by Kastro CVE-2022-26134 · Atlassian Confluence Data Center
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 643 of 786
Atlassian
codingjoe
Klapp
unspecified
CVE-2020-36542 · unspecified Demokratian
Demokratian install3.php privileges management
CVE-2020-36541 · unspecified Demokratian
Demokratian genera_select.php sql injection
CVE-2020-36539 · unspecified Lógico y Creativo
Lógico y Creativo sql injection
CVE-2020-36540 · unspecified Neetai Tech
Neetai Tech product.php sql injection
GitLab
mitre
CVE-2021-42887 · mitre
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
CVE-2022-32270 · mitre
In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Traversal, leading to…
CVE-2022-32269 · mitre
In Real Player 20.0.8.310, the G2 Control allows injection of unsafe javascript: URIs in local HTTP error pages (displayed by Internet Ex…
CVE-2021-42884 · mitre
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which ca…
CVE-2021-42885 · mitre
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceMac of the file global.so which can…
CVE-2022-32271 · mitre
In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability.
CVE-2022-32511 · mitre
jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable.