by Kastro CVE-2022-32174 · gogs gogs
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 612 of 786
gogs
mitre
CVE-2022-37601 · mitre
Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js.
CVE-2022-41387 · mitre
The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-41403 · mitre
OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via the email parameter at index.php?route=e…
CVE-2022-33106 · mitre
WiJungle NGFW Version U250 was discovered to be vulnerable to No Rate Limit attack, allowing the attacker to brute force the admin passwo…
CVE-2022-40871 · mitre
Dolibarr ERP & CRM <=15.0.3 is vulnerable to Eval injection.
CVE-2022-42040 · mitre
The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-37616 · mitre
A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.…
CVE-2022-37609 · mitre
Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js.
CVE-2022-37614 · mitre
Prototype pollution vulnerability in function enable in mockery.js in mfncooper mockery commit 822f0566fd6d72af8c943ae5ca2aa92e516aa2cf v…
CVE-2022-37617 · mitre
Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in r…
CVE-2022-41380 · mitre
The d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-41381 · mitre
The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-41382 · mitre
The d8s-json package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-41383 · mitre
The d8s-archives package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-41384 · mitre
The d8s-domains package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-41385 · mitre
The d8s-html package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-41386 · mitre
The d8s-utility package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-42036 · mitre
The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-42037 · mitre
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-42038 · mitre
The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-42039 · mitre
The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-42041 · mitre
The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-42042 · mitre
The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-42043 · mitre
The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-42044 · mitre
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-37611 · mitre
Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js.
CVE-2022-41408 · mitre
Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.
azure-rtos
Mediabridge
Microsoft
CVE-2022-37968 · Microsoft Azure Arc-enabled Kubernetes cluster 1.8.11
Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability
Apache Software Foundation
CVE-2022-40664 · Apache Software Foundation Apache Shiro
Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher
Fortinet
CVE-2022-33872 · Fortinet Fortinet FortiTester
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in Telnet login co…
CVE-2022-33873 · Fortinet Fortinet FortiTester
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in Console login c…
CVE-2022-33874 · Fortinet Fortinet FortiTester
An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in SSH login compo…
CVE-2022-35846 · Fortinet Fortinet FortiTester
An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.…
Siemens
CVE-2022-41665 · Siemens SICAM P850
A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versi…
CVE-2022-36361 · Siemens LOGO! 12/24RCE
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All vers…
CVE-2022-38465 · Siemens SIMATIC Drive Controller family
A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515…
CVE-2022-32234 · Facebook Hermes
An out of bounds write in hermes, while handling large arrays, prior to commit 06eaec767e376bfdb883d912cb15e987ddf2bda1 allows attackers…
CVE-2022-35289 · Facebook Hermes
A write-what-where condition in hermes caused by an integer overflow, prior to commit 5b6255ae049fa4641791e47fad994e8e8c4da374 allows att…
CVE-2022-40138 · Facebook Hermes
An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used…
melisplatform
CVE-2022-39297 · melisplatform melis-cms
Deserialization of untrusted data in MelisCms
CVE-2022-39298 · melisplatform melis-front
Deserialization of untrusted data in MelisFront
SAP SE
Xiaomi
Trend Micro
SourceCodester
CVE-2022-3458 · SourceCodester Human Resource Management System