by Kastro CVE-2022-40881 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 603 of 786
mitre
CVE-2022-44006 · mitre
An issue was discovered in BACKCLICK Professional 5.9.63.
CVE-2022-45132 · mitre
In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2…
CVE-2022-44003 · mitre
An issue was discovered in BACKCLICK Professional 5.9.63.
CVE-2022-43138 · mitre
Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API.
CVE-2022-44001 · mitre
An issue was discovered in BACKCLICK Professional 5.9.63.
CVE-2022-44004 · mitre
An issue was discovered in BACKCLICK Professional 5.9.63.
CVE-2022-43234 · mitre
An arbitrary file upload vulnerability in the /attachments component of Hoosk v1.8 allows attackers to execute arbitrary code via a craft…
CVE-2022-43265 · mitre
An arbitrary file upload vulnerability in the component /pages/save_user.php of Canteen Management System v1.0 allows attackers to execut…
CVE-2022-43999 · mitre
An issue was discovered in BACKCLICK Professional 5.9.63.
CVE-2022-44000 · mitre
An issue was discovered in BACKCLICK Professional 5.9.63.
CVE-2022-42245 · mitre
Dreamer CMS 4.0.01 is vulnerable to SQL Injection.
CVE-2022-43256 · mitre
SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php.
CVE-2022-45474 · mitre
drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request.
CVE-2022-34827 · mitre
Carel Boss Mini 1.5.0 has Improper Access Control.
CVE-2022-43135 · mitre
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagn…
CVE-2022-42058 · mitre
Tenda AC1200 Router Model W15Ev2 V15.11.0.10(1576) was discovered to contain a stack overflow via the setRemoteWebManage function.
CVE-2022-44204 · mitre
D-Link DIR3060 DIR3060A1_FW111B04.bin is vulnerable to Buffer Overflow.
CVE-2022-38165 · mitre
Arbitrary file write in F-Secure Policy Manager through 2022-08-10 allows unauthenticated users to write the file with the contents in ar…
CVE-2022-42120 · mitre
A SQL injection vulnerability in the Fragment module in Liferay Portal 7.3.3 through 7.4.3.16, and Liferay DXP 7.3 before update 4, and 7…
CVE-2022-42122 · mitre
A SQL injection vulnerability in the Friendly Url module in Liferay Portal 7.3.7, and Liferay DXP 7.3 fix pack 2 through update 4 allows…
CVE-2022-43262 · mitre
Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controll…
Apache Software Foundation
CVE-2022-45047 · Apache Software Foundation Apache MINA SSHD
Apache MINA SSHD: Java unsafe deserialization vulnerability
CVE-2022-45378 · Apache Software Foundation Apache SOAP
Apache SOAP allows unauthenticated users to potentially invoke arbitrary code
mastodon
unspecified
CVE-2022-4011 · unspecified Simple History Plugin
Simple History Plugin Header neutralization for logs
CVE-2022-4012 · unspecified Hospital Management Center
Hospital Management Center patient-info.php sql injection
CVE-2022-4051 · unspecified Hostel Searching Project
Hostel Searching Project view-property.php sql injection
CVE-2022-4015 · unspecified Sports Club Management System
Sports Club Management System make_payments.php sql injection
MonikaBrzica
tensorflow
Atlassian
CVE-2022-43781 · Atlassian Bitbucket Data Center
There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center.
CVE-2022-43782 · Atlassian Crowd Data Center
Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and subsequ…
Sophos
CVE-2022-3980 · Sophos Sophos Mobile managed on-premises
An XML External Entity (XEE) vulnerability allows server-side request forgery (SSRF) and potential code execution in Sophos Mobile manage…
IBM
gVectors Team
CVE-2022-40200 · gVectors Team wpForo Forum (WordPress plugin)
WordPress wpForo Forum plugin <= 2.0.9 - Auth. Arbitrary File Upload vulnerability
Jenkins project
CVE-2022-45395 · Jenkins project Jenkins CCCC Plugin
Jenkins CCCC Plugin 0.6 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVE-2022-45400 · Jenkins project Jenkins JAPEX Plugin
Jenkins JAPEX Plugin 1.7 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVE-2022-45396 · Jenkins project Jenkins SourceMonitor Plugin
Jenkins SourceMonitor Plugin 0.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVE-2022-45397 · Jenkins project Jenkins OSF Builder Suite : : XML Linter Plugin
Jenkins OSF Builder Suite : : XML Linter Plugin 1.0.2 and earlier does not configure its XML parser to prevent XML external entity (XXE)…
Silicon Labs
CVE-2022-24937 · Silicon Labs Ember ZNet
Malformed Zigbee packet causes Assert in EmberZNet 7.0.0 or earlier
College Management
CVE-2022-39180 · College Management College Management System v1.0
College Management System v1.0 - SQL Injection (SQLi)
Qualcomm, Inc.
CVE-2022-25727 · Qualcomm, Inc. Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-33234 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Memory corruption in video due to configuration weakness.
CVE-2022-25674 · Qualcomm, Inc. Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IO…
TIBCO Software Inc.
CVE-2022-41558 · TIBCO Software Inc. TIBCO Spotfire Analyst