by Kastro CVE-2022-39344 · azure-rtos usbx
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 606 of 786
azure-rtos
keystonejs
silabs.com
CVE-2022-24942 · silabs.com Gecko Platform
Heap-based buffer overflow in MicriumOS HTTP Server allows potential remote code execution
CVE-2022-24936 · silabs.com Gecko Bootloader
Gecko Standalone Bootloader vulnerability may allow bypassing application secure boot in some Series 2 devices
Fluid Attacks
xmldom
mitre
CVE-2020-22818 · mitre
MKCMS V6.2 has SQL injection via /ucenter/reg.php name parameter.
CVE-2020-22819 · mitre
MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter.
CVE-2020-22820 · mitre
MKCMS V6.2 has SQL injection via the /ucenter/repass.php name parameter.
CVE-2022-43109 · mitre
D-Link DIR-823G v1.0.2 was found to contain a command injection vulnerability in the function SetNetworkTomographySettings.
CVE-2022-44542 · mitre
lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object destructor execution…
CVE-2022-42905 · mitre
In wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS 1.3 client or network a…
CVE-2022-43101 · mitre
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.
CVE-2022-43102 · mitre
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function.
CVE-2022-43103 · mitre
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the list parameter in the formSetQosBand function.
CVE-2022-43104 · mitre
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function.
CVE-2022-43105 · mitre
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function.
CVE-2022-43106 · mitre
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the schedStartTime parameter in the setSchedWifi function.
CVE-2022-43107 · mitre
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function.
CVE-2022-43108 · mitre
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.
CVE-2022-44544 · mitre
Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0 potentially allow a PDF export to trigg…
CVE-2022-38168 · mitre
Broken Access Control in User Authentication in Avaya Scopia Pathfinder 10 and 20 PTS version 8.3.7.0.4 allows remote unauthenticated att…
Tim Campus
CVE-2022-3789 · Tim Campus Confession Wall
Tim Campus Confession Wall share.php sql injection
pingcap
fluent
Apple
vmware
Hewlett Packard Enterprise
CVE-2022-37897 · Hewlett Packard Enterprise Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted packets…
ibm
SICK AG
CVE-2022-27582 · SICK AG
Password recovery vulnerability in SICK SIM4000 (PPC) Partnumber 1078787 allows an unprivileged remote attacker to gain access to the use…
CVE-2022-27584 · SICK AG
Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlev…
CVE-2022-27585 · SICK AG
Password recovery vulnerability in SICK SIM1000 FX Partnumber 1097816 and 1097817 with firmware version <1.6.0 allows an unprivileged rem…
CVE-2022-27586 · SICK AG
Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version <2.0.0 allows an unprivileged remote attacker to…
Octopus Deploy
unspecified
CVE-2022-3827 · unspecified centreon
centreon Contact Groups Form formContactGroup.php sql injection
Fortinet
Frauscher Sensortechnik
CVE-2022-3575 · Frauscher Sensortechnik Diagnostic System FDS102
Frauscher Sensortechnik Diagnostic System FDS102 for FAdC R2 and FAdCi R2 configuration upload vulnerability
HCL Software
Hitachi
CVE-2022-41552 · Hitachi Hitachi Infrastructure Analytics Advisor
Server-Side Request Forgery Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer
PHP Point of Sale LLC
CVE-2022-40293 · PHP Point of Sale LLC PHP Point of Sale
Session fixation in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.
CVE-2022-40296 · PHP Point of Sale LLC PHP Point of Sale
Server-side request forgery (SSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.
CVE-2022-40287 · PHP Point of Sale LLC PHP Point of Sale
Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via user profile data fields.
CVE-2022-40289 · PHP Point of Sale LLC PHP Point of Sale
Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via file upload and download functionality.
SAUTER Controls
xwiki-contrib
SourceCodester
CVE-2022-3868 · SourceCodester Sanitization Management System