by Kastro CVE-2022-2847 · SourceCodester Guest Management System
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 625 of 786
SourceCodester
CVE-2022-2876 · SourceCodester Student Management System
SourceCodester Student Management System index.php sql injection
checkpoint
mitre
CVE-2022-37061 · mitre
All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection.
CVE-2020-21642 · mitre
Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus before 4350 allows re…
CVE-2022-35516 · mitre
DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php.
CVE-2022-36273 · mitre
Tenda AC9 V15.03.2.21_cn is vulnerable to command injection via goform/SetSysTimeCfg.
CVE-2022-35153 · mitre
FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php.
CVE-2022-35147 · mitre
DoraCMS v2.18 and earlier allows attackers to bypass login authentication via a crafted HTTP request.
CVE-2022-35154 · mitre
Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter.
CVE-2022-35164 · mitre
LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain.
CVE-2022-36190 · mitre
GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get.
CVE-2022-36272 · mitre
Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter.
CVE-2022-36599 · mitre
Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists.
CVE-2022-36722 · mitre
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the title parameter at /librarian/history.php.
CVE-2022-36725 · mitre
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /student/dele.php.
CVE-2022-36728 · mitre
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /staff/delstu.php.
CVE-2022-35121 · mitre
Novel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /service/impl/BookServiceImpl.java.
CVE-2022-35175 · mitre
Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /blotter/blotter.php.
CVE-2022-35598 · mitre
A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrar…
CVE-2022-35599 · mitre
A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands…
CVE-2022-35601 · mitre
A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL com…
CVE-2022-35602 · mitre
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL command…
CVE-2022-36242 · mitre
Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/update_medicine.php?id=.
CVE-2022-36729 · mitre
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /librarian/del.php.
CVE-2022-35122 · mitre
An access control issue in Ecowitt GW1100 Series Weather Stations <=GW1100B_v2.1.5 allows unauthenticated attackers to access sensitive i…
CVE-2022-35603 · mitre
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL com…
CVE-2022-35605 · mitre
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL command…
CVE-2022-35606 · mitre
A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL com…
CVE-2022-30264 · mitre
The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations.
Adobe
CVE-2022-34253 · Adobe Magento Commerce
Adobe Commerce XML Injection Arbitrary code execution
CVE-2022-34256 · Adobe Magento Commerce
Adobe Commerce Improper Authorization Privilege escalation
weaveworks
CVE-2022-35975 · weaveworks vscode-gitops-tools
Improper object validation allows for arbitrary code execution in GitOps Tools Extension for VSCode
CVE-2022-35976 · weaveworks vscode-gitops-tools
Improper KubeConfig handling allows arbitrary code execution
Softing
CVE-2022-2336 · Softing Secure Integration Server
Softing Secure Integration Server Improper Authentication
IBM
CVE-2021-39085 · IBM Sterling B2B Integrator
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable…
CVE-2022-22455 · IBM Security Verify Governance
IBM Security Verify Governance Identity Manager 10.0 virtual appliance component performs an operation at a privilege level that is highe…
intel
CVE-2022-22730 · intel
Improper authentication in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to p…
CVE-2022-30601 · intel
Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentiall…
Sequi
CVE-2022-2661 · Sequi PortBloque S
Sequi PortBloque S Improper Authorization
CVE-2022-2662 · Sequi PortBloque S
Sequi PortBloque S Improper Authentication
Device42
Esri
CVE-2022-38193 · Esri Portal for ArcGIS
Code injection issue in Portal for ArcGIS (10.7.1 and 10.8.1)
JustSystems Corporation
CVE-2022-36344 · JustSystems Corporation JustSystems JUST Online Update for J-License'
An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corpora…
TERUTEN Co.,Ltd
CVE-2022-23764 · TERUTEN Co.,Ltd WebCube