by Kastro CVE-2022-27593 · QNAP Systems Inc. Photo Station
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 619 of 786
QNAP Systems Inc.
xwiki
CVE-2022-36099 · xwiki xwiki-platform
XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability
CVE-2022-36100 · xwiki xwiki-platform
XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection
CVE-2022-36094 · xwiki xwiki-platform
XWiki Platform Web Parent POM vulnerable to XSS in the attachment history
CVE-2022-36098 · xwiki xwiki-platform
XWiki Platform Mentions UI vulnerable to Cross-site Scripting
CVE-2022-36096 · xwiki xwiki-platform
XWiki Platform vulnerable to Cross-site Scripting in the deleted attachments list
open-policy-agent
ActivityWatch
CVE-2022-31149 · ActivityWatch activitywatch
ActivityWatch vulnerable to DNS rebinding attack
codeprojects
CVE-2022-3129 · codeprojects Online Driving School
codeprojects Online Driving School registration.php unrestricted upload
CVE-2022-3130 · codeprojects Online Driving School
codeprojects Online Driving School login.php sql injection
rust-osdev
mitre
CVE-2022-37860 · mitre
The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injectio…
CVE-2022-38250 · mitre
Nagios XI v5.8.6 was discovered to contain a SQL injection vulnerability via the mib_name parameter at the Manage MIBs page.
CVE-2022-36588 · mitre
In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy.
CVE-2022-40305 · mitre
A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network…
CVE-2021-34236 · mitre
Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-se…
CVE-2022-37767 · mitre
Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement arbitrary code execution with springbok.
CVE-2021-44835 · mitre
An issue was discovered in Active Intelligent Visualization 5.
CVE-2022-38309 · mitre
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualSe…
CVE-2022-38310 · mitre
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRou…
CVE-2022-38311 · mitre
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/PowerSaveSet.
CVE-2022-38312 · mitre
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.
CVE-2022-38313 · mitre
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/saveParentCo…
CVE-2022-38314 · mitre
Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the urls parameter at /goform/saveParentCo…
CVE-2022-36585 · mitre
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf.
CVE-2022-36586 · mitre
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the htt…
CVE-2022-36587 · mitre
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary.
CVE-2022-36660 · mitre
xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pci_vtrnd_notify().
CVE-2022-37794 · mitre
In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection.
CVE-2022-37164 · mitre
Inoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain unauthorized access to the application via b…
CVE-2022-38638 · mitre
Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.
CVE-2022-37163 · mitre
Bminusl IHateToBudget v1.5.7 employs a weak password policy which allows attackers to potentially gain unauthorized access to the applica…
snyk
SUSE
CVE-2021-36782 · SUSE Rancher
Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object
CVE-2021-36783 · SUSE Rancher
Rancher: Failure to properly sanitize credentials in cluster template answers
CVE-2022-31247 · SUSE Rancher
Rancher: Downstream cluster privilege escalation through cluster and project role template binding (CRTB/PRTB)
Apache Software Foundation
CVE-2022-39135 · Apache Software Foundation Apache Calcite
Apache Calcite: potential XEE attacks
AEB-labs
Alfasado Inc.
CVE-2022-33941 · Alfasado Inc. PowerCMS XMLRPC API
PowerCMS XMLRPC API provided by Alfasado Inc.
ikus060
CVE-2022-3167 · ikus060 ikus060/rdiffweb
Improper Restriction of Rendered UI Layers or Frames in ikus060/rdiffweb
Allied Telesis K.K.
CVE-2022-38394 · Allied Telesis K.K. CentreCOM AR260S V2
Use of hard-coded credentials for the telnet server of CentreCOM AR260S V2 firmware versions prior to Ver.3.3.7 allows a remote unauthent…
About Rentals. Inc.
CVE-2022-36427 · About Rentals. Inc. About Rentals (WordPress plugin)
WordPress About Rentals plugin <= 1.5 - Missing Access Control vulnerability
Cisco
CVE-2022-20923 · Cisco Cisco Small Business RV Series Router Firmware
Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers IPSec VPN Server Authentication Bypass Vulnerability
Rank Math
CVE-2022-36376 · Rank Math Rank Math SEO (WordPress plugin)
WordPress Rank Math SEO plugin <= 1.0.95 - Server-Side Request Forgery (SSRF) vulnerability
kubevela
phpfusion
CVE-2022-3152 · phpfusion phpfusion/phpfusion
Unverified Password Change in phpfusion/phpfusion
wp-shop.ru
CVE-2022-36793 · wp-shop.ru WP Shop (WordPress plugin)
WordPress WP Shop plugin <= 3.9.6 - Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities
appwrite
CVE-2022-2925 · appwrite appwrite/appwrite