by Kastro CVE-2022-2884 · GitLab GitLab
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 611 of 786
GitLab
mitre
CVE-2022-42149 · mitre
kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.
CVE-2022-42064 · mitre
Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploads a shell.
CVE-2022-41495 · mitre
ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the rss_url_news parameter at /manager/index.php.
CVE-2022-41496 · mitre
iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at admincp.php.
CVE-2022-41497 · mitre
ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the pkg_url parameter at /manager/index.php.
CVE-2022-42154 · mitre
An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary…
CVE-2022-42163 · mitre
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting.
CVE-2022-42164 · mitre
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState.
CVE-2022-42165 · mitre
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName.
CVE-2022-37602 · mitre
Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js.
CVE-2022-42897 · mitre
Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and c…
CVE-2022-42968 · mitre
Gitea before 1.17.3 does not sanitize and escape refs in the git backend.
CVE-2022-42711 · mitre
In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input.
CVE-2022-41390 · mitre
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php.
CVE-2022-41391 · mitre
OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php.
CVE-2022-41477 · mitre
A security issue was discovered in WeBid <=1.2.2.
CVE-2022-40055 · mitre
An issue in GX Group GPON ONT Titanium 2122A T2122-V1.26EXL allows attackers to escalate privileges via a brute force attack at the login…
CVE-2022-41436 · mitre
An issue in OXHOO TP50 OXH1.50 allows unauthenticated attackers to access the administrative panel via browsing to the URL http://device_…
ikus060
CVE-2022-3439 · ikus060 ikus060/rdiffweb
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
CVE-2022-3456 · ikus060 ikus060/rdiffweb
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
CVE-2022-3457 · ikus060 ikus060/rdiffweb
Origin Validation Error in ikus060/rdiffweb
SourceCodester
CVE-2022-3504 · SourceCodester Sanitization Management System
SourceCodester Sanitization Management System sql injection
Adobe
CVE-2022-35690 · Adobe ColdFusion
Adobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2022-35698 · Adobe Magento Commerce
Adobe Commerce Stored XSS Arbitrary code execution
CVE-2022-35710 · Adobe ColdFusion
Adobe ColdFusion ODBC Server Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2022-35711 · Adobe ColdFusion
Adobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2022-35712 · Adobe ColdFusion
Adobe ColdFusion ODBC Agent Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2022-38418 · Adobe ColdFusion
Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability
Apache Software Foundation
CVE-2022-24697 · Apache Software Foundation Apache Kylin
Apache Kylin prior to 4.0.2 allows command injection when the configuration overwrites function overwrites system parameters
CVE-2022-42889 · Apache Software Foundation Apache Commons Text
Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults
fedora
Salesforce
WISA corp.
CVE-2022-23770 · WISA corp. Smart Wing CMS
WISA Smart Wing CMS Remote Command Execution Vulnerability
gocd
Secuever Co.,Ltd
CVE-2022-23769 · Secuever Co.,Ltd reverseWall-MDS
Secuever reverseWall-MDS Remote Code Execution Vulnerability
azure-rtos
Dell
Huawei
CVE-2022-38983 · Huawei HarmonyOS
The BT Hfp Client module has a Use-After-Free (UAF) vulnerability.Successful exploitation of this vulnerability may result in arbitrary c…
CVE-2022-38980 · Huawei HarmonyOS
The HwAirlink module has a heap overflow vulnerability in processing data packets of the proprietary protocol.Successful exploitation of…
CVE-2022-38982 · Huawei HarmonyOS
The fingerprint module has service logic errors.Successful exploitation of this vulnerability will cause the phone lock to be cracked.
CVE-2022-41578 · Huawei HarmonyOS
The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalati…
CVE-2022-41580 · Huawei HarmonyOS
The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause malici…
CVE-2022-38986 · Huawei HarmonyOS
The HIPP module has a vulnerability of bypassing the check of the data transferred in the kernel space.Successful exploitation of this vu…
CVE-2021-46839 · Huawei HarmonyOS
The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause mal…
CVE-2021-46840 · Huawei HarmonyOS
The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerabi…
CVE-2022-41581 · Huawei HarmonyOS