CVE-2022-37042 · Synacor Zimbra Collaboration Suite (ZCS)
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 626 of 786
Synacor
nodejs
oxyno-zeta
CVE-2022-36010 · oxyno-zeta react-editable-json-tree
Arbitrary code execution via function parsing in react-editable-json-tree
SourceCodester
CVE-2022-2766 · SourceCodester Loan Management System
SourceCodester Loan Management System index.php sql injection
CVE-2022-2765 · SourceCodester Company Website CMS
SourceCodester Company Website CMS settings improper authentication
CVE-2022-2779 · SourceCodester Gas Agency Management System
SourceCodester Gas Agency Management System oneWord.php unrestricted upload
CVE-2022-2804 · SourceCodester Zoo Management System
SourceCodester Zoo Management System apply_vacancy.php unrestricted upload
CVE-2022-2803 · SourceCodester Zoo Management System
SourceCodester Zoo Management System animals.php sql injection
CVE-2022-2812 · SourceCodester Guest Management System
SourceCodester Guest Management System index.php sql injection
CVE-2022-2802 · SourceCodester Gas Agency Management System
SourceCodester Gas Agency Management System login.php sql injection
CVE-2022-2740 · SourceCodester Company Website CMS
SourceCodester Company Website CMS Add Blog add-blog.php unrestricted upload
CVE-2022-2744 · SourceCodester Gym Management System
SourceCodester Gym Management System Background Management add_exercises.php unrestricted upload
CVE-2022-2747 · SourceCodester Simple Online Book Store
SourceCodester Simple Online Book Store book.php sql injection
CVE-2022-2750 · SourceCodester Company Website CMS
SourceCodester Company Website CMS Add Service add-service.php unrestricted upload
CVE-2022-2751 · SourceCodester Company Website CMS
SourceCodester Company Website CMS add-portfolio.php unrestricted upload
CVE-2022-2770 · SourceCodester Simple Online Book Store System
SourceCodester Simple Online Book Store System book.php sql injection
CVE-2022-2774 · SourceCodester Library Management System
SourceCodester Library Management System student.php sql injection
CVE-2022-2797 · SourceCodester Student Information System
SourceCodester Student Information System view_student.php sql injection
CVE-2022-2801 · SourceCodester Automated Beer Parlour Billing System
SourceCodester Automated Beer Parlour Billing System Login sql injection
CVE-2022-2745 · SourceCodester Gym Management System
SourceCodester Gym Management System Add New Trainer add_trainers.php sql injection
CVE-2022-2746 · SourceCodester Simple Online Book Store System
SourceCodester Simple Online Book Store System Admin_ add.php unrestricted upload
CVE-2022-2771 · SourceCodester Simple Online Book Store System
SourceCodester Simple Online Book Store System bookPerPub.php sql injection
CVE-2022-2772 · SourceCodester Apartment Visitor Management System
SourceCodester Apartment Visitor Management System action-visitor.php sql injection
mitre
CVE-2022-35555 · mitre
A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput p…
CVE-2022-35559 · mitre
A stack overflow vulnerability exists in /goform/setAutoPing in Tenda W6 V1.0.0.9(4122), which allows an attacker to construct ping1 para…
CVE-2022-36262 · mitre
An issue was discovered in taocms 3.0.2.
CVE-2022-36523 · mitre
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to command injection via /htdocs/upnpinc/gena.php.
CVE-2022-38221 · mitre
A buffer overflow in the FTcpListener thread in The Isle Evrima (the dedicated server on Windows and Linux) 0.9.88.07 before 2022-08-12 a…
CVE-2022-34294 · mitre
totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers.
CVE-2022-36525 · mitre
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Buffer Overflow via authenticationcgi_main.
Unknown
CVE-2022-2314 · Unknown VR Calendar
VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call
CVE-2022-2180 · Unknown greyd_suite
GREYD.SUITE < 1.2.7 - Unauthenticated File Upload to RCE
Zoom Video Communications Inc
CVE-2022-28750 · Zoom Video Communications Inc Zoom On-Premise Meeting Connector Zone Controller (ZC)
Zoom On-Premise Deployments: Stack Buffer Overflow in Meeting Connector
CVE-2022-28755 · Zoom Video Communications Inc Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows)
Improper URL parsing in Zoom Clients
cockpit-hq
CVE-2022-2818 · cockpit-hq cockpit-hq/cockpit
Improper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit
namelessmc
CVE-2022-2821 · namelessmc namelessmc/nameless
Missing Critical Step in Authentication in namelessmc/nameless
YugaByte, Inc.
B&R Industrial Automation
CVE-2021-22289 · B&R Industrial Automation Automation Studio
RCE through Project Upload from Target
camilova
CVE-2022-35956 · camilova activerecord-update-by-case
update_by_case before 0.1.3 vulnerable to sql injection
google_android
CVE-2022-20237 · google_android
In BuildDevIDResponse of miscdatabuilder.cpp, there is a possible out of bounds write due to a missing bounds check.
CVE-2022-20400 · google_android
In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds check.
CVE-2022-20365 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A
CVE-2022-20378 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A
CVE-2022-20381 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A
CVE-2022-20384 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A
CVE-2022-20402 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A
CVE-2022-20403 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A
CVE-2022-20405 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-216363416References: N/A
loopbackio
CVE-2022-35942 · loopbackio loopback-connector-postgresql