by Kastro CVE-2022-38916 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 616 of 786
mitre
CVE-2022-41138 · mitre
In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.
CVE-2022-40357 · mitre
A security issue was discovered in Z-BlogPHP <= 1.7.2.
CVE-2022-37204 · mitre
Final CMS 5.1.0 is vulnerable to SQL Injection.
CVE-2022-40009 · mitre
SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function grow_unicode at /lib/ttf.c.
CVE-2022-40008 · mitre
SWFTools commit 772e55a was discovered to contain a heap-buffer overflow via the function readU8 at /lib/ttf.c.
CVE-2022-38509 · mitre
Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking_id parameter at /admin/budget.php.
CVE-2022-38619 · mitre
SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /SVFE2/pages/feegro…
CVE-2022-38545 · mitre
Valine v1.4.18 was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute arbitrary code via…
CVE-2022-41220 · mitre
md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913.
CVE-2022-37203 · mitre
JFinal CMS 5.1.0 is vulnerable to SQL Injection.
CVE-2022-37265 · mitre
Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js.
CVE-2022-38881 · mitre
The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-38882 · mitre
The d8s-json for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-38883 · mitre
The d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-38884 · mitre
The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-38885 · mitre
The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-38886 · mitre
The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-38887 · mitre
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40432 · mitre
The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-37026 · mitre
In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-c…
CVE-2022-40030 · mitre
SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at chang…
CVE-2022-40425 · mitre
The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40426 · mitre
The d8s-asns for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40428 · mitre
The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40430 · mitre
The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40431 · mitre
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40812 · mitre
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-38340 · mitre
Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmed…
fedora
Necta LLC
CVE-2022-3218 · Necta LLC WiFi Mouse (Mouse Server)
Necta WiFi Mouse (Mouse Server) client-side authentication bypass
Apple
Jenkins project
CVE-2022-41237 · Jenkins project Jenkins DotCi Plugin
Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in…
CVE-2022-41238 · Jenkins project Jenkins DotCi Plugin
A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs corresp…
CVE-2022-41226 · Jenkins project Jenkins Compuware Common Configuration Plugin
Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) a…
CVE-2022-41241 · Jenkins project Jenkins RQM Plugin
Jenkins RQM Plugin 2.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Siemens
CVE-2022-28321 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins.
OWASP
CVE-2022-39955 · OWASP ModSecurity Core Rule Set
Partial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type header
CVE-2022-39956 · OWASP ModSecurity Core Rule Set
Partial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding header
HANSSAK Co.,Ltd
CVE-2022-23767 · HANSSAK Co.,Ltd SecureGate
SecureGate authentication bypass vulnerability
Neo Information Systems Co., Ltd
CVE-2022-23768 · Neo Information Systems Co., Ltd Home AP NIS-HAP11AC
Neo Information Sys. NIS-HAP11AC remote access and manipulation vulnerability
Trend Micro
CVE-2022-40980 · Trend Micro Trend Micro Mobile Security for Enterprise
A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow an attacker with…
Database Software
CVE-2022-2315 · Database Software Database Software
SQL Injection in Database Accreditation System
ForgeRock
TIBCO Software Inc.
CVE-2022-30578 · TIBCO Software Inc. TIBCO EBX Add-ons
TIBCO EBX Add-ons Stored XSS vulnerability
CVE-2022-30577 · TIBCO Software Inc. TIBCO EBX