by Kastro CVE-2022-4093 · dolibarr dolibarr/dolibarr
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 602 of 786
dolibarr
Unknown
CVE-2022-3634 · Unknown Contact Form 7 Database Addon
Contact Form 7 Database Addon < 1.2.6.5 - CSV Injection
CVE-2022-3600 · Unknown Easy Digital Downloads
Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection
CVE-2021-24649 · Unknown WP User Frontend
WP User Frontend < 3.5.29 - Obscure Registration as Admin
mitre
CVE-2022-36179 · mitre
Fusiondirectory 1.3 suffers from Improper Session Handling.
CVE-2022-36180 · mitre
Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via /fusiondirectory/index.php?message=[injection], /fusiondirectory/inde…
CVE-2022-43143 · mitre
A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts or HTML via a cra…
CVE-2022-44785 · mitre
An issue was discovered in Appalti & Contratti 9.12.2.
CVE-2022-40842 · mitre
ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.
CVE-2022-36227 · mitre
In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if…
CVE-2022-41326 · mitre
The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due…
CVE-2022-44183 · mitre
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic.
CVE-2022-44186 · mitre
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_pri.
CVE-2022-44187 · mitre
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via wan_dns1_pri.
CVE-2022-43212 · mitre
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at fetchOrderData.php.
CVE-2022-43214 · mitre
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php.
CVE-2022-43215 · mitre
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php.
CVE-2022-44184 · mitre
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_sec.
CVE-2022-44171 · mitre
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set.
CVE-2022-44172 · mitre
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.
CVE-2022-44174 · mitre
Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName.
CVE-2022-44175 · mitre
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg.
CVE-2022-44176 · mitre
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic.
CVE-2022-44177 · mitre
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart.
CVE-2022-44178 · mitre
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow.
CVE-2022-44180 · mitre
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter.
CVE-2022-30257 · mitre
An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution.
CVE-2022-30258 · mitre
An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution.
CVE-2022-42989 · mitre
ERP Sankhya before v4.11b81 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Caixa de Entrada.
4ra1n
librenms
CVE-2022-4070 · librenms librenms/librenms
Insufficient Session Expiration in librenms/librenms
CVE-2022-3525 · librenms librenms/librenms
Deserialization of Untrusted Data in librenms/librenms
HP Inc.
CVE-2021-3437 · HP Inc. OMEN Gaming Hub SDK
Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or…
CVE-2021-3821 · HP Inc. HP FutureSmart
A potential security vulnerability has been identified for certain HP multifunction printers (MFPs).
CVE-2021-3919 · HP Inc. OMEN Gaming Hub and HP Command Center
A potential security vulnerability has been identified in OMEN Gaming Hub and in HP Command Center which may allow escalation of privileg…
Apache Software Foundation
CVE-2022-40189 · Apache Software Foundation Apache Airlfow Pig Provider
Apache Airlfow Pig Provider RCE
CVE-2022-38649 · Apache Software Foundation Apache Airflow Pinot Provider
Apache Airflow Pinot provider allowed Command Injection
Collne Inc.
CVE-2022-41840 · Collne Inc. Welcart e-Commerce (WordPress plugin)
WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability
API2Cart
CVE-2022-42497 · API2Cart Api2Cart Bridge Connector (WordPress plugin)
WordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary Code Execution vulnerability
CVE-2022-42698 · API2Cart Api2Cart Bridge Connector (WordPress plugin)
WordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary File Upload vulnerability
sourcegraph
CVE-2022-41943 · sourcegraph sourcegraph
Incorrect default permissions found in Sourcegraph
Zyxel
ExpressTech
CVE-2022-41652 · ExpressTech Quiz And Survey Master (WordPress plugin)
WordPress Quiz And Survey Master plugin <= 7.3.10 - Bypass vulnerability
Pascal
CVE-2022-41155 · Pascal iQ Block Country (WordPress)
WordPress iQ Block Country plugin <= 1.2.18 - Block BYPASS vulnerability
zte
Maciej Bis
CVE-2022-41781 · Maciej Bis Permalink Manager Lite
WordPress Permalink Manager Lite plugin <= 2.2.20 - Broken Access Control vulnerability
WhatArmy
CVE-2022-44584 · WhatArmy WatchTowerHQ (WordPress plugin)