by Kastro CVE-2022-30603 · abode systems, inc. iota All-In-One Security Kit
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 609 of 786
abode systems, inc.
CVE-2022-27804 · abode systems, inc. iota All-In-One Security Kit
An os command injection vulnerability exists in the web interface util_set_abode_code functionality of Abode Systems, Inc.
CVE-2022-29472 · abode systems, inc. iota All-In-One Security Kit
An OS command injection vulnerability exists in the web interface util_set_serial_mac functionality of Abode Systems, Inc.
CVE-2022-30541 · abode systems, inc. iota All-In-One Security Kit
An OS command injection vulnerability exists in the XCMD setUPnP functionality of Abode Systems, Inc.
CVE-2022-32773 · abode systems, inc. iota All-In-One Security Kit
An OS command injection vulnerability exists in the XCMD doDebug functionality of Abode Systems, Inc.
CVE-2022-29520 · abode systems, inc. iota All-In-One Security Kit
An OS command injection vulnerability exists in the console_main_loop :sys functionality of Abode Systems, Inc.
CVE-2022-32454 · abode systems, inc. iota All-In-One Security Kit
A stack-based buffer overflow vulnerability exists in the XCMD setIPCam functionality of Abode Systems, Inc.
CVE-2022-29477 · abode systems, inc. iota All-In-One Security Kit
An authentication bypass vulnerability exists in the web interface /action/factory* functionality of Abode Systems, Inc.
CVE-2022-29889 · abode systems, inc. iota All-In-One Security Kit
A hard-coded password vulnerability exists in the telnet functionality of Abode Systems, Inc.
CVE-2022-32775 · abode systems, inc. iota All-In-One Security Kit
An integer overflow vulnerability exists in the web interface /action/ipcamRecordPost functionality of Abode Systems, Inc.
CVE-2022-27805 · abode systems, inc. iota All-In-One Security Kit
An authentication bypass vulnerability exists in the GHOME control functionality of Abode Systems, Inc.
Azure
Robustel
CVE-2022-33150 · Robustel R1510
An OS command injection vulnerability exists in the js_package install functionality of Robustel R1510 3.1.16.
CVE-2022-32765 · Robustel R1510
An OS command injection vulnerability exists in the sysupgrade command injection functionality of Robustel R1510 3.1.16 and 3.3.0.
Siemens
CVE-2022-37454 · Siemens RUGGEDCOM APE1808
The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers…
CVE-2021-46848 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
CVE-2022-43400 · Siemens Siveillance Video Mobile Server V2022 R2
A vulnerability has been identified in Siveillance Video Mobile Server V2022 R2 (All versions < V22.2a (80)).
dataease
Fluid Attacks
mitre
CVE-2022-37598 · mitre
Prototype pollution vulnerability in function DEFNODE in ast.js in mishoo UglifyJS 3.13.2 via the name variable in ast.js.
CVE-2022-42021 · mitre
Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult/notice-details.php?nid=.
CVE-2022-38580 · mitre
Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).
CVE-2022-42233 · mitre
Tenda 11N with firmware version V5.07.33_cn suffers from an Authentication Bypass vulnerability.
CVE-2022-29851 · mitre
documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because fi…
CVE-2022-36452 · mitre
A vulnerability in the web conferencing component of Mitel MiCollab through 9.5.0.101 could allow an unauthenticated attacker to upload m…
flipped-aurora
CVE-2022-39345 · flipped-aurora gin-vue-admin
Gin-vue-admin arbitrary file upload vulnerability caused by path traversal
CVE-2022-39305 · flipped-aurora gin-vue-admin
Gin-vue-admin vulnerable to Unrestricted Upload of File with Dangerous Type
Unknown
CVE-2022-3393 · Unknown Post to CSV by BestWebSoft
Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection
keystonejs
ORing
Lanner Inc
CVE-2021-26727 · Lanner Inc IAC-AST2500A
spx_restservice SubNet_handler_func Multiple Command Injections and Stack-Based Buffer Overflows
CVE-2021-26728 · Lanner Inc IAC-AST2500A
spx_restservice KillDupUsr_func Command Injection and Stack-Based Buffer Overflow
CVE-2021-26729 · Lanner Inc IAC-AST2500A
spx_restservice Login_handler_func Command Injection and Multiple Stack-Based Buffer Overflows
CVE-2021-26731 · Lanner Inc IAC-AST2500A
spx_restservice modifyUserb_func Command Injection and Multiple Stack-Based Buffer Overflows
CVE-2021-26730 · Lanner Inc IAC-AST2500A
spx_restservice Login_handler_func Subfunction Stack-Based Buffer Overflow
actions
Feather js
CVE-2022-29823 · Feather js Feathers-Sequalize
Feathers - Query “__proto__” is converted to real prototype
CVE-2022-2422 · Feather js Feathers-Sequalize
Feathers - SQL injection via attribute aliases
CVE-2022-29822 · Feather js Feathers-Sequalize
Feathers - Improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection
Synology
CVE-2022-27624 · Synology DiskStation Manager (DSM)
A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the packet decryption funct…
CVE-2022-27625 · Synology DiskStation Manager (DSM)
A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the message processing func…
CVE-2022-27626 · Synology DiskStation Manager (DSM)
A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') is found in the ses…
CVE-2022-27623 · Synology DiskStation Manager (DSM)
Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before…
Apache Software Foundation
CVE-2021-42010 · Apache Software Foundation Apache Heron (Incubating)
CRLF log injection
Socket.io
CVE-2022-2421 · Socket.io Socket.io-Parser
Socket.io - Improper type validation in attachment parsing
STMicroelectronics STM32Cube
CVE-2021-42553 · STMicroelectronics STM32Cube STM32 USB Host Library
STM32 USB Host Library Buffer Overflow
openfga
CVE-2022-39341 · openfga openfga
OpenFGA Authorization Bypass
CVE-2022-39342 · openfga openfga
OpenFGA Authorization Bypass
Yokogawa Test & Measurement Corporation
CVE-2022-40984 · Yokogawa Test & Measurement Corporation WTViewerE series