by Kastro CVE-2022-31053 · biscuit-auth biscuit
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 641 of 786
biscuit-auth
mitre
CVE-2022-31446 · mitre
Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability via the Mac paramet…
CVE-2022-33174 · mitre
Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypass in the web inte…
CVE-2022-31311 · mitre
An issue in adm.cgi of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to execute arbitrary commands via a crafted POST request.
CVE-2021-40212 · mitre
An exploitable out-of-bounds write vulnerability in PotPlayer 1.7.21523 build 210729 may lead to code execution, information disclosure,…
CVE-2021-41662 · mitre
The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file u…
CVE-2021-42675 · mitre
Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory.
CVE-2022-33175 · mitre
Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 have an insecure permissions setting on the user.t…
CVE-2021-41661 · mitre
Church Management System version 1.0 is affected by a SQL anjection vulnerability through creating a user with a PHP file as an avatar im…
CVE-2022-32336 · mitre
Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/view_menu.php?id=.
CVE-2022-32337 · mitre
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/admin/patients/manage_patient.php?id=.
CVE-2022-32352 · mitre
Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via /hprms/classes/Master.php?f=delete_patient_admission.
CVE-2022-31273 · mitre
An issue in TopIDP3000 Topsec Operating System tos_3.3.005.665b.15_smpidp allows attackers to perform a brute-force attack via a crafted…
CVE-2022-32559 · mitre
An issue was discovered in Couchbase Server before 7.0.4.
CVE-2021-40604 · mitre
A Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbit…
CVE-2022-32328 · mitre
Fast Food Ordering System v1.0 is vulnerable to Delete any file.
Apache Software Foundation
CVE-2022-25167 · Apache Software Foundation Apache Flume
Apache Flume vulnerable to a JNDI RCE in JMSSource
google_android
CVE-2022-20127 · google_android
In ce_t4t_data_cback of ce_t4t.cc, there is a possible out of bounds write due to a double free.
CVE-2022-20130 · google_android
In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow.
CVE-2022-20140 · google_android
In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check.
CVE-2022-20145 · google_android
In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack.
Festo
CVE-2022-30308 · Festo Controller CECC-X-M1 (4407603)
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CVE-2022-30309 · Festo Controller CECC-X-M1 (4407603)
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CVE-2022-30310 · Festo Controller CECC-X-M1 (4407603)
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
CVE-2022-30311 · Festo Controller CECC-X-M1 (4407603)
FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability
SAP SE
Siemens
CVE-2022-32262 · Siemens SINEMA Remote Connect Server
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).
CVE-2022-30230 · Siemens SICAM GridEdge (Classic)
A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6).
CVE-2022-32251 · Siemens SINEMA Remote Connect Server
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).
CVE-2022-32260 · Siemens SINEMA Remote Connect Server
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).
huawei
CVE-2021-40036 · huawei
The bone voice ID TA has a memory overwrite vulnerability.
CVE-2022-29797 · huawei
There is a buffer overflow vulnerability in CV81-WDM FW 01.70.49.29.46.
CVE-2022-31760 · Huawei HarmonyOS
Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services.
Qualcomm, Inc.
CVE-2022-25651 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer…
CVE-2021-30341 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon C…
CVE-2021-35081 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapd…
CVE-2021-35104 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Sna…
CVE-2022-22086 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute,…
CVE-2022-22087 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snap…
CVE-2021-35083 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon…
CVE-2021-30342 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Sna…
CVE-2021-30343 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Sna…
CVE-2021-30347 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received…
CVE-2021-35082 · Qualcomm, Inc. Snapdragon Industrial IOT
Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has…
CVE-2021-30339 · Qualcomm, Inc. Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industria…
CVE-2021-35090 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile