by Kastro CVE-2022-2068 · OpenSSL OpenSSL
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 639 of 786
OpenSSL
mitre
CVE-2022-29775 · mitre
iSpyConnect iSpy v7.2.2.0 allows attackers to bypass authentication via a crafted URL.
CVE-2022-29774 · mitre
iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal.
CVE-2021-39409 · mitre
A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be auth…
CVE-2022-26147 · mitre
The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection.
CVE-2022-31374 · mitre
An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code vi…
CVE-2022-31794 · mitre
An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04.
CVE-2022-31795 · mitre
An issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04.
CVE-2022-32996 · mitre
The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package.
CVE-2022-32997 · mitre
The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package.
CVE-2021-40954 · mitre
Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code.
CVE-2022-33127 · mitre
The function that calls the diff tool in Diffy 3.4.1 does not properly handle double quotes in a filename when run in a windows environment.
CVE-2022-31361 · mitre
Docebo Community Edition v4.0.5 and below was discovered to contain a SQL injection vulnerability.
CVE-2022-31787 · mitre
IdeaTMS 2022 is vulnerable to SQL Injection via the PATH_INFO
CVE-2022-32554 · mitre
Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity/…
vmware
IBM
CVE-2022-31767 · IBM CICS TX Advanced
IBM CICS TX Standard and Advanced 11.1 could allow a remote attacker to execute arbitrary commands on the system by sending a specially c…
CVE-2021-38945 · IBM Cognos Analytics
IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by improper content valid…
CVE-2022-22317 · IBM Curam Social Program Management
IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to i…
CVE-2022-22318 · IBM Curam Social Program Management
IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to i…
Xi S&D Inc.
CVE-2021-26638 · Xi S&D Inc. S&D smarthome (smartcare)
Xi Smarthome wallpad authentication bypass vulnerability
OFFIS
CVE-2022-2119 · OFFIS DCMTK
OFFIS DCMTK Path Traversal
CVE-2022-2120 · OFFIS DCMTK
OFFIS DCMTK Path Traversal
polonel
CVE-2022-2128 · polonel polonel/trudesk
Unrestricted Upload of File with Dangerous Type in polonel/trudesk
Bosch
CVE-2022-32534 · Bosch PRA-ES8P2S
OS Command Injection
CVE-2022-32535 · Bosch PRA-ES8P2S
Web server runs as root
Illumina
CVE-2022-1517 · Illumina NextSeq 550Dx
3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250
CVE-2022-1518 · Illumina NextSeq 550Dx
3.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22
CVE-2022-1519 · Illumina NextSeq 550Dx
LRM does not restrict the types of files that can be uploaded to the affected product.
CVE-2022-1521 · Illumina NextSeq 550Dx
3.2.4 IMPROPER ACCESS CONTROL CWE-284
Secheron
CVE-2022-1668 · Secheron SEPCOS Control and Protection Relay firmware package
Secheron SEPCOS Control and Protection Relay
CVE-2022-2103 · Secheron SEPCOS Control and Protection Relay firmware package
Secheron SEPCOS Control and Protection Relay
CVE-2022-2104 · Secheron SEPCOS Control and Protection Relay firmware package
Secheron SEPCOS Control and Protection Relay
CVE-2022-2105 · Secheron SEPCOS Control and Protection Relay firmware package
Secheron SEPCOS Control and Protection Relay
CVE-2022-2102 · Secheron SEPCOS Control and Protection Relay firmware package
Secheron SEPCOS Control and Protection Relay
Shina System Co.,Ltd
CVE-2021-26637 · Shina System Co.,Ltd SiHAS firmware
SiHAS Improper Authentication vulnerability
Cisco
CVE-2022-20829 · Cisco Cisco Adaptive Security Appliance (ASA) Software
Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability
hackerone
CVE-2022-21829 · hackerone
Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from those zip files whic…
CVE-2022-30117 · hackerone
Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 allow traversal in /index.php/ccm/system/file/upload which could result in…
hpe
PHOENIX CONTACT
CODESYS
CVE-2022-31802 · CODESYS CODESYS Gateway Server V2
Partial string comparison in CODESYS gateway server
CVE-2022-31806 · CODESYS CODESYS PLCWinNT