by Kastro CVE-2022-4135 · Google Chrome
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 600 of 786
C-DATA
CVE-2022-4257 · C-DATA Web Management System
C-DATA Web Management System GET Parameter jumpto.php argument injection
mitre
CVE-2022-45933 · mitre
KubeView through 0.1.31 allows attackers to obtain control of a Kubernetes cluster because api/scrape/kube-system does not require authen…
CVE-2022-44290 · mitre
webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.php.
CVE-2022-44844 · mitre
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/…
CVE-2022-43333 · mitre
Telenia Software s.r.l TVox before v22.0.17 was discovered to contain a remote code execution (RCE) vulnerability in the component action…
CVE-2022-44262 · mitre
ff4j 1.8.1 is vulnerable to Remote Code Execution (RCE).
CVE-2022-44354 · mitre
SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.
CVE-2022-30528 · mitre
SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arb…
CVE-2022-36431 · mitre
An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to execute arbitrar…
CVE-2022-42109 · mitre
Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php.
CVE-2022-44136 · mitre
Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).
CVE-2022-44400 · mitre
Purchase Order Management System v1.0 contains a file upload vulnerability via /purchase_order/admin/?page=system_info.
CVE-2022-44151 · mitre
Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php.
CVE-2022-44401 · mitre
Online Tours & Travels Management System v1.0 contains an arbitrary file upload vulnerability via /tour/admin/file.php.
CVE-2022-45207 · mitre
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component updateNullByEmptyString.
CVE-2022-44096 · mitre
Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and acc…
CVE-2022-44097 · mitre
Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and acces…
CVE-2022-45206 · mitre
Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check.
CVE-2022-43325 · mitre
An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.…
CVE-2022-44843 · mitre
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/…
CVE-2022-44038 · mitre
Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component.
CVE-2022-36193 · mitre
SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the applica…
CVE-2022-45907 · mitre
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.
CVE-2022-45908 · mitre
In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied w…
CVE-2022-44283 · mitre
AVS Audio Converter 10.3 is vulnerable to Buffer Overflow.
CVE-2022-44399 · mitre
Poultry Farm Management System v1.0 contains a SQL injection vulnerability via the del parameter at /Redcock-Farm/farm/category.php.
CVE-2022-45909 · mitre
drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request.
CVE-2022-37721 · mitre
PyroCMS 3.9 is vulnerable to a stored Cross Site Scripting (XSS_ when a low privileged user such as an author, injects a crafted html and…
CVE-2022-43705 · mitre
In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error.
Fluid Attacks
CVE-2022-41705 · Fluid Attacks
Badaso version 2.6.3 allows an unauthenticated remote attacker to execute arbitrary code remotely on the server.
CVE-2022-45476 · Fluid Attacks
Tiny File Manager version 2.4.8 executes the code of files uploaded by users of the application, instead of just returning them for downl…
discourse
CVE-2022-46162 · discourse discourse-bbcode
Discourse BBCode plugin vulnerable to arbitrary CSS injection
Unknown
CVE-2022-3603 · Unknown Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list
Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection
SourceCodester
CVE-2022-4229 · SourceCodester Book Store Management System
SourceCodester Book Store Management System index.php access control
CVE-2022-4222 · SourceCodester Canteen Management System
SourceCodester Canteen Management System POST Request ajax_invoice.php query sql injection
CVE-2022-4232 · SourceCodester Event Registration System
SourceCodester Event Registration System unrestricted upload
unspecified
CVE-2022-4247 · unspecified Movie Ticket Booking System
Movie Ticket Booking System booking.php sql injection
CVE-2022-4248 · unspecified Movie Ticket Booking System
Movie Ticket Booking System editBooking.php sql injection
Hewlett Packard Enterprise (HPE)
CVE-2022-37932 · Hewlett Packard Enterprise (HPE) Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches
A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches.
crewjam
eyoom Co.,Ltd
CVE-2022-41158 · eyoom Co.,Ltd eyoom builder
eyoom builder Remote Code Execution Vulnerability
Festo SE
CVE-2022-3270 · Festo SE Bus module CPX-E-EP
Incomplete Documentation of remote functions in FESTO products.
fedora
symantec
Webcash Co.,Ltd
CVE-2022-41157 · Webcash Co.,Ltd sERP Server 2.0