apache Software Foundation
CVE-2022-44621 · Apache Software Foundation Apache Kylin
Apache Kylin: Command injection by Diagnosis Controller
CVE-2022-45875 · Apache Software Foundation Apache DolphinScheduler
Apache DolphinScheduler: Remote command execution Vulnerability in script alert plugin
aEnrich
MediaTek, Inc.
CVE-2022-32665 · MediaTek, Inc. EN7528, EN7580
In Boa, there is a possible command injection due to improper input validation.
Merit Lilin Ent. Co., Ltd.
CVE-2022-47618 · Merit Lilin Ent. Co., Ltd. AH55B04 DVR firmware
Merit Lilin Ent. Co., Ltd. AH55B04 & AH55B08 DVR - Hard-coded Credentials
AlliedModders
ghostlander
Hesburgh Libraries of Notre Dame
CVE-2021-4298 · Hesburgh Libraries of Notre Dame Sipity
Hesburgh Libraries of Notre Dame Sipity search_criteria_for_works_parameter.rb SearchCriteriaForWorksParameter sql injection
IBM
CVE-2022-22338 · IBM Sterling B2B Integrator Standard Edition