by Kastro CVE-2022-36067 · patriksimek vm2
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 620 of 786
patriksimek
netgate
Apache Software Foundation
CVE-2022-25371 · Apache Software Foundation Apache OFBiz
Unauth Path Traversal with file corruption affecting the Birt plugin of Apache OFBiz
CVE-2022-29063 · Apache Software Foundation Apache OFBiz
Java Deserialization via RMI Connection from the Solr plugin of Apache OFBiz
CVE-2022-38054 · Apache Software Foundation Apache Airflow
Session Fixation
mitre
CVE-2022-31860 · mitre
An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rule.
CVE-2022-36642 · mitre
A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to…
CVE-2022-36640 · mitre
influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitr…
CVE-2022-36663 · mitre
Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.
CVE-2022-31789 · mitre
An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and p…
CVE-2022-37843 · mitre
In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without…
CVE-2020-21516 · mitre
There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP…
CVE-2020-22669 · mitre
Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability.
CVE-2022-36672 · mitre
Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file.
CVE-2021-27693 · mitre
Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchim…
CVE-2022-36601 · mitre
The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534.
CVE-2022-36759 · mitre
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?res_id=.
CVE-2022-36584 · mitre
In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf.
CVE-2022-36594 · mitre
Mapper v4.0.0 to v4.2.0 was discovered to contain a SQL injection vulnerability via the ids parameter at the selectByIds function.
CVE-2022-37839 · mitre
TOTOLINK A860R V4.1.2cu.5182_B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi.
CVE-2022-37840 · mitre
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability.
CVE-2022-37842 · mitre
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability.
CVE-2022-36609 · mitre
Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/update_patie…
CVE-2022-40109 · mitre
TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa.
CVE-2022-40111 · mitre
In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmware.
ElrondNetwork
CVE-2022-36061 · ElrondNetwork elrond-go
Elrond go can execute on same context checks in VM
Sourcecodehero
CVE-2022-3118 · Sourcecodehero ERP System Project
Sourcecodehero ERP System Project processlogin.php sql injection
Zyxel
Dell
CVE-2022-34372 · Dell Cyber Recovery
Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability.
CVE-2022-34379 · Dell CloudLink
Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability.
CVE-2022-34371 · Dell PowerScale OneFS
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of c…
CVE-2022-34380 · Dell CloudLink
Dell CloudLink 7.1.3 and all earlier versions contain an Authentication Bypass Using an Alternate Path or Channel Vulnerability.
Alessio Caiazza
CVE-2022-36387 · Alessio Caiazza About Me (WordPress plugin)
WordPress About Me plugin <= 1.0.12 - Broken Access Control vulnerability
Bitdefender
CVE-2022-2830 · Bitdefender GravityZone Console On-Premise
Deserialization of Untrusted Data in GravityZone Console On-Premise (VA-10573)
Cognex
CVE-2022-1368 · Cognex 3D-A1000 Dimensioning System
Cognex 3D-A1000 Dimensioning System Missing Authentication for Critical Function
CVE-2022-1525 · Cognex 3D-A1000 Dimensioning System
Cognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side Security
PHP Crafts
CVE-2022-37344 · PHP Crafts Accommodation System (WordPress plugin)
WordPress Accommodation System plugin <= 1.0.1 - Missing Access Control vulnerability
The Beaver Builder Team
CVE-2022-36425 · The Beaver Builder Team Beaver Builder – WordPress Page Builder (WordPress plugin)
WordPress Beaver Builder plugin <= 2.5.4.3 - Broken Access Control vulnerability
francoisjacquet
CVE-2022-2714 · francoisjacquet francoisjacquet/rosariosis
Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis
MediaTek, Inc.
CVE-2022-26447 · MediaTek, Inc. MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6763, MT6771, MT8163, MT8167, MT8167S, MT8173, MT8183, MT8321, MT8362A, MT8385, MT8518, MT8532, MT8765, MT8788
In BT firmware, there is a possible out of bounds write due to a missing bounds check.
SourceCodester
CVE-2022-3120 · SourceCodester Clinics Patient Management System
SourceCodester Clinics Patient Management System Login index.php sql injection
CVE-2022-3122 · SourceCodester Clinics Patient Management System
SourceCodester Clinics Patient Management System medicine_details.php sql injection
Hitachi
CVE-2022-34882 · Hitachi RAID Manager Storage Replication Adapter
Information Exposure Vulnerability in RAID Manager Storage Replication Adapter
Qualcomm, Inc.
CVE-2022-22096 · Qualcomm, Inc. Snapdragon Connectivity, Snapdragon Mobile
Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdr…
CVE-2022-25659 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdra…
CVE-2022-25668 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi…
CVE-2022-25657 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapd…
CVE-2022-25658 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Aut…
CVE-2022-22062 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, S…
CVE-2021-35122 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables