The archive.

CVE-2022-37125 · mitre

D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost.

CVE-2022-37149 · mitre

WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi.

CVE-2022-36201 · mitre

Doctor’s Appointment System v1.0 is vulnerable to Blind SQLi via settings.php.

CVE-2022-36554 · mitre

A command injection vulnerability in the CLI (Command Line Interface) implementation of Hytec Inter HWL-2511-SS v1.05 and below allows at…

CVE-2022-36566 · mitre

Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function.

CVE-2022-30318 · mitre

Honeywell ControlEdge through R151.1 uses Hard-coded Credentials.

CVE-2022-36556 · mitre

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection vulnerability via the ipAddress parameter at…

CVE-2022-36559 · mitre

Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain a command injection vulnerability via the Ping parameter at ping_ex…

CVE-2022-36557 · mitre

Seiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload vulnerability via the restore backup fun…

CVE-2022-36706 · mitre

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /stocks/manage_s…

CVE-2022-36708 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /student/bookdetails.php.

CVE-2022-32993 · mitre

TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh.

EPSS 1.0%CVSS 9.8

CVE-2022-36202 · mitre

Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php.

CVE-2022-36709 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/edit_book_details.php.

CVE-2022-36711 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/bookdetails.php.

CVE-2022-36712 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/studentdetails.php.

CVE-2022-36713 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /librarian/lab.php.

CVE-2022-36714 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /staff/lab.php.

CVE-2022-36730 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /librarian/delete.php.

CVE-2022-36731 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php.

CVE-2022-36732 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php.

CVE-2022-36733 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /admin/del.php.

CVE-2022-36734 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php.

CVE-2022-36735 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php.

CVE-2022-37176 · mitre

Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows attackers to remove the Wi-Fi password and…

CVE-2022-36558 · mitre

Seiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root account.

EPSS 0.8%CVSS 9.8

CVE-2022-36560 · mitre

Seiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain multiple hard-coded passcodes for root.

EPSS 0.8%CVSS 9.8

CVE-2022-36555 · mitre

Hytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which can be easily cracked via a brute-force…

EPSS 0.7%CVSS 9.8

CVE-2022-30317 · mitre

Honeywell Experion LX through 2022-05-06 has Missing Authentication for a Critical Function.

EPSS 0.9%CVSS 9.1

CVE-2022-36130 · mitre

HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated with the correct s…

EPSS 0.5%CVSS 9.9

NVIDIA1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2022-34668 · NVIDIA NVIDIA FLARE

NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unpriv…

EPSS 12%CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2022-37021 · Apache Software Foundation Apache Geode

Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8.

snyk3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2022-21165 · snyk

Arbitrary Command Injection

CVE-2022-25644 · snyk

Arbitrary Code Execution

CVE-2022-25921 · snyk

Arbitrary Code Execution

Johnson Controls1 vulnerability on this pageMax CVSS 10.0Priority 46KEV 0

CVE-2022-21941 · Johnson Controls iSTAR Ultra

iSTAR Ultra

EPSS 2%CVSS 10.0

redhat1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2022-2466 · redhat

It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable behavior.

Siemens1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2020-35527 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP

In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.

NodeBB1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2022-36045 · NodeBB NodeBB

Account takeover via cryptographically weak PRNG in NodeBB Forum

Le-yan Co., Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2022-38116 · Le-yan Co., Ltd. Personnel and Salary Management System

Le-yan Co., Ltd. Personnel and Salary Management System - Hard-coded password