by Kastro CVE-2022-41352 · Synacor Zimbra Collaboration Suite (ZCS)
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 614 of 786
Synacor
mitre
CVE-2022-40942 · mitre
Tenda TX3 US_TX3V1.0br_V16.03.13.11 is vulnerable to stack overflow via compare_parentcontrol_time.
CVE-2022-40083 · mitre
Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component.
CVE-2022-40475 · mitre
TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi.
CVE-2022-40929 · mitre
XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks.
CVE-2022-35156 · mitre
Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/downloa…
CVE-2022-40877 · mitre
Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter.
CVE-2022-40943 · mitre
Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via bwdate-report-ds.php file.
CVE-2022-40944 · mitre
Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via sales-report-ds.php file.
CVE-2021-41433 · mitre
SQL Injection vulnerability exists in version 1.0 of the Resumes Management and Job Application Website application login form by EGavila…
CVE-2022-40483 · mitre
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_details.php.
CVE-2022-40484 · mitre
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_edit.php.
CVE-2022-40485 · mitre
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_detail.php.
CVE-2022-40887 · mitre
SourceCodester Best Student Result Management System 1.0 is vulnerable to SQL Injection.
CVE-2022-40050 · mitre
ZFile v4.1.1 was discovered to contain an arbitrary file upload vulnerability via the component /file/upload/1.
CVE-2022-40122 · mitre
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/edit_custome…
CVE-2022-33880 · mitre
hms-staff.php in Projectworlds Hospital Management System Mini-Project through 2018-06-17 allows SQL injection via the type parameter.
CVE-2022-30004 · mitre
Sourcecodester Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing remote attackers…
CVE-2022-41571 · mitre
An issue was discovered in EyesOfNetwork (EON) through 5.3.11.
CVE-2022-30935 · mitre
An authorization bypass in b2evolution allows remote, unauthenticated attackers to predict password reset tokens for any user through the…
CVE-2022-42002 · mitre
SonicJS through 0.6.0 allows file overwrite.
CVE-2022-41570 · mitre
An issue was discovered in EyesOfNetwork (EON) through 5.3.11.
CVE-2022-42307 · mitre
An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products.
CVE-2022-42308 · mitre
An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products.
Nepxion
brettwooldridge
Anker
SourceCodester
CVE-2022-3332 · SourceCodester Food Ordering Management System
SourceCodester Food Ordering Management System POST Parameter router.php sql injection
fedora
hp
Smart eVision Information Technology Inc.
CVE-2022-39033 · Smart eVision Information Technology Inc. Smart eVision
Smart eVision - Path Traversal -1
Carlo Gavazzi
CVE-2022-28814 · Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller
Path traversal in Carlo Gavazzi UWP 3.0 could lead to full device access
CVE-2022-22522 · Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller
Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device
CVE-2022-28811 · Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller
Possible command injection in Car Park Server in Carlo Gavazzi UWP3.0
CVE-2022-22524 · Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller
SQL-injection in Carlo Gavazzi UWP 3.0 allows for full database access
CVE-2022-28812 · Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller
Use of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server.
CVE-2022-22526 · Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller
Missing authentication for API in Carlo Gavazzi UWP 3.0 Car Park Server
discourse
EC-CUBE CO.,LTD.
CVE-2022-37346 · EC-CUBE CO.,LTD. Product Image Bulk Upload Plugin
EC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient verification vulnerability when uploading files.
Orckestra
CVE-2022-39256 · Orckestra C1-CMS-Foundation