by Kastro CVE-2022-46169 · Cacti cacti
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 599 of 786
Cacti
mitre
CVE-2022-44366 · mitre
Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setDiagnoseInfo.
CVE-2022-44291 · mitre
webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php.
CVE-2022-40918 · mitre
Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote…
CVE-2022-35508 · mitre
Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy…
CVE-2022-44039 · mitre
Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite.
CVE-2022-44362 · mitre
Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/AddSysLogRule.
CVE-2022-44365 · mitre
Tenda i21 V1.0.0.14(4656) has a stack overflow vulnerability via /goform/setSysPwd.
CVE-2022-44367 · mitre
Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setUplinkInfo.
CVE-2022-44945 · mitre
Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the heading_field_id parameter.
CVE-2022-44363 · mitre
Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setSnmpInfo.
CVE-2020-6627 · mitre
The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via m…
CVE-2022-45651 · mitre
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the list parameter in the formSetVirtualSer function.
CVE-2022-45652 · mitre
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the startIp parameter in the formSetPPTPServer function.
CVE-2022-44928 · mitre
D-Link DVG-G5402SP GE_1.03 was discovered to contain a command injection vulnerability via the Maintenance function.
CVE-2022-44930 · mitre
D-Link DHP-W310AV 3.10EU was discovered to contain a command injection vulnerability via the System Checks function.
CVE-2022-46414 · mitre
An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100.
CVE-2022-44900 · mitre
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows atta…
CVE-2022-44929 · mitre
An access control issue in D-Link DVG-G5402SP GE_1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoI…
CVE-2022-46383 · mitre
RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 has exposed a priv…
CVE-2022-38337 · mitre
When aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server.
Siemens
CVE-2022-32221 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when…
hackerone
CVE-2022-32224 · hackerone
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <…
CVE-2022-27773 · hackerone
A privilege escalation vulnerability is identified in Ivanti EPM (LANDesk Management Suite) that allows a user to execute commands with e…
CVE-2022-30123 · hackerone
A sequence injection vulnerability exists in Rack <2.0.9.1, <2.1.4.1 and <2.2.3.1 which could allow is a possible shell escape in the Lin…
CVE-2022-43549 · hackerone
Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms.
MicroTik
SourceCodester
CVE-2022-4273 · SourceCodester Human Resource Management System
SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload
unspecified
CVE-2022-4274 · unspecified House Rental System
House Rental System view-property.php sql injection
CVE-2022-4275 · unspecified House Rental System
House Rental System POST Request search-property.php sql injection
CVE-2022-4276 · unspecified House Rental System
House Rental System POST Request tenant-engine.php unrestricted upload
Apache Software Foundation
CVE-2022-46366 · Apache Software Foundation Apache Tapestry
Apache Tapestry prior to version 4 (EOL) allows RCE though deserialization of untrusted input
kujirahand
CVE-2022-41642 · kujirahand Nadesiko3 (PC Version)
OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS comm…
CVE-2022-42496 · kujirahand Nako3edit, editor component of nadesiko3 (PC Version)
OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker…
Telepad
BEAppsMobile
CVE-2022-45479 · BEAppsMobile PC Keyboard WiFi & Bluetooth
PC Keyboard allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any previous authori…
thisAAY
CVE-2022-45481 · thisAAY Lazy Mouse
The default configuration of Lazy Mouse does not require a password, allowing remote unauthenticated users to execute arbitrary code with…
CVE-2022-45482 · thisAAY Lazy Mouse
Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easil…
goauthentik
NodeJS
Advanced Booking Calendar
CVE-2022-45822 · Advanced Booking Calendar Advanced Booking Calendar
WordPress Advanced Booking Calendar Plugin <= 1.7.1 is vulnerable to SQL Injection
Fortinet
AMI
CVE-2022-40242 · AMI MegaRAC SPx12
MegaRAC Default Credentials Vulnerability
CVE-2022-40259 · AMI MegaRAC SPx12
MegaRAC Default Credentials Vulnerability
Shaoxing
CVE-2022-4277 · Shaoxing Background Management System
Shaoxing Background Management System Bd sql injection
tensorflow
CVE-2022-41902 · tensorflow tensorflow
Out of bounds write in grappler in Tensorflow
CVE-2022-41910 · tensorflow tensorflow