by Kastro CVE-2022-34718 · Microsoft Windows 10 Version 1809
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 618 of 786
Microsoft
CVE-2022-34721 · Microsoft Windows 10 Version 1809
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
CVE-2022-34722 · Microsoft Windows 10 Version 1809
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
theonedev
CVE-2022-39205 · theonedev onedev
Access Control Bypass in Onedev
CVE-2022-39206 · theonedev onedev
CI/CD Docker Escape in OneDev
mitre
CVE-2022-35413 · mitre
WAPPLES through 6.0 has a hardcoded systemi account.
CVE-2022-37661 · mitre
SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.
CVE-2022-38308 · mitre
TOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function…
CVE-2022-38352 · mitre
ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache.
CVE-2022-38296 · mitre
Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File Manager.
CVE-2022-38637 · mitre
Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Password parameters…
CVE-2022-36669 · mitre
Hospital Information System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
CVE-2022-37861 · mitre
There is a remote code execution (RCE) vulnerability in Tenhot TWS-100 V4.0-201809201424 router device.
CVE-2022-39815 · mitre
In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs.
CVE-2022-37264 · mitre
Prototype pollution vulnerability in stealjs steal 2.2.4 via the optionName variable in main.js.
CVE-2022-37257 · mitre
Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in…
CVE-2022-37266 · mitre
Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js.
CVE-2022-38297 · mitre
UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning.
CVE-2022-37138 · mitre
Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator af…
CVE-2022-38325 · mitre
Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the fi…
CVE-2022-38326 · mitre
Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the pa…
CVE-2022-38537 · mitre
Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file, start_time, and s…
CVE-2022-38538 · mitre
Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module.
CVE-2022-38539 · mitre
Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply.
CVE-2022-38540 · mitre
Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the create_kill_session i…
CVE-2022-38541 · mitre
Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in…
CVE-2022-38542 · mitre
Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface.
CVE-2022-38768 · mitre
The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to bypass authorization.
CVE-2022-38771 · mitre
The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to send SCRIPT tags as injected inp…
CVE-2020-19586 · mitre
Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4…
CVE-2022-38292 · mitre
SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibli…
CVE-2022-38789 · mitre
An issue was discovered in Airties Smart Wi-Fi before 2020-08-04.
CVE-2022-34831 · mitre
An issue was discovered in Keyfactor PrimeKey EJBCA before 7.9.0, related to possible inconsistencies in DNS identifiers submitted in an…
PROSCEND
CVE-2022-36779 · PROSCEND PROSCEND M330-w / M330-W5
PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection
osuosl
CVE-2022-36436 · osuosl twisted_vnc_authentication_proxy
OSU Open Source Lab VNCAuthProxy through 1.1.1 is affected by an vncap/vnc/protocol.py VNCServerAuthenticator authentication-bypass vulne…
EZVIZ
Siemens
CVE-2022-37011 · Siemens Mendix SAML (Mendix 7 compatible)
A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All…
Forcepoint
ionicabizau
CVE-2022-2900 · ionicabizau ionicabizau/parse-url
Server-Side Request Forgery (SSRF) in ionicabizau/parse-url
CVE-2022-3224 · ionicabizau ionicabizau/parse-url
Misinterpretation of Input in ionicabizau/parse-url
Schneider Electric
CVE-2022-37300 · Schneider Electric EcoStruxure Control Expert
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized access in read and…
google_android
CVE-2022-20386 · google_android
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328
CVE-2022-20387 · google_android
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227324
CVE-2022-20388 · google_android
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323
CVE-2022-20389 · google_android
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004
CVE-2022-20390 · google_android
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257002
CVE-2022-20391 · google_android
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000
CVE-2022-20385 · google_android
a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype'…
CVE-2021-0942 · google_android