by Kastro CVE-2022-30547 · WWBN AVideo
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 624 of 786
WWBN
CVE-2022-30690 · WWBN AVideo
A cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.
CVE-2022-32572 · WWBN AVideo
An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.
CVE-2022-26842 · WWBN AVideo
A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master…
CVE-2022-28712 · WWBN AVideo
A cross-site scripting (xss) vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.
CVE-2022-30534 · WWBN AVideo
An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0…
CVE-2022-32770 · WWBN AVideo
A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.
CVE-2022-32771 · WWBN AVideo
A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.
CVE-2022-32772 · WWBN AVideo
A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.
SourceCodester
CVE-2022-2842 · SourceCodester Gym Management System
SourceCodester Gym Management System login.php sql injection
mitre
CVE-2021-42627 · mitre
The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be accessed directly without authentication which…
CVE-2022-29805 · mitre
A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attackers to execute arbi…
CVE-2022-35583 · mitre
wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag…
CVE-2022-37113 · mitre
Bluecms 1.6 has SQL injection in line 132 of admin/area.php
CVE-2022-37134 · mitre
D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi.
CVE-2021-42232 · mitre
TP-Link Archer A7 Archer A7(US)_V5_210519 is affected by a command injection vulnerability in /usr/bin/tddp.
CVE-2022-35201 · mitre
Tenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.
CVE-2022-36947 · mitre
Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow.
CVE-2022-38667 · mitre
HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used.
CVE-2022-34615 · mitre
Mealie 1.0.0beta3 employs weak password requirements which allows attackers to potentially gain unauthorized access to the application vi…
CVE-2022-34919 · mitre
The file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check that a user has authenticated.
CVE-2022-35540 · mitre
Hardcoded JWT Secret in AgileConfig <1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access.
CVE-2020-36599 · mitre
lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value.
CVE-2022-35150 · mitre
Baijicms v4 was discovered to contain an arbitrary file upload vulnerability.
CVE-2022-36198 · mitre
Multiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view-enquiry.php, buspassms/admin/pass-bwdates-rep…
CVE-2022-36220 · mitre
Kiosk breakout (without quit password) in Safe Exam Browser (Windows) <3.4.0, which allows an attacker to achieve code execution via the…
CVE-2022-36606 · mitre
Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database.
CVE-2022-37175 · mitre
Tenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet.
CVE-2022-36578 · mitre
jizhicms v2.3.1 has SQL injection in the background.
CVE-2022-36727 · mitre
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php.
CVE-2022-37112 · mitre
BlueCMS 1.6 has SQL injection in line 55 of admin/model.php
CVE-2022-37199 · mitre
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.
CVE-2022-37223 · mitre
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list.
CVE-2022-36261 · mitre
An arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to delete file in server when request url a…
CVE-2022-36605 · mitre
Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter.
Apache Software Foundation
CVE-2022-34916 · Apache Software Foundation Apache Flume
Improper Input Validation (JNDI Injection) in JMSMessageConsumer
miniOrange
CVE-2022-34858 · miniOrange OAuth 2.0 client for SSO (WordPress plugin)
WordPress OAuth 2.0 client for SSO plugin <= 1.11.3 - Authentication Bypass vulnerability
CVE-2022-34149 · miniOrange WP OAuth Server (WordPress plugin)
WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability
UNIMO Technology Co., Ltd
CVE-2022-35733 · UNIMO Technology Co., Ltd UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 and UDR-JA1016
Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware…
redhat
IBM
intel
bustle
CVE-2022-2932 · bustle bustle/mobiledoc-kit
Cross-site Scripting (XSS) - Reflected in bustle/mobiledoc-kit
hjiang
notrinos
CVE-2022-2927 · notrinos notrinos/notrinoserp
Weak Password Requirements in notrinos/notrinoserp
yetiforcecompany
CVE-2022-2890 · yetiforcecompany yetiforcecompany/yetiforcecrm