by Kastro CVE-2022-21806 · Anker Eufy Homebase 2
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 640 of 786
Anker
Blynk
Mautic
Microsoft
CVE-2022-30136 · Microsoft Windows Server 2019
Windows Network File System Remote Code Execution Vulnerability
mitre
CVE-2021-41403 · mitre
flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities.
CVE-2022-24562 · mitre
In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write acces…
CVE-2022-31874 · mitre
ASUS RT-N53 3.0.0.4.376.3754 has a command injection vulnerability in the SystemCmd parameter of the apply.cgi interface.
CVE-2021-40903 · mitre
A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in flask server.
CVE-2022-30422 · mitre
Proietti Tech srl Planet Time Enterprise 4.2.0.1,4.2.0.0,4.1.0.0,4.0.0.0,3.3.1.0,3.3.0.0 is vulnerable to Remote code execution via the V…
CVE-2022-30329 · mitre
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices.
CVE-2022-31296 · mitre
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/view_post.php.
CVE-2021-40940 · mitre
Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability.
CVE-2021-41487 · mitre
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'.
CVE-2022-31382 · mitre
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.…
CVE-2022-31383 · mitre
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php.
CVE-2022-31384 · mitre
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php.
CVE-2022-31784 · mitre
A vulnerability in the management interface of MiVoice Business through 9.3 PR1 and MiVoice Business Express through 8.0 SP3 PR3 could al…
CVE-2022-34005 · mitre
An issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050.
CVE-2021-41411 · mitre
drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java.
CVE-2021-41408 · mitre
VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file and "user" parameter.
CVE-2021-41654 · mitre
SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue paramet…
CVE-2021-45024 · mitre
ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entit…
CVE-2022-31355 · mitre
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=.
CVE-2022-31356 · mitre
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/store/index.php?view=edit&id=.
CVE-2022-31357 · mitre
Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=.
CVE-2022-31941 · mitre
Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via \rdms\admin?page=user\manage_user&id=.
CVE-2022-32101 · mitre
kkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid parameter at /template/wapian/vlist.php.
CVE-2022-32301 · mitre
YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.clas…
CVE-2021-41418 · mitre
AriaNg v0.1.0~v1.2.2 is affected by an incorrect access control vulnerability through not authenticating visitors' access rights.
google_android
CVE-2022-20210 · google_android
The UE and the EMM communicate with each other using NAS messages.
CVE-2022-20171 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-215565667References: N/A
CVE-2022-20173 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-207116951References: N/A
CVE-2022-20191 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A
CVE-2022-20160 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-210083655References: N/A
CVE-2022-20164 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A
CVE-2022-20167 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-204956204References: N/A
CVE-2022-20170 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A
Cisco
CVE-2022-20825 · Cisco Cisco Small Business RV Series Router Firmware
Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability
CVE-2022-20798 · Cisco Cisco Email Security Appliance (ESA)
Cisco Email Security Appliance and Cisco Secure Email and Web Manager External Authentication Bypass Vulnerability
CVE-2022-20733 · Cisco Cisco Identity Services Engine Software
Cisco Identity Services Engine Authentication Bypass Vulnerability
ca
CVE-2022-33750 · ca
CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker…
CVE-2022-33752 · ca
CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote…
CVE-2022-33754 · ca
CA Automic Automation 12.2 and 12.3 contain an insufficient input validation vulnerability in the Automic agent that could allow a remote…
Splunk, Inc
CVE-2022-32158 · Splunk, Inc Splunk Enterprise
Splunk Enterprise deployment servers allow client publishing of forwarder bundles
CVE-2022-32151 · Splunk, Inc Splunk Enterprise
Splunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by default
IBM
inventree
CVE-2022-2111 · inventree inventree/inventree
Unrestricted Upload of File with Dangerous Type in inventree/inventree
CVE-2022-2112 · inventree inventree/inventree