The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

39,272 matching vulnerabilities · Page 622 of 786

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2022-37055 · D-Link Routers

D-Link Routers Buffer Overflow Vulnerability

KEV · due 29 Dec EPSS 57%public exploit SSVC act CVSS 9.8

mitre48 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2022-37056 · mitre

D-Link GO-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 is vulnerable to Command Injection via /cgibin, hnap_main,

EPSS 12%public exploit CVSS 9.8

CVE-2022-31499 · mitre

Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo.

EPSS 65%CVSS 9.8

CVE-2022-37057 · mitre

D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Command Injection via cgibin, ssdpcgi_main.

EPSS 27%CVSS 9.8

CVE-2022-37159 · mitre

Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload.

EPSS 28%CVSS 9.8

CVE-2022-38555 · mitre

Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name.

EPSS 11%CVSS 9.8

CVE-2021-43329 · mitre

A SQL injection vulnerability in license_update.php in Mumara Classic through 2.93 allows a remote unauthenticated attacker to execute ar…

EPSS 3%CVSS 9.8

CVE-2022-36756 · mitre

DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php.

EPSS 3%CVSS 9.8

CVE-2022-37053 · mitre

TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.

EPSS 2%CVSS 9.8

CVE-2022-37810 · mitre

Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac.

EPSS 3%CVSS 9.8

CVE-2022-28747 · mitre

Key reuse in GoSecure Titan Inbox Detection & Response (IDR) through 2022-04-05 leads to remote code execution.

EPSS 2%CVSS 9.8

CVE-2022-38792 · mitre

The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party.

EPSS 2%CVSS 9.8

CVE-2022-36755 · mitre

D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZED_GROUP=1 value, as demonstrated by a request for getcfg.php.

EPSS 2%CVSS 9.8

CVE-2022-37240 · mitre

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.

EPSS 1%CVSS 9.8

CVE-2022-37242 · mitre

MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.

EPSS 1%CVSS 9.8

CVE-2022-37811 · mitre

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the startIp parameter in the function formSetPPTPServer.

EPSS 1%CVSS 9.8

CVE-2022-36543 · mitre

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/doctors.php.

EPSS 1%CVSS 9.8

CVE-2022-36544 · mitre

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/booking.php.

EPSS 1%CVSS 9.8

CVE-2022-36545 · mitre

Edoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /patient/settings.php.

EPSS 1%CVSS 9.8

CVE-2022-36678 · mitre

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=…

EPSS 1%CVSS 9.8

CVE-2022-36680 · mitre

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=…

EPSS 1%CVSS 9.8

CVE-2022-36681 · mitre

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=…

EPSS 1%CVSS 9.8

CVE-2022-36682 · mitre

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=…

EPSS 1%CVSS 9.8

CVE-2022-36683 · mitre

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=…

EPSS 1%CVSS 9.8

CVE-2022-36695 · mitre

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.…

EPSS 1%CVSS 9.8

CVE-2022-36696 · mitre

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.…

EPSS 1%CVSS 9.8

CVE-2022-36697 · mitre

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.…

EPSS 1%CVSS 9.8

CVE-2022-36705 · mitre

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /stocks/manage_w…

EPSS 1%CVSS 9.8

CVE-2022-37152 · mitre

An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob" parameter in "/c…

EPSS 1%CVSS 9.8

CVE-2022-37803 · mitre

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat.

EPSS 1%CVSS 9.8

CVE-2022-37805 · mitre

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromWizardHandle.

EPSS 1%CVSS 9.8

CVE-2022-37806 · mitre

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromDhcpListClient.

EPSS 1%CVSS 9.8

CVE-2022-37807 · mitre

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function formSetClientState.

EPSS 1%CVSS 9.8

CVE-2022-37808 · mitre

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the index parameter in the function formWifiWpsOOB.

EPSS 1%CVSS 9.8

CVE-2022-37809 · mitre

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the speed_dir parameter in the function formSetSpeedWan.

EPSS 1%CVSS 9.8

CVE-2022-37812 · mitre

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg.

EPSS 1%CVSS 9.8

CVE-2022-37813 · mitre

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetSysTime.

EPSS 1%CVSS 9.8

CVE-2022-37814 · mitre

Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the device_id parameters in the functi…

EPSS 1%CVSS 9.8

CVE-2022-37815 · mitre

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex.

EPSS 1%CVSS 9.8

CVE-2022-37816 · mitre

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetIpMacBind.

EPSS 1%CVSS 9.8

CVE-2022-38556 · mitre

Trendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.

EPSS 1%CVSS 9.8

CVE-2022-36679 · mitre

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/mana…

EPSS 1%CVSS 9.8

CVE-2022-36692 · mitre

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.…

EPSS 1.0%CVSS 9.8

CVE-2022-36693 · mitre

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.…

EPSS 1.0%CVSS 9.8

CVE-2022-36715 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php.

EPSS 1.0%CVSS 9.8

CVE-2022-36716 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/changestock.php.

EPSS 1.0%CVSS 9.8

CVE-2022-36719 · mitre

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the ok parameter at /admin/history.php.

EPSS 1%CVSS 9.8

CVE-2022-37158 · mitre

RuoYi v3.8.3 has a Weak password vulnerability in the management system.

EPSS 1%CVSS 9.8

CVE-2022-38557 · mitre

D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.

EPSS 1%CVSS 9.8

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2022-3013 · SourceCodester Simple Task Managing System

SourceCodester Simple Task Managing System loginVaLidation.php sql injection

EPSS 0.6%CVSS 9.8