The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

39,272 matching vulnerabilities · Page 610 of 786

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2016-20017 · D-Link DSL-2750B Devices

D-Link DSL-2750B Devices Command Injection Vulnerability

KEV · due 29 Jan EPSS 66%public exploit SSVC act CVSS 9.8

Fortinet1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2022-40684 · Fortinet Fortinet FortiOS, FortiProxy, FortiSwitchManager

Fortinet Multiple Products Authentication Bypass Vulnerability

KEV · due 1 Nov ransomware use EPSS 100%public exploit SSVC act CVSS 9.8

Oracle Corporation2 vulnerabilities on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2022-21587 · Oracle Corporation Web Applications Desktop Integrator

Oracle E-Business Suite Unspecified Vulnerability

KEV · due 23 Feb ransomware use EPSS 98%public exploit SSVC act CVSS 9.8

CVE-2022-39428 · Oracle Corporation Web Applications Desktop Integrator

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).

EPSS 38%CVSS 9.8

mitre21 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2022-41544 · mitre

GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-…

EPSS 14%public exploit CVSS 9.8

CVE-2022-40889 · mitre

Phpok 6.1 has a deserialization vulnerability via framework/phpok_call.php.

EPSS 1%public exploit CVSS 9.8

CVE-2022-41415 · mitre

Acer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the RevserveMem component.

EPSS 1%public exploit CVSS 9.8

CVE-2022-42166 · mitre

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan.

EPSS 1%public exploit CVSS 9.8

CVE-2022-42167 · mitre

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg.

EPSS 1%public exploit CVSS 9.8

CVE-2022-42168 · mitre

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind.

EPSS 1%public exploit CVSS 9.8

CVE-2022-42169 · mitre

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter.

EPSS 1%public exploit CVSS 9.8

CVE-2022-42170 · mitre

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart.

EPSS 1%public exploit CVSS 9.8

CVE-2022-42171 · mitre

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo.

EPSS 1%public exploit CVSS 9.8

CVE-2022-42237 · mitre

A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account.

EPSS 1%public exploit CVSS 9.8

CVE-2022-42980 · mitre

go-admin (aka GO Admin) 2.0.12 uses the string go-admin as a production JWT key.

EPSS 0.9%public exploit CVSS 9.8

CVE-2022-43260 · mitre

Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function.

EPSS 1%public exploit CVSS 9.8

CVE-2022-37298 · mitre

Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control.

EPSS 3%CVSS 9.8

CVE-2022-43019 · mitre

OpenCATS v0.9.6 was discovered to contain a remote code execution (RCE) vulnerability via the getDataGridPager's ajax functionality.

EPSS 3%CVSS 9.8

CVE-2022-43184 · mitre

D-Link DIR878 1.30B08 Hotfix_04 was discovered to contain a command injection vulnerability via the component /bin/proc.cgi.

EPSS 2%CVSS 9.8

CVE-2022-43024 · mitre

Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualSe…

EPSS 0.9%CVSS 9.8

CVE-2022-43025 · mitre

Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the startIp parameter at /goform/SetPptpSe…

EPSS 0.9%CVSS 9.8

CVE-2022-43026 · mitre

Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the endIp parameter at /goform/SetPptpServ…

EPSS 0.9%CVSS 9.8

CVE-2022-43027 · mitre

Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the firewallEn parameter at /goform/SetFir…

EPSS 0.9%CVSS 9.8

CVE-2022-43028 · mitre

Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter at /goform/SetSysTi…

EPSS 0.9%CVSS 9.8

CVE-2022-43029 · mitre

Tenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via the time parameter at /goform/SetSysTimeCfg.

