by Kastro CVE-2022-37434 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 629 of 786
Siemens
TCL
CVE-2022-22140 · TCL LinkHub Mesh Wifi
An os command injection vulnerability exists in the confsrv ucloud_add_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.
CVE-2022-21178 · TCL LinkHub Mesh Wifi
An os command injection vulnerability exists in the confsrv ucloud_add_new_node functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.
CVE-2022-23103 · TCL LinkHub Mesh Wifi
A stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi MS1G_0…
CVE-2022-23399 · TCL LinkHub Mesh Wifi
A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.
CVE-2022-23918 · TCL LinkHub Mesh Wifi
A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.
CVE-2022-23919 · TCL LinkHub Mesh Wifi
A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.
CVE-2022-24005 · TCL LinkHub Mesh Wifi
A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.
CVE-2022-24006 · TCL LinkHub Mesh Wifi
A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.
CVE-2022-24007 · TCL LinkHub Mesh Wifi
A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.
CVE-2022-22144 · TCL LinkHub Mesh Wifi
A hard-coded password vulnerability exists in the libcommonprod.so prod_change_root_passwd functionality of TCL LinkHub Mesh Wi-Fi MS1G_0…
SourceCodester
CVE-2022-2643 · SourceCodester Online Admission System
SourceCodester Online Admission System POST Parameter sql injection
CVE-2022-2644 · SourceCodester Online Admission System
SourceCodester Online Admission System GET Parameter sql injection
CVE-2022-2648 · SourceCodester Multi Language Hotel Management Software
SourceCodester Multi Language Hotel Management Software sql injection
CVE-2022-2656 · SourceCodester Multi Language Hotel Management Software
SourceCodester Multi Language Hotel Management Software sql injection
CVE-2022-2676 · SourceCodester Electronic Medical Records System
SourceCodester Electronic Medical Records System POST Request sql injection
CVE-2022-2677 · SourceCodester Apartment Visitor Management System
SourceCodester Apartment Visitor Management System index.php sql injection
CVE-2022-2679 · SourceCodester Interview Management System
SourceCodester Interview Management System viewReport.php sql injection
CVE-2022-2674 · SourceCodester Best Fee Management System
SourceCodester Best Fee Management System admin_class.php login sql injection
sigstore
bookwyrm-social
CVE-2022-2651 · bookwyrm-social bookwyrm-social/bookwyrm
Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm
mitre
CVE-2022-34974 · mitre
D-Link DIR810LA1_FW102B22 was discovered to contain a command injection vulnerability via the Ping_addr function.
CVE-2022-35620 · mitre
D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function binary.soapcg…
CVE-2022-34970 · mitre
Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h.
CVE-2022-32292 · mitre
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-based buffer overfl…
CVE-2022-35619 · mitre
D-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE) vulnerability via the function ssdpcgi_main.
CVE-2022-35143 · mitre
Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force attacks.
CVE-2022-29807 · mitre
A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code exe…
CVE-2022-34993 · mitre
Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample.
CVE-2022-35161 · mitre
GVRET Stable Release as of Aug 15, 2015 was discovered to contain a buffer overflow via the handleConfigCmd function at SerialConsole.cpp.
CVE-2022-30285 · mitre
In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible during authentication.
vmware
Apache Software Foundation
CVE-2022-25168 · Apache Software Foundation Apache Hadoop
Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTar
Vinchin
Sante
BMC
contiki-ng
CVE-2022-35927 · contiki-ng contiki-ng
Unverified DIO prefix info lengths in RPL-Classic in Contiki-NG
ITPison
CVE-2022-32964 · ITPison OMICARD EDM
ITPison OMICARD EDM - SQL Injection
CVE-2022-32965 · ITPison OMICARD EDM
ITPison OMICARD EDM - Use of Hard-coded Credentials
hestiacp
CVE-2022-2626 · hestiacp hestiacp/hestiacp
Incorrect Privilege Assignment in hestiacp/hestiacp
unspecified
CVE-2022-2647 · unspecified jeecg-boot
jeecg-boot unrestricted upload
CVE-2022-2664 · unspecified Private Cloud Management Platform
Private Cloud Management Platform POST Request global_config_query improper authentication
F5
nextcloud
CVE-2022-31132 · nextcloud security-advisories