by Kastro CVE-2022-31084 · LDAPAccountManager lam
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 638 of 786
LDAPAccountManager
Apache Software Foundation
CVE-2022-32532 · Apache Software Foundation Apache Shiro
Authentication Bypass Vulnerability
glpi-project
CVE-2022-31056 · glpi-project glpi
SQL injection with _actor parameter in GLPI
CVE-2022-31061 · glpi-project glpi
SQL injection on login page in GLPI
CVE-2022-31082 · glpi-project glpi-inventory-plugin
SQL Injection via package deployment tasks in glpi-inventory-plugin
hikvision
CVE-2022-28171 · hikvision DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D
The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability.
mitre
CVE-2022-31885 · mitre
Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts.
CVE-2022-32994 · mitre
Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload.
CVE-2022-32995 · mitre
Halo CMS v1.5.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the template remote download function.
CVE-2022-33107 · mitre
ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\S…
CVE-2022-32092 · mitre
D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi.
CVE-2021-40643 · mitre
EyesOfNetwork before 07-07-2021 has a Remote Code Execution vulnerability on the mail options configuration page.
CVE-2021-40597 · mitre
The firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with Administrator username and password.
CVE-2022-30885 · mitre
The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party.
CVE-2022-32998 · mitre
The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request pack…
CVE-2022-32999 · mitre
The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package.
CVE-2022-33000 · mitre
The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package.
CVE-2022-33001 · mitre
The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package.
CVE-2022-33002 · mitre
The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package.
CVE-2022-33003 · mitre
The watools package in PyPI v0.0.1 to v0.0.8 was discovered to contain a code execution backdoor via the request package.
CVE-2022-33004 · mitre
The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package.
CVE-2022-34053 · mitre
The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package.
CVE-2022-34054 · mitre
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package.
CVE-2022-34055 · mitre
The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package.
CVE-2022-34056 · mitre
The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package.
CVE-2022-34059 · mitre
The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package.
CVE-2022-34060 · mitre
The Togglee package in PyPI version v0.0.8 was discovered to contain a code execution backdoor.
CVE-2022-34061 · mitre
The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor.
CVE-2022-34065 · mitre
The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor.
CVE-2022-34066 · mitre
The Texercise package in PyPI v0.0.1 to v0.0.12 was discovered to contain a code execution backdoor.
CVE-2020-19896 · mitre
File inclusion vulnerability in Minicms v1.9 allows remote attackers to execute arbitary PHP code via post-edit.php.
CVE-2022-31887 · mitre
Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's password in the orga…
CVE-2022-34132 · mitre
Jorani v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at application/controllers/Leaves.php.
CVE-2022-34057 · mitre
The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution backdoor via the request package.
CVE-2022-34064 · mitre
The Zibal package in PyPI v1.0.0 was discovered to contain a code execution backdoor.
CVE-2022-33128 · mitre
RG-EG series gateway EG350 EG_RGOS 11.1(6) was discovered to contain a SQL injection vulnerability via the function get_alarmAction at /a…
Unknown
CVE-2022-1574 · Unknown HTML2WP
HTML2WP <= 1.0.0 - Unauthenticated Arbitrary File Upload
CVE-2022-1953 · Unknown Product Configurator for WooCommerce
Product Configurator for WooCommerce < 1.2.32 - Unauthenticated Arbitrary File Deletion
Siemens
ionicabizau
CVE-2022-2216 · ionicabizau ionicabizau/parse-url
Server-Side Request Forgery (SSRF) in ionicabizau/parse-url
CVE-2022-2217 · ionicabizau ionicabizau/parse-url
Cross-site Scripting (XSS) - Generic in ionicabizau/parse-url
CVE-2022-2218 · ionicabizau ionicabizau/parse-url
Cross-site Scripting (XSS) - Stored in ionicabizau/parse-url
weaveworks
CVE-2022-31098 · weaveworks weave-gitops