by Kastro CVE-2022-40471 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 607 of 786
mitre
CVE-2020-21016 · mitre
D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary code as root via HNAP1/control/SetGuestWLanSettin…
CVE-2021-40241 · mitre
xfig 3.2.7 is vulnerable to Buffer Overflow.
CVE-2022-43168 · mitre
Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reports_id parameter.
CVE-2022-43286 · mitre
Nginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory copy in the function njs_json_parse_iterato…
CVE-2022-37621 · mitre
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variab…
CVE-2022-37623 · mitre
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variab…
CVE-2021-42777 · mitre
Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrary C# code on any…
Unknown
CVE-2022-3254 · Unknown WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds
AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi
chatwoot
SourceCodester
CVE-2022-3774 · SourceCodester Train Scheduler App
SourceCodester Train Scheduler App resource injection
Delta Electronics
CVE-2022-38142 · Delta Electronics InfraSuite Device Master
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gatewa…
CVE-2022-41657 · Delta Electronics InfraSuite Device Master
Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be…
CVE-2022-41772 · Delta Electronics InfraSuite Device Master
Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traver…
CVE-2022-40202 · Delta Electronics InfraSuite Device Master
The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication.
CVE-2022-41779 · Delta Electronics InfraSuite Device Master
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification.
CVE-2022-41688 · Delta Electronics InfraSuite Device Master
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lack proper authentication for functions that create and modify u…
CVE-2022-41629 · Delta Electronics InfraSuite Device Master
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated users to access the aprunning endpoint, whi…
vmware
blackberry
hpe
CVE-2022-37913 · hpe
Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote…
CVE-2022-37914 · hpe
Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote…
CVE-2022-37915 · hpe
A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote…
Honeywell
SOFTNEXT TECHNOLOGIES CORP.
CVE-2022-40741 · SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert
SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert - Command Injection
Zoom Video Communications Inc
CVE-2022-28763 · Zoom Video Communications Inc Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows)
Improper URL parsing in Zoom Clients
Forma
GitLab
Haas
CVE-2022-2474 · Haas Haas CNC Controller
Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands” service, which al…
CVE-2022-2475 · Haas Haas CNC Controller
Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service.
CVE-2022-41636 · Haas Haas CNC Controller
Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted in cleartext.
HEIDENHAIN
CVE-2022-41648 · HEIDENHAIN HEIDENHAIN Controller TNC 640 NC Software
The HEIDENHAIN Controller TNC 640 NC software Version 340590 07 SP5, is vulnerable to improper authentication in its DNC communication fo…
unspecified
easyii
seccome
CVE-2022-3729 · seccome Ehoney
seccome Ehoney attack sql injection
CVE-2022-3730 · seccome Ehoney
seccome Ehoney falco sql injection
CVE-2022-3731 · seccome Ehoney
seccome Ehoney token sql injection
CVE-2022-3732 · seccome Ehoney
seccome Ehoney set sql injection
CVE-2022-3735 · seccome Ehoney
seccome Ehoney signup access control
PHP Point of Sale LLC
CVE-2022-40288 · PHP Point of Sale LLC PHP Point of Sale