by Kastro CVE-2022-1768 · davidfcarr RSVPMaker
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 642 of 786
davidfcarr
mitre
CVE-2021-41749 · mitre
In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injec…
CVE-2022-29013 · mitre
A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary comma…
CVE-2022-31788 · mitre
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.
CVE-2022-32272 · mitre
OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorre…
CVE-2022-30877 · mitre
The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party.
CVE-2022-31827 · mitre
MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the function performFetchRequest at HTTPFetcher.php.
CVE-2022-31830 · mitre
Kity Minder v1.3.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the init function at ImageCapture.class.php.
CVE-2022-30882 · mitre
pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor.
CVE-2022-31313 · mitre
api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.
CVE-2022-30915 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateSnat parameter at /goform/aspForm.
CVE-2022-30916 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnetDebug parameter at /goform/aspF…
CVE-2022-30917 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddWlanMacList parameter at /goform/aspForm.
CVE-2022-30918 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTelnet parameter at /goform/aspForm.
CVE-2022-30919 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID_5G parameter at /goform/aspForm.
CVE-2022-30920 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Edit_BasicSSID parameter at /goform/aspForm.
CVE-2022-30921 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetMobileAPInfoById parameter at /goform/asp…
CVE-2022-30922 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditWlanMacList parameter at /goform/aspForm.
CVE-2022-30923 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at /go…
CVE-2022-30924 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the SetAPWifiorLedInfoById parameter at /goform/…
CVE-2022-30925 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the AddMacList parameter at /goform/aspForm.
CVE-2022-30926 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the EditMacList parameter at /goform/aspForm.
CVE-2021-40589 · mitre
ZAngband zangband-data 2.7.5 is affected by an integer underflow vulnerability in src/tk/plat.c through the variable fileheader.bfOffBits.
CVE-2021-41755 · mitre
dynamicMarkt <= 3.10 is affected by SQL injection in the kat1 parameter of index.php.
CVE-2021-41754 · mitre
dynamicMarkt <= 3.10 is affected by SQL injection in the parent parameter of index.php.
CVE-2021-41756 · mitre
dynamicMarkt <= 3.10 is affected by SQL injection in the kat parameter of index.php.
CVE-2022-32563 · mitre
An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2.
CVE-2022-31386 · mitre
A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbit…
CVE-2022-31390 · mitre
Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Update function in app/admin/c/Templ…
CVE-2022-31393 · mitre
Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Index function in app/admin/c/Plugin…
snyk
Unknown
CVE-2022-0786 · Unknown KiviCare – Clinic & Patient Management System (EHR)
KiviCare < 2.3.9 - Unauthenticated SQLi
CVE-2022-0827 · Unknown Bestbooks
Bestbooks <= 2.6.3 - Unauthenticated SQLi
CVE-2022-0885 · Unknown Member Hero
Member Hero <= 1.0.9 - Unauthenticated RCE
gogs
CVE-2022-1986 · gogs gogs/gogs
OS Command Injection in gogs/gogs
CVE-2022-1992 · gogs gogs/gogs
Path Traversal in gogs/gogs
Apache Software Foundation
CVE-2021-37404 · Apache Software Foundation Apache Hadoop
Heap buffer overflow in libhdfs native library
Rakuten Mobile, Inc.
Dell
francoisjacquet
CVE-2022-2067 · francoisjacquet francoisjacquet/rosariosis
SQL Injection in francoisjacquet/rosariosis
CVE-2022-2036 · francoisjacquet francoisjacquet/rosariosis
Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis
istio
nocodb
CVE-2022-2062 · nocodb nocodb/nocodb
Generation of Error Message Containing Sensitive Information in nocodb/nocodb
CVE-2022-2063 · nocodb nocodb/nocodb
Improper Privilege Management in nocodb/nocodb
CVE-2022-2064 · nocodb nocodb/nocodb