by Kastro CVE-2022-33171 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 637 of 786
mitre
CVE-2022-32032 · mitre
Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the deviceList parameter in the function formAddMacfilterRule.
CVE-2022-32386 · mitre
Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.
CVE-2022-34265 · mitre
An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6.
CVE-2022-32094 · mitre
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php.
CVE-2022-34913 · mitre
md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed.
CVE-2021-41506 · mitre
Xiaongmai AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, HI3518_50H10L_S39 V4.0…
CVE-2022-32385 · mitre
Tenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of arbitrary code (remote).
CVE-2021-37778 · mitre
There is a buffer overflow in gps-sdr-sim v1.0 when parsing long command line parameters, which can lead to DoS or code execution.
CVE-2021-40663 · mitre
deep.assign npm package 0.0.0-alpha.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Poll…
CVE-2022-31836 · mitre
The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to cross directory risk.
CVE-2022-32093 · mitre
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php.
CVE-2022-32095 · mitre
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at orders.php.
CVE-2022-32310 · mitre
An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a crafted POST request…
CVE-2022-32413 · mitre
An arbitrary file upload vulnerability in Dice v4.2.0 allows attackers to execute arbitrary code via a crafted file.
CVE-2022-34972 · mitre
So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the att_value_id , manu_value_id , opt_val…
CVE-2022-31856 · mitre
Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemez_newsletter_email parameter at /index.php.
CVE-2022-31943 · mitre
MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability.
CVE-2022-32295 · mitre
On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by th…
CVE-2022-32311 · mitre
Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /isms/admin/stock…
CVE-2022-32383 · mitre
Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the AdvSetMacMtuWan function.
CVE-2021-32428 · mitre
SQL Injection vulnerability in viaviwebtech Android EBook App (Books App, PDF, ePub, Online Book Reading, Download Books) 10 via the auth…
CVE-2022-32324 · mitre
PDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src/pdfalto.cc.
CVE-2021-43702 · mitre
ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS).
Robustel
CVE-2022-33312 · Robustel R1510
Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0.
CVE-2022-33313 · Robustel R1510
Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0.
CVE-2022-33314 · Robustel R1510
Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.3.0.
CVE-2022-33325 · Robustel R1510
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0.
CVE-2022-33326 · Robustel R1510
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0.
CVE-2022-33327 · Robustel R1510
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0.
CVE-2022-33328 · Robustel R1510
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0.
CVE-2022-33329 · Robustel R1510
Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0.
CVE-2022-28127 · Robustel R1510
A data removal vulnerability exists in the web_server /action/remove/ API functionality of Robustel R1510 3.3.0.
CVE-2022-32585 · Robustel R1510
A command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0.
GitLab
Apache Software Foundation
CVE-2022-33980 · Apache Software Foundation Apache Commons Configuration
Apache Commons Configuration insecure interpolation defaults
CVE-2022-32533 · Apache Software Foundation Apache Portals
Apache Portals Jetspeed XSS, CSRF, SSRF, and XXE issues
OpenSSL
snyk
MediaTek, Inc.
CVE-2022-20083 · MediaTek, Inc. MT2731, MT2735, MT6297, MT6725, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6755, MT6757, MT6757P, MT6758, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769T, MT6769Z, MT6771, MT6775, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6789, MT6797, MT6799, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT8666, MT8667, MT8675, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797
In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check.
CVE-2022-21744 · MediaTek, Inc. MT2731, MT2735, MT6297, MT6725, MT6735, MT6737, MT6739, MT6750, MT6750S, MT6755, MT6757, MT6757P, MT6758, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769T, MT6769Z, MT6771, MT6775, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6789, MT6797, MT6799, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT8666, MT8667, MT8675, MT8735A, MT8735B, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797
In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check.
NVIDIA
CVE-2022-31604 · NVIDIA NVIDIA FLARE
NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via…
CVE-2022-31605 · NVIDIA NVIDIA FLARE
NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of ya…
heroiclabs
CVE-2022-2321 · heroiclabs heroiclabs/nakama
Improper Restriction of Excessive Authentication Attempts in heroiclabs/nakama
IBM
OMRON Corporation
CVE-2022-34151 · OMRON Corporation Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series
Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine auto…
Distributed Data Systems
CVE-2022-2253 · Distributed Data Systems WebHMI