by Kastro CVE-2022-2564 · automattic automattic/mongoose
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 631 of 786
automattic
mitre
CVE-2021-41556 · mitre
sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code Ex…
CVE-2022-34907 · mitre
An authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2.
CVE-2022-36412 · mitre
In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass.
CVE-2022-23100 · mitre
OX App Suite through 7.10.6 allows OS Command Injection via Documentconverter (e.g., through an email attachment).
CVE-2022-24405 · mitre
OX App Suite through 7.10.6 allows OS Command Injection via a serialized Java class to the Documentconverter API.
CVE-2022-34577 · mitre
A vulnerability in adm.cgi of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request.
CVE-2022-36950 · mitre
In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may be able to perform remote command execution through a Java classlo…
CVE-2022-35131 · mitre
Joplin v2.8.8 allows attackers to execute arbitrary commands via a crafted payload injected into the Node titles.
CVE-2022-29953 · mitre
The Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a maintenance interface on port 4001/TCP with undo…
CVE-2022-31206 · mitre
The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authent…
CVE-2022-34989 · mitre
Fruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recover_email parameter at user_password_recover.php.
CVE-2022-36129 · mitre
HashiCorp Vault Enterprise 1.7.0 through 1.9.7, 1.10.4, and 1.11.0 clusters using Integrated Storage expose an unauthenticated API endpoi…
CVE-2022-36161 · mitre
Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
CVE-2022-36951 · mitre
In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may compromise the host by exploiting an incorrectly patched vulnerabi…
CVE-2022-36992 · mitre
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.…
CVE-2022-30270 · mitre
The Motorola ACE1000 RTU through 2022-05-02 has default credentials.
CVE-2022-30315 · mitre
Honeywell Experion PKS Safety Manager (SM and FSC) through 2022-05-06 has Insufficient Verification of Data Authenticity.
CVE-2022-31207 · mitre
The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic authentication.
CVE-2022-36954 · mitre
In Veritas NetBackup OpsCenter, under specific conditions, an authenticated remote attacker may be able to create or modify OpsCenter use…
CVE-2022-36986 · mitre
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.…
CVE-2022-29952 · mitre
Bently Nevada condition monitoring equipment through 2022-04-29 mishandles authentication.
CVE-2022-30274 · mitre
The Motorola ACE1000 RTU through 2022-05-02 uses ECB encryption unsafely.
CVE-2022-29958 · mitre
JTEKT TOYOPUC PLCs through 2022-04-29 do not ensure data integrity.
CVE-2022-36952 · mitre
In Veritas NetBackup OpsCenter, a hard-coded credential exists that could be used to exploit the underlying VxSS subsystem.
CVE-2022-36990 · mitre
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.…
CVE-2022-30273 · mitre
The Motorola MDLC protocol through 2022-05-02 mishandles message integrity.
CVE-2022-36956 · mitre
In Veritas NetBackup, the NetBackup Client allows arbitrary command execution from any remote host that has access to a valid host-id Net…
CVE-2022-36949 · mitre
In Veritas NetBackup OpsCenter, an attacker with local access to a NetBackup OpsCenter server could potentially escalate their privileges.
Inductive Automation
fedora
Synology
CVE-2022-22683 · Synology Media Server
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media Server before 1.8…
CVE-2022-27612 · Synology Audio Station
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio Station before 6.…
Ovarro
CVE-2021-22646 · Ovarro TBox
Ovarro TBox Code Injection
CVE-2021-22650 · Ovarro TBox
Ovarro TBox Relative Path Traversal
CVE-2021-22648 · Ovarro TBox
Ovarro TBox Incorrect Permission Assignment for Critical Resource
CVE-2021-22640 · Ovarro TBox
Ovarro TBox Insufficiently Protected Credentials
CVE-2021-22644 · Ovarro TBox
Ovarro TBox Use of Hard-coded Cryptographic Key
Skyhigh Security
CVE-2022-2310 · Skyhigh Security Skyhigh Secure Web Gateway (SWG)
Skyhigh SWG Authentication bypass vulnerability
snyk
CVE-2022-1853 · Google Chrome
Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape vi…
CVE-2022-2010 · Google Chrome
Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer pro…
jtekt
CVE-2022-29951 · jtekt pc10g-cpu_tcc-6353_firmware