by Kastro CVE-2022-31140 · CuyZ Valinor
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,272 matching vulnerabilities · Page 634 of 786
CuyZ
mitre
CVE-2022-35628 · mitre
A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.
CVE-2022-28888 · mitre
Spryker Commerce OS 1.4.2 allows Remote Command Execution.
CVE-2022-32073 · mitre
WolfSSH v1.4.7 was discovered to contain an integer overflow via the function wolfSSH_SFTP_RecvRMDIR.
CVE-2022-35857 · mitre
kvf-admin through 2022-02-12 allows remote attackers to execute arbitrary code because deserialization is mishandled.
CVE-2022-29600 · mitre
The oelib (aka One is Enough Library) extension through 4.1.5 for TYPO3 allows SQL Injection.
CVE-2022-29601 · mitre
The seminars (aka Seminar Manager) extension through 4.1.3 for TYPO3 allows SQL Injection.
CVE-2022-31573 · mitre
The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function i…
CVE-2022-31574 · mitre
The deepaliupadhyay/RealEstate repository through 2018-11-30 on GitHub allows absolute path traversal because the Flask send_file functio…
CVE-2022-31575 · mitre
The duducosmos/livro_python repository through 2018-06-06 on GitHub allows absolute path traversal because the Flask send_file function i…
CVE-2022-31576 · mitre
The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Flask send_file funct…
CVE-2022-31580 · mitre
The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask send_file funct…
CVE-2022-31581 · mitre
The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used un…
CVE-2022-31582 · mitre
The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask send_file function is us…
CVE-2022-31583 · mitre
The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask send_fil…
CVE-2022-31584 · mitre
The stonethree/s3label repository through 2019-08-14 on GitHub allows absolute path traversal because the Flask send_file function is use…
CVE-2022-31572 · mitre
The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask send_file function is use…
CVE-2022-31577 · mitre
The longmaoteamtf/audio_aligner_app repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask send_file fu…
CVE-2022-31579 · mitre
The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is use…
CVE-2022-31585 · mitre
The umeshpatil-dev/Home__internet repository through 2020-08-28 on GitHub allows absolute path traversal because the Flask send_file func…
CVE-2022-31586 · mitre
The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask send_fil…
CVE-2022-31587 · mitre
The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file fun…
CVE-2022-31588 · mitre
The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask send_file function is u…
CVE-2022-25800 · mitre
Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool.
Unknown
CVE-2022-1952 · Unknown Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC
eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload
CVE-2022-1057 · Unknown Pricing Deals for WooCommerce
Pricing Deals for WooCommerce <= 2.0.2.02 - Unauthenticated SQLi
google_android
CVE-2022-20229 · google_android
In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing bounds check.
CVE-2022-20222 · google_android
In read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds check.
CVE-2022-20216 · google_android
android exported is used to set third-party app access permissions, and the default value of intent-filter is true.
CVE-2022-20238 · google_android
'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area), and because the 'vma->vm_page_prot' can…
Siemens
CVE-2022-34819 · Siemens SIMATIC CP 1242-7 V2
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC…
CVE-2022-26649 · Siemens SCALANCE X200-4P IRT
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALAN…
CVE-2021-44222 · Siemens SIMATIC eaSie Core Package
A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00).
LENZE
Schneider Electric
Western Digital
CVE-2022-22997 · Western Digital My Cloud Home
Command Injection Vulnerability on My Cloud Home
Pyramid Solutions
CVE-2022-1737 · Pyramid Solutions EtherNet/IP Adapter Development Kit (EADK)
Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write
Dell
CVE-2020-29506 · Dell Dell BSAFE Crypto-C Micro Edition
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observabl…
CVE-2020-29507 · Dell Dell BSAFE Crypto-C Micro Edition
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.4, and Dell BSAFE Micro Edition Suite, versions before 4.4, contain an Improper In…
CVE-2020-29508 · Dell Dell BSAFE Micro Edition Suite
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper In…
CVE-2020-35163 · Dell Dell BSAFE Crypto-C Micro Edition
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain a Use of Insuf…
CVE-2020-35167 · Dell Dell BSAFE Crypto-C Micro Edition
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable…
CVE-2020-35169 · Dell Dell BSAFE Crypto-C Micro Edition
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper…
CVE-2020-35166 · Dell BSAFE Crypto-C Micro Edition
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable…
CVE-2020-35168 · Dell Dell BSAFE Crypto-C Micro Edition
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable…
microweber
CVE-2022-2368 · microweber microweber/microweber
Authentication Bypass by Spoofing in microweber/microweber
IBM
SourceCodester
CVE-2022-2298 · SourceCodester Clinics Patient Management System