by Kastro CVE-2022-44808 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 601 of 786
mitre
CVE-2022-45276 · mitre
An issue in the /index/user/user_edit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account…
CVE-2020-23584 · mitre
Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands…
CVE-2020-23583 · mitre
OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution.
CVE-2022-44255 · mitre
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a pre-authentication buffer overflow in the main function via long post data.
CVE-2022-44118 · mitre
dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.
CVE-2022-44249 · mitre
TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the UploadFirmwareFile function.
CVE-2022-44250 · mitre
TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function.
CVE-2022-44251 · mitre
TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the ussd parameter in the setUssd function.
CVE-2022-44252 · mitre
TOTOLINK NR1800X V9.1.0u.6279_B20210910 contains a command injection via the FileName parameter in the setUploadSetting function.
CVE-2022-44194 · mitre
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameters apmode_dns1_pri and apmode_dns1_sec.
CVE-2022-44201 · mitre
D-Link DIR823G 1.02B05 is vulnerable to Commad Injection.
CVE-2022-44202 · mitre
D-Link DIR878 1.02B04 and 1.02B05 are vulnerable to Buffer Overflow.
CVE-2022-44804 · mitre
D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function.
CVE-2022-44806 · mitre
D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow.
CVE-2022-44807 · mitre
D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow via webGetVarString.
CVE-2020-23591 · mitre
A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker to upload arbitrar…
CVE-2022-44187 · mitre
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri.
CVE-2022-44188 · mitre
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter enable_band_steering.
CVE-2022-44190 · mitre
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter enable_band_steering.
CVE-2022-44191 · mitre
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameters KEY1 and KEY2.
CVE-2022-44193 · mitre
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters: starthour, startminute , endhour, and endmin…
CVE-2022-44196 · mitre
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_push1.
CVE-2022-44197 · mitre
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.
CVE-2022-44801 · mitre
D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control.
CVE-2022-44198 · mitre
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_push1.
CVE-2022-44199 · mitre
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.
CVE-2022-44200 · mitre
Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec.
CVE-2022-45872 · mitre
iTerm2 before 3.4.18 mishandles a DECRQSS response.
CVE-2022-43213 · mitre
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editorder.php.
CVE-2022-44139 · mitre
Apartment Visitor Management System v1.0 is vulnerable to SQL Injection via /avms/index.php.
CVE-2021-35284 · mitre
SQL Injection vulnerability in function get_user in login_manager.php in rizalafani cms-php v1.
CVE-2022-44117 · mitre
Boa 0.94.14rc21 is vulnerable to SQL Injection via username.
CVE-2022-44120 · mitre
dedecmdv6 6.1.9 is vulnerable to SQL Injection.
CVE-2022-37720 · mitre
Orchardproject Orchard CMS 1.10.3 is vulnerable to Cross Site Scripting (XSS).
CVE-2022-36133 · mitre
The WebConfig functionality of Epson TM-C3500 and TM-C7500 devices with firmware version WAM31500 allows authentication bypass.
CVE-2022-43196 · mitre
dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via file_manage_control.php.
tailscale
xwiki
CVE-2022-41931 · xwiki xwiki-platform
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in xwiki-platform-icon-ui
CVE-2022-41934 · xwiki xwiki-platform
Improper Neutralization of Directives in Dynamically Evaluated Code in org.xwiki.platform:xwiki-platform-menu-ui
CVE-2022-41928 · xwiki xwiki-platform
XWiki Platform vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml
wger-project
CVE-2022-2650 · wger-project wger-project/wger
Improper Restriction of Excessive Authentication Attempts in wger-project/wger
rickxy
CVE-2022-4088 · rickxy Stock Management System
rickxy Stock Management System processlogin.php sql injection
Apache Software Foundation
CVE-2022-45462 · Apache Software Foundation Apache DolphinScheduler
Apache DolphinScheduler prior to 2.0.5 have command execution vulnerability
grails
CVE-2022-41923 · grails grails-spring-security-core
Grails Spring Security Core plugin vulnerable to privilege escalation
HP Inc.
CVE-2021-3942 · HP Inc. HP Print products and Digital Sending products
Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer overflow with use…
yiisoft
Mitsubishi Electric Corporation
CVE-2022-29830 · Mitsubishi Electric Corporation GX Works3