by Kastro CVE-2022-35914 · Teclib GLPI
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 617 of 786
Teclib
mitre
CVE-2022-38621 · mitre
Doufox v0.0.4 was discovered to contain a remote code execution (RCE) vulnerability via the edit file page.
CVE-2022-38827 · mitre
TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi
CVE-2022-38828 · mitre
TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi
CVE-2022-40300 · mitre
Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304…
CVE-2021-42949 · mitre
The component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing att…
CVE-2022-36536 · mitre
An issue in the component post_applogin.php of Super Flexible Software GmbH & Co.
CVE-2022-37258 · mitre
Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in npm-c…
CVE-2022-37032 · mitre
An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of service.
CVE-2022-38826 · mitre
In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi.
CVE-2022-38880 · mitre
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40424 · mitre
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40427 · mitre
The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40429 · mitre
The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40805 · mitre
The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40806 · mitre
The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40807 · mitre
The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40808 · mitre
The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40809 · mitre
The d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40810 · mitre
The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-40811 · mitre
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party.
CVE-2022-38823 · mitre
In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample.
CVE-2022-38829 · mitre
Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg.
CVE-2022-38830 · mitre
Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setIPv6Status.
CVE-2022-38831 · mitre
Tenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/SetNetControlList
CVE-2022-26959 · mitre
There are two full (read/write) Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version 6.3 application.
CVE-2022-40766 · mitre
Modern Campus Omni CMS (formerly OU Campus) 10.2.4 allows login-page SQL injection via a '" OR 1 = 1 -- - , <?php' substring.
CVE-2022-38339 · mitre
Safe Software FME Server v2021.2.5, v2022.0.0.2 and below contains a cross-site scripting (XSS) vulnerability which allows attackers to e…
Unknown
CVE-2022-2754 · Unknown Ketchup Restaurant Reservations
Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi
CVE-2022-2840 · Unknown Zephyr Project Manager
Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi
Delta Electronics
CVE-2022-3214 · Delta Electronics DIAEnergy
Delta Electronics DIAEnergy Use of Hard-coded Credentials
Trend Micro
Huawei
CVE-2021-40017 · huawei
The HW_KEYMASTER module lacks the validity check of the key format.
CVE-2022-38999 · Huawei HarmonyOS
The AOD module has the improper update of reference count vulnerability.
CVE-2022-39000 · Huawei HarmonyOS
The iAware module has a vulnerability in managing malicious apps.Successful exploitation of this vulnerability will cause malicious apps…
CVE-2022-39002 · huawei
Double free vulnerability in the storage module.
CVE-2022-39007 · Huawei HarmonyOS
The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause priv…
CVE-2022-39009 · Huawei HarmonyOS
The WLAN module has a vulnerability in permission verification.
CVE-2021-40019 · Huawei EMUI
Out-of-bounds heap read vulnerability in the HW_KEYMASTER module.
CVE-2022-39008 · Huawei HarmonyOS
The NFC module has bundle serialization/deserialization vulnerabilities.
CVE-2022-39003 · Huawei EMUI
Buffer overflow vulnerability in the video framework.
some-natalie
CVE-2022-39217 · some-natalie ghas-to-csv
Improper Neutralization of Formula Elements in a CSV File in ghas-to-csv
tensorflow
CVE-2022-35939 · tensorflow tensorflow
Out of bounds write in `scatter_nd` op in TensorFlow Lite
CVE-2022-35937 · tensorflow tensorflow
OOB read in `Gather_nd` op in TensorFlow Lite
CVE-2022-35938 · tensorflow tensorflow
OOB read in `Gather_nd` op in TensorFlow Lite Micro
Qualcomm, Inc.
CVE-2022-22105 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music
Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Sna…
CVE-2022-25708 · Qualcomm, Inc. Snapdragon Connectivity, Snapdragon Mobile
Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile
CVE-2022-25686 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon Con…
CVE-2022-25688 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect…
CVE-2022-25652 · Qualcomm, Inc. Snapdragon Wired Infrastructure and Networking