by Kastro CVE-2022-31137 · hap-wi roxy-wi
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 636 of 786
hap-wi
Siemens
CVE-2022-32207 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a…
mitre
CVE-2022-25046 · mitre
A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request.
CVE-2022-32054 · mitre
Tenda AC10 US_AC10V1.0RTL_V15.03.06.26_multi_TD01 was discovered to contain a remote code execution (RCE) vulnerability via the lanIp par…
CVE-2022-32449 · mitre
TOTOLINK EX300_V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageC…
CVE-2022-35411 · mitre
rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent.
CVE-2022-34598 · mitre
The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary commands.
CVE-2021-29281 · mitre
File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin whi…
CVE-2022-34592 · mitre
Wavlink WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability via the function obtw.
CVE-2022-32294 · mitre
Zimbra Collaboration Open Source 8.8.15 does not encrypt the initial-login randomly created password (from the "zmprove ca" command).
CVE-2022-34595 · mitre
Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function setipv6status.
CVE-2022-34596 · mitre
Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function WanParameterSetting.
CVE-2022-34597 · mitre
Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting.
CVE-2022-31501 · mitre
The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is u…
CVE-2022-31502 · mitre
The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask send_file function is use…
CVE-2022-31503 · mitre
The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask send_file function is used uns…
CVE-2022-31504 · mitre
The ChangeWeDer/BaiduWenkuSpider_flaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask send_fi…
CVE-2022-31506 · mitre
The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is us…
CVE-2022-31507 · mitre
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsaf…
CVE-2022-31508 · mitre
The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask send_file function is used un…
CVE-2022-31510 · mitre
The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is…
CVE-2022-32056 · mitre
Online Accreditation Management v1.0 was discovered to contain a SQL injection vulnerability via the USERNAME parameter at process.php.
CVE-2022-33047 · mitre
OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c.
CVE-2022-34914 · mitre
Webswing before 22.1.3 allows X-Forwarded-For header injection.
CVE-2021-35283 · mitre
SQL Injection vulnerability in product_admin.php in atoms183 CMS 1.0, allows attackers to execute arbitrary commands via the Name, Fname,…
CVE-2022-31505 · mitre
The cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function…
CVE-2022-31509 · mitre
The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask send_file function is us…
CVE-2022-31511 · mitre
The AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal because the Flask send_file function is us…
CVE-2022-31512 · mitre
The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask send_file function is used…
CVE-2022-31513 · mitre
The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask send_file function is used…
CVE-2022-31514 · mitre
The Caoyongqi912/Fan_Platform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function…
CVE-2022-31515 · mitre
The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVE-2022-31516 · mitre
The Harveyzyh/Python repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used…
CVE-2022-31517 · mitre
The HolgerGraef/MSM repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used u…
CVE-2022-31518 · mitre
The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because th…
CVE-2022-31519 · mitre
The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used uns…
CVE-2022-31520 · mitre
The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask send_file fu…
CVE-2022-31521 · mitre
The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask send_file function is used u…
CVE-2022-31522 · mitre
The NotVinay/karaokey repository through 2019-12-11 on GitHub allows absolute path traversal because the Flask send_file function is used…
CVE-2022-31523 · mitre
The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used un…
CVE-2022-31524 · mitre
The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_file functio…
redhat
Cisco
CVE-2022-20812 · Cisco Cisco TelePresence Video Communication Server (VCS) Expressway
Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
CVE-2022-20813 · Cisco Cisco TelePresence Video Communication Server (VCS) Expressway
Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
Dell
CVE-2022-33936 · Dell Cloud Mobility for Dell Storage
Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability.
symantec
hpe
The Eclipse Foundation
CVE-2021-41037 · The Eclipse Foundation Eclipse Equinox p2