by Kastro CVE-2021-45466 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 594 of 786
mitre
CVE-2022-45711 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetChe…
CVE-2022-47945 · mitre
ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switc…
CVE-2022-47949 · mitre
The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to ex…
CVE-2022-45709 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection vulnerabilities via the pEnable, pLevel, and pModule p…
CVE-2022-45717 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the usbPartitionName parameter in the formS…
CVE-2022-44015 · mitre
An issue was discovered in Simmeth Lieferantenmanager before 5.6.
CVE-2022-45706 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function.
CVE-2022-45707 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function.
CVE-2022-45708 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping funct…
CVE-2022-45710 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the…
CVE-2022-45712 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function.
CVE-2022-45714 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function.
CVE-2022-45715 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in t…
CVE-2022-45716 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formIPMacBindDel function.
CVE-2022-45718 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAdd function.
CVE-2022-45719 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function.
CVE-2022-45720 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMac…
CVE-2022-45721 · mitre
IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName parameter in the formDelWewifiPic function.
CVE-2022-44013 · mitre
An issue was discovered in Simmeth Lieferantenmanager before 5.6.
CVE-2021-45467 · mitre
In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to cause /user/loader…
CVE-2022-45891 · mitre
Planet eStream before 6.72.10.07 allows attackers to call restricted functions, and perform unauthenticated uploads (Upload2.ashx) or acc…
CVE-2022-47939 · mitre
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2.
CVE-2022-46641 · mitre
D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_staticlist parameter in the S…
CVE-2022-46642 · mitre
D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour parameter in the SetAuto…
CVE-2022-44640 · mitre
Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Dist…
CVE-2022-45896 · mitre
Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video / Related Media or Upload Document.
CVE-2020-11101 · mitre
Sierra Wireless AirLink Mobility Manager (AMM) before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login se…
CVE-2020-24600 · mitre
Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.cap_sendMail GET request.
CVE-2022-24116 · mitre
Certain General Electric Renewable Energy products have inadequate encryption strength.
Ghost Foundation
OpenImageIO Project
CVE-2022-41639 · OpenImageIO Project OpenImageIO
A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2…
CVE-2022-41794 · OpenImageIO Project OpenImageIO
A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0.
CVE-2022-41838 · OpenImageIO Project OpenImageIO
A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2.
CVE-2022-41837 · OpenImageIO Project OpenImageIO
An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2…
CVE-2022-41649 · OpenImageIO Project OpenImageIO
A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0.
CVE-2022-38143 · OpenImageIO Project OpenImageIO
A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images.
ikus060
CVE-2022-4719 · ikus060 ikus060/rdiffweb
Business Logic Errors in ikus060/rdiffweb
CVE-2022-4724 · ikus060 ikus060/rdiffweb
Improper Access Control in ikus060/rdiffweb
usememos
SourceCodester
CVE-2022-4726 · SourceCodester Sanitization Management System
SourceCodester Sanitization Management System Admin Login sql injection
CVE-2022-4737 · SourceCodester Blood Bank Management System
SourceCodester Blood Bank Management System login.php sql injection
CVE-2022-4739 · SourceCodester School Dormitory Management System
SourceCodester School Dormitory Management System Admin Login sql injection
Starcounter-Jack
CVE-2021-4279 · Starcounter-Jack JSON-Patch
Starcounter-Jack JSON-Patch prototype pollution
Calsign
pjsip
barronwaffles
CVE-2020-36631 · barronwaffles dwc_network_server_emulator