by Kastro CVE-2022-34715 · Microsoft Windows Server 2022
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 627 of 786
Microsoft
CVE-2022-30133 · Microsoft Windows 10 Version 1809
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
CVE-2022-33649 · Microsoft Microsoft Edge (Chromium-based)
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
mitre
CVE-2022-35518 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 nas.cgi has no filtering on parameters: User1Passwd and User1, which leads to comman…
CVE-2022-32429 · mitre
An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technologies Inc MSNSwitch…
CVE-2022-35519 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter add_mac, which leads to command injection…
CVE-2022-35520 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 api.cgi has no filtering on parameter ufconf, and this is a hidden parameter which d…
CVE-2022-35521 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameters: remoteManagementEnabled, blockPortScanE…
CVE-2022-35522 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: ppp_username, ppp_passwd, rwan_gateway, rwan…
CVE-2022-35523 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 firewall.cgi has no filtering on parameter del_mac and parameter flag, which leads t…
CVE-2022-35524 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: wlan_signal, web_pskValue, sel_EncrypTyp, se…
CVE-2022-35525 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameter led_switch, which leads to command injection i…
CVE-2022-35526 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in pag…
CVE-2022-35533 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: cli_list and cli_num, which leads to command…
CVE-2022-35534 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter hiddenSSID32g and SSID2G2, which leads to…
CVE-2022-35535 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameter macAddr, which leads to command injection…
CVE-2022-35536 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qos_bandwith and qos_dat, which leads to com…
CVE-2022-35537 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: mac_5g and Newname, which leads to comm…
CVE-2022-35538 · mitre
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 wireless.cgi has no filtering on parameters: delete_list, delete_al_mac, b_delete_li…
CVE-2022-36270 · mitre
Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php.
CVE-2022-35426 · mitre
UCMS 1.6 is vulnerable to arbitrary file upload via ucms/sadmin/file PHP file.
CVE-2022-36750 · mitre
Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/update_user.php?id=.
CVE-2022-35491 · mitre
TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample.
SourceCodester
CVE-2022-2723 · SourceCodester Employee Management System
SourceCodester Employee Management System eprocess.php sql injection
CVE-2022-2724 · SourceCodester Employee Management System
SourceCodester Employee Management System aprocess.php sql injection
CVE-2022-2715 · SourceCodester Employee Management System
SourceCodester Employee Management System eloginwel.php sql injection
CVE-2022-2722 · SourceCodester Simple Student Information System
SourceCodester Simple Student Information System manage_course.php sql injection
CVE-2022-2727 · SourceCodester Gym Management System
SourceCodester Gym Management System login.php sql injection
CVE-2022-2728 · SourceCodester Gym Management System
SourceCodester Gym Management System index.php sql injection
CVE-2022-2736 · SourceCodester Company Website CMS
SourceCodester Company Website CMS Background Upload Logo Icon updatelogo.php unrestricted upload
redhat
openemr
CVE-2022-2733 · openemr openemr/openemr
Cross-site Scripting (XSS) - Reflected in openemr/openemr
CVE-2022-2734 · openemr openemr/openemr
Improper Restriction of Rendered UI Layers or Frames in openemr/openemr
tenable
CVE-2022-38129 · tenable
A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Senso…
CVE-2022-38130 · tenable
The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS.
Cisco
CVE-2022-20827 · Cisco Cisco Small Business RV Series Router Firmware
Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20841 · Cisco Cisco Small Business RV Series Router Firmware
Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20842 · Cisco Cisco Small Business RV Series Router Firmware
Cisco Small Business RV Series Routers Vulnerabilities
google_android
CVE-2022-20361 · google_android
In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weakness in Bluetooth…
CVE-2022-20239 · google_android
remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can a…
Siemens
CVE-2022-34660 · Siemens Teamcenter V12.4
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), Teamce…
CVE-2022-36323 · Siemens RUGGEDCOM RM1224 LTE(4G) EU