by Kastro CVE-2022-3236 · Sophos Sophos Firewall
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 615 of 786
Sophos
mitre
CVE-2022-36944 · mitre
Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file.
CVE-2022-40851 · mitre
Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat.
CVE-2022-40855 · mitre
Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'.
CVE-2022-40089 · mitre
A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP f…
CVE-2022-38573 · mitre
10-Strike Network Inventory Explorer v9.3 was discovered to contain a buffer overflow via the Add Computers function.
CVE-2022-40087 · mitre
Simple College Website v1.0 was discovered to contain an arbitrary file write vulnerability via the function file_put_contents().
CVE-2022-40864 · mitre
Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request…
CVE-2022-40862 · mitre
Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /gofo…
CVE-2022-40865 · mitre
Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/open…
CVE-2022-40869 · mitre
Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parame…
CVE-2022-40115 · mitre
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/delete_benef…
CVE-2022-40116 · mitre
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/beneficiary.php.
CVE-2022-40853 · mitre
Tenda AC15 router V15.03.05.19 contains a stack overflow via the list parameter at /goform/fast_setting_wifi_set
CVE-2022-40854 · mitre
Tenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set
CVE-2022-40860 · mitre
Tenda AC15 router V15.03.05.19 contains a stack overflow vulnerability in the function formSetQosBand->FUN_0007dd20 with request /goform/…
CVE-2022-40866 · mitre
Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function for…
CVE-2022-40867 · mitre
Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function for…
CVE-2022-40868 · mitre
Tenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack overflow vulnerability in the function for…
CVE-2022-40113 · mitre
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/send_funds.php.
CVE-2022-40114 · mitre
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/edit_custome…
CVE-2022-40117 · mitre
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/delete_custo…
CVE-2022-40118 · mitre
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust_id parameter at /net-banking/send_funds_a…
CVE-2022-40119 · mitre
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search_term parameter at /net-banking/transact…
CVE-2022-40120 · mitre
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search_term parameter at /net-banking/customer…
CVE-2022-40121 · mitre
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/manage_custom…
CVE-2022-28802 · mitre
Code by Zapier before 2022-08-17 allowed intra-account privilege escalation that included execution of Python or JavaScript code.
CVE-2022-40100 · mitre
Tenda i9 v1.0.0.8(3828) was discovered to contain a command injection vulnerability via the FormexeCommand function.
CVE-2022-31937 · mitre
Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd.
CVE-2022-37232 · mitre
Netgear N300 wireless router wnr2000v4-V1.0.0.70 is vulnerable to Buffer Overflow via uhttpd.
CVE-2022-37235 · mitre
Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflow via the wl binar…
CVE-2022-40186 · mitre
An issue was discovered in HashiCorp Vault and Vault Enterprise before 1.11.3.
ikus060
CVE-2022-3269 · ikus060 ikus060/rdiffweb
Session Fixation in ikus060/rdiffweb
CVE-2022-3268 · ikus060 ikus060/minarca
Weak Password Requirements in ikus060/minarca
Apple
Rockwell Automation
CVE-2022-38742 · Rockwell Automation ThinManager ThinServer
Rockwell Automation ThinManager Software Vulnerable to Arbitrary Code Execution and Denial-Of-Service Attack
Grandstream
CVE-2022-2025 · Grandstream Grandstream GSD3710
Grandstream GSD3710 Stack-based Buffer Overflow
CVE-2022-2070 · Grandstream Grandstream GSD3710
Grandstream GSD3710 Stack-based Buffer Overflow
redis
davedoesdev
CVE-2022-39227 · davedoesdev python-jwt
Python-jwt subject to Authentication Bypass by Spoofing
Meta
Tacitine
Apache Software Foundation
CVE-2022-26112 · Apache Software Foundation Apache Pinot
Pinot query endpoint and the realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support
MZ Automation
CVE-2022-2970 · MZ Automation libIEC61850
MZ Automation libIEC61850 Stack-Based Buffer Overflow
CVE-2022-2972 · MZ Automation libIEC61850
MZ Automation libIEC61850 Stack-Based Buffer Overflow
Soflyy
CVE-2022-36386 · Soflyy Import any XML or CSV File to WordPress (WordPress plugin)