by Kastro CVE-2022-4120 · Unknown Stop Spammers Security | Block Spam Users, Comments, Forms
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 593 of 786
Unknown
CVE-2022-4047 · Unknown Return Refund and Exchange For WooCommerce
Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload
CVE-2022-4117 · Unknown IWS
IWS - Geo Form Fields <= 1.0 - Unauthenticated SQLi
mitre
CVE-2022-46597 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sys_service parameter in the setup_wizard_m…
CVE-2022-46598 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps_sta_enrollee_pin parameter in the actio…
CVE-2022-46580 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the user_edit_page parameter in the wifi_captive_portal function.
CVE-2022-46581 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.nslookup_target parameter in the tools_nslookup…
CVE-2022-46582 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the login_name parameter in the do_graph_auth (sub_4061E0) funct…
CVE-2022-46583 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reboot_type parameter in the wizard_ipv6 (sub_41C380) function.
CVE-2022-46584 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_…
CVE-2022-46585 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the REMOTE_USER parameter in the get_access (sub_45AC2C) function.
CVE-2022-46586 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_…
CVE-2022-46588 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the sys_service parameter in the setup_wizard_mydlink (sub_4104B…
CVE-2022-46589 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_option parameter in the tools_netstat (s…
CVE-2022-46590 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_rsname parameter in the tools_netstat (s…
CVE-2022-46591 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reject_url parameter in the reject (sub_41BD60) function.
CVE-2022-46592 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the set_sta_enrollee_pin_5…
CVE-2022-46593 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the do_sta_enrollee_wifi f…
CVE-2022-46594 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the update_file_name parameter in the auto_up_fw (sub_420A04) fu…
CVE-2022-46596 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the del_num parameter in the icp_delete_img (sub_41DEDC) function.
CVE-2022-46599 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setlogo_num parameter in the icp_setlogo_img (sub_41DBF4) fu…
CVE-2022-46600 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the action set_sta_enrolle…
CVE-2022-46601 · mitre
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setbg_num parameter in the icp_setbg_img (sub_41DD68) function.
CVE-2022-26969 · mitre
In Directus before 9.7.0, the default settings of CORS_ORIGIN and CORS_ENABLED are true.
CVE-2022-24119 · mitre
Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration sh…
CVE-2022-36437 · mitre
The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated attacker to access and manipulate data in the clust…
CVE-2022-45778 · mitre
https://www.hillstonenet.com.cn/ Hillstone Firewall SG-6000 <= 5.0.4.0 is vulnerable to Incorrect Access Control.
CVE-2022-45963 · mitre
h3c firewall <= 3.10 ESS6703 has a privilege bypass vulnerability.
CVE-2022-46442 · mitre
dedecms <=V5.7.102 is vulnerable to SQL Injection.
CVE-2022-24118 · mitre
Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration.
CVE-2022-24117 · mitre
Certain General Electric Renewable Energy products download firmware without an integrity check.
github.com/artdarek/go-unzip
CVE-2020-36560 · github.com/artdarek/go-unzip github.com/artdarek/go-unzip
Path traversal in github.com/artdarek/go-unzip
github.com/yi-ge/unzip
CVE-2020-36561 · github.com/yi-ge/unzip github.com/yi-ge/unzip
Path traversal in github.com/yi-ge/unzip
usememos
CVE-2022-4797 · usememos usememos/memos
Improper Restriction of Excessive Authentication Attempts in usememos/memos
CVE-2022-4851 · usememos usememos/memos
Improper Handling of Values in usememos/memos
CVE-2022-4802 · usememos usememos/memos
Authorization Bypass Through User-Controlled Key in usememos/memos
goauthentik
TrueConf
Brave UX
CVE-2021-4281 · Brave UX for-the-badge
Brave UX for-the-badge combine-prs.yml os command injection
elvexys
github.com/ecnepsnai/web
CVE-2021-4236 · github.com/ecnepsnai/web github.com/ecnepsnai/web
Panic or authentication bypass in github.com/ecnepsnai/web
LiuWoodsCode
VulDB
github.com/Masterminds/goutils
CVE-2021-4238 · github.com/Masterminds/goutils github.com/Masterminds/goutils
Insufficient randomness in github.com/Masterminds/goutils
github.com/whyrusleeping/tar-utils
CVE-2020-36566 · github.com/whyrusleeping/tar-utils github.com/whyrusleeping/tar-utils
Path traversal in github.com/whyrusleeping/tar-utils
ONC
Dropbox
github.com/nanobox-io/golang-nanoauth
CVE-2020-36569 · github.com/nanobox-io/golang-nanoauth github.com/nanobox-io/golang-nanoauth