by Kastro CVE-2022-31188 · cvat-ai cvat
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 630 of 786
cvat-ai
ericcornelissen
CVE-2022-31180 · ericcornelissen shescape
Insufficient escaping of whitespace in shescape
CVE-2022-31179 · ericcornelissen shescape
Insufficient escaping of line feeds for CMD in shescape
bookwyrm-social
CVE-2022-35925 · bookwyrm-social bookwyrm
Missing rate limit in Authentication in bookwyrm
typelevel
SourceCodester
CVE-2022-2578 · SourceCodester Garage Management System
SourceCodester Garage Management System createUser.php access control
mitre
CVE-2022-27255 · mitre
In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow.
CVE-2022-34531 · mitre
DedeCMS v5.7.95 was discovered to contain a remote code execution (RCE) vulnerability via the component mytag_ main.php.
CVE-2022-34555 · mitre
TP-LINK TL-R473G 2.0.1 Build 220529 Rel.65574n was discovered to contain a remote code execution vulnerability which is exploited via a c…
CVE-2022-34613 · mitre
Mealie 1.0.0beta3 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file.
CVE-2022-34558 · mitre
WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and global-workqueue 1.4.1rc5 allows attackers to execut…
CVE-2022-30083 · mitre
EllieGrid Android Application version 3.4.1 is vulnerable to Code Injection.
CVE-2022-34496 · mitre
Hiby R3 PRO firmware v1.5 to v1.7 was discovered to contain a file upload vulnerability via the file upload feature.
CVE-2022-34945 · mitre
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getproductreport.php.
CVE-2022-34946 · mitre
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php.
CVE-2022-34947 · mitre
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editcategory.php.
CVE-2022-34948 · mitre
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editbrand.php.
CVE-2022-34949 · mitre
Pharmacy Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the email or password parameter at l…
CVE-2022-34950 · mitre
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editproduct.php.
CVE-2022-34951 · mitre
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php.
CVE-2022-34952 · mitre
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edituser.php.
CVE-2022-34953 · mitre
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getOrderReport.php.
CVE-2022-34954 · mitre
Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at invoiceprint.php.
CVE-2022-34955 · mitre
Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_topusers…
CVE-2022-34956 · mitre
Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_groups.php.
CVE-2022-35422 · mitre
Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the qid parameter at update.php.
CVE-2022-31321 · mitre
The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumera…
SonicWall
snyk
CVE-2020-7795 · snyk
Command Injection
CVE-2020-28451 · snyk
Command Injection
CVE-2020-28423 · snyk
Command Injection
CVE-2020-28434 · snyk
Command Injection
CVE-2020-28437 · snyk
Command Injection
CVE-2020-28453 · snyk
Command Injection
CVE-2020-28425 · snyk
Command Injection
CVE-2020-28433 · snyk
Command Injection
CVE-2020-28424 · snyk
Command Injection
Unknown
CVE-2022-1950 · Unknown Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
Youzify < 1.2.0 - Unauthenticated SQLi
CVE-2022-2317 · Unknown Simple Membership
Simple Membership < 4.1.3 - Unauthenticated Membership Privilege Escalation
EasyUse
CVE-2022-35223 · EasyUse MailHunter Ultimate
EasyUse MailHunter Ultimate - Deserialization of Untrusted Data
MediaTek, Inc.
CVE-2022-26437 · MediaTek, Inc. MT2621, MT2625
In httpclient, there is a possible out of bounds write due to uninitialized data.
Bosch
IBM
CVE-2022-35643 · IBM PowerVM VIOS
IBM PowerVM VIOS 3.1 could allow a remote attacker to tamper with system configuration or cause a denial of service.
CVE-2022-31775 · IBM DataPower Gateway
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to…
nextauthjs
CVE-2022-35924 · nextauthjs next-auth
Verification requests (magic link) sent to unwanted emails
Google LLC
CVE-2022-1799 · Google LLC Google Play Services SDK