by Kastro CVE-2022-26352 · dotCMS dotCMS
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 633 of 786
dotCMS
Zoho
WAVLINK
CVE-2022-2486 · WAVLINK WN535K2
WAVLINK WN535K2/WN535K3 os command injection
CVE-2022-2487 · WAVLINK WN535K2
WAVLINK WN535K2/WN535K3 nightled.cgi os command injection
CVE-2022-2488 · WAVLINK WN535K2
WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection
SourceCodester
CVE-2022-2467 · SourceCodester Garage Management System
SourceCodester Garage Management System login.php sql injection
hap-wi
mitre
CVE-2021-36711 · mitre
WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.
CVE-2021-41419 · mitre
QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization.
CVE-2022-32409 · mitre
A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3geo v7.0.5 allows a…
CVE-2022-32417 · mitre
PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.
CVE-2022-34607 · mitre
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /doping.asp.
CVE-2022-26479 · mitre
An issue was discovered in Poly EagleEye Director II before 2.2.2.1.
CVE-2022-28373 · mitre
Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not properly sanitize user-controlled parameters within the crtcreadpartition fu…
CVE-2022-28375 · mitre
Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 does not property sanitize user-controlled parameters within the crtcswitchsimprofil…
CVE-2022-35890 · mitre
An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17.
CVE-2022-35912 · mitre
In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when certain Java 8 c…
CVE-2022-31211 · mitre
An issue was discovered in Infiray IRAY-A8Z3 1.0.957.
CVE-2022-27434 · mitre
UNIT4 TETA Mobile Edition (ME) before 29.5.HF17 was discovered to contain a SQL injection vulnerability via the ProfileName parameter in…
CVE-2022-28369 · mitre
Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not validate the user-provided URL within the crtcmode function's enable_ssh sub…
CVE-2022-31209 · mitre
An issue was discovered in Infiray IRAY-A8Z3 1.0.957.
CVE-2022-34609 · mitre
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /doping.asp.
CVE-2022-34610 · mitre
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the URL /ihomers/app.
CVE-2022-35409 · mitre
An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0.
CVE-2021-40874 · mitre
An issue was discovered in LemonLDAP::NG (aka lemonldap-ng) 2.0.13.
CVE-2022-24657 · mitre
Goldshell ASIC Miners v2.1.x was discovered to contain hardcoded credentials which allow attackers to remotely connect via the SSH protoc…
CVE-2022-31210 · mitre
An issue was discovered in Infiray IRAY-A8Z3 1.0.957.
CVE-2022-32985 · mitre
libnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor Account for SSH logins on port 50200 or 50201.
CVE-2022-34599 · mitre
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm.
CVE-2022-34600 · mitre
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm.
CVE-2022-34601 · mitre
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm.
CVE-2022-34602 · mitre
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm.
CVE-2022-34603 · mitre
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm.
CVE-2022-34604 · mitre
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the INTF parameter at /dotrace.asp.
CVE-2022-34605 · mitre
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the HOST parameter at /dotrace.asp.
CVE-2022-34606 · mitre
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditvsList parameter at /dotrace.asp.
CVE-2022-34608 · mitre
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ajaxmsg parameter at /AJAX/ajaxget.
CVE-2022-34635 · mitre
The mstatus.sd field in CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a does not update when the mstatus.fs field is set to Dirty.
CVE-2022-30113 · mitre
Electronic mall system 1.0_build20200203 is affected vulnerable to SQL Injection.
CVE-2022-34023 · mitre
Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /officials/officia…
CVE-2022-34029 · mitre
Nginx NJS v0.7.4 was discovered to contain an out-of-bounds read via njs_scope_value at njs_scope.h.
CVE-2022-25801 · mitre
Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools.
CVE-2022-34632 · mitre
Rocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain insufficient cryptography via the component /rocket…
Pegasystems
Apache Software Foundation
CVE-2022-35741 · Apache Software Foundation Apache CloudStack
Apache CloudStack SAML Single Sign-On XXE
Data Systems Consulting Co., Ltd.
CVE-2022-32456 · Data Systems Consulting Co., Ltd. BPM
Data Systems Consulting Co., Ltd. BPM - SQL Injection
slickremix
CVE-2022-2437 · slickremix Feed Them Social – Social Media Feeds, Video, and Photo Galleries
Feed Them Social – for Twitter feed, Youtube and more <= 2.9.8.5 - Unauthenticated PHAR Deserialization
MiCODUS
Oracle Corporation
CVE-2022-21543 · Oracle Corporation PeopleSoft Enterprise PT PeopleTools