EPSS 0.9%CVSS 9.8

ikus0601 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2022-3327 · ikus060 ikus060/rdiffweb

Missing Authentication for Critical Function in ikus060/rdiffweb

EPSS 1%public exploit CVSS 9.8

gin-vue-admin1 vulnerability on this pageMax CVSS 9.0Priority 51KEV 0

CVE-2022-32176 · gin-vue-admin gin-vue-admin

Gin-vue-admin - Unrestricted File Upload

EPSS 1%public exploit CVSS 9.0

SourceCodester2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2022-3579 · SourceCodester Cashier Queuing System

SourceCodester Cashier Queuing System Login Page login.php sql injection

EPSS 0.8%public exploit CVSS 9.8

CVE-2022-3583 · SourceCodester Canteen Management System

SourceCodester Canteen Management System login.php sql injection

EPSS 0.9%public exploit CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2022-39198 · Apache Software Foundation Apache Dubbo

Apache Dubbo Hession Deserialization Vulnerability Gadgets Bypass

EPSS 3%CVSS 9.8

Jenkins project6 vulnerabilities on this pageMax CVSS 9.9Priority 46KEV 0

CVE-2022-43403 · Jenkins project Jenkins Script Security Plugin

A sandbox bypass vulnerability involving casting an array-like value to an array type in Jenkins Script Security Plugin 1183.v774b_0b_0a_…

EPSS 2%CVSS 9.9

CVE-2022-43401 · Jenkins project Jenkins Script Security Plugin

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Script Security Plu…

EPSS 2%CVSS 9.9

CVE-2022-43402 · Jenkins project Jenkins Pipeline: Groovy Plugin

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Pl…

EPSS 1%CVSS 9.9

CVE-2022-43405 · Jenkins project Jenkins Pipeline: Groovy Libraries Plugin

A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with permissi…

EPSS 1%CVSS 9.9

CVE-2022-43404 · Jenkins project Jenkins Script Security Plugin

A sandbox bypass vulnerability involving crafted constructor bodies and calls to sandbox-generated synthetic constructors in Jenkins Scri…

EPSS 1%CVSS 9.9

CVE-2022-43406 · Jenkins project Jenkins Pipeline: Deprecated Groovy Libraries Plugin

A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e43966 and earlier allows attackers wi…

EPSS 1%CVSS 9.9

Juniper Networks1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2022-22241 · Juniper Networks Junos OS

Junos OS: Vulnerability in J-Web may allow deserialization without authentication

EPSS 1%CVSS 9.8

Changing Information Technology Inc.1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2022-39056 · Changing Information Technology Inc. RAVA certificate validation system

Changing Information Technology Inc. RAVA certificate validation system - SQL Injection

EPSS 1.0%CVSS 9.8

unspecified1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2022-3620 · unspecified Exim

Exim DMARC dmarc.c dmarc_dns_lookup use after free

EPSS 1%CVSS 9.8

ZGR3 vulnerabilities on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2020-8974 · ZGR ZGR TPS200 NG

ZGR TPS200 NG Missing Reference to Active Allocated Resource

EPSS 0.8%CVSS 10.0

CVE-2020-8976 · ZGR ZGR TPS200 NG

ZGR TPS200 Cross-Site Request Forgery (CSRF)

EPSS 0.6%CVSS 9.6

CVE-2020-8973 · ZGR ZGR TPS200 NG

ZGR TPS200 NG Improper access control

EPSS 0.5%CVSS 9.3

TRUMPF Werkzeugmaschinen SE + Co. KG1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2022-2052 · TRUMPF Werkzeugmaschinen SE + Co. KG TruTops Monitor

TRUMPF TruTops default user accounts vulnerability

EPSS 0.8%CVSS 9.8

wireapp1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2022-31122 · wireapp wire-server

Wire-server vulnerable to Token Recipient Confusion resulting in account impersonation, deletion or malicious account creation

EPSS 0.7%CVSS 9.8

Qualcomm, Inc.5 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2022-25748 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames.

EPSS 0.5%CVSS 9.8

CVE-2022-25718 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectiv…

EPSS 0.5%CVSS 9.8

CVE-2022-25720 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn…

EPSS 0.5%CVSS 9.8

CVE-2022-25719 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Conn…

EPSS 0.6%CVSS 9.1

CVE-2022-25687 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…

EPSS 0.4%CVSS 9.8

Fuji Electric1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2022-1523 · Fuji Electric D300win

Fuji Electric D300win Write-what-where condition

EPSS 0.6%CVSS 9.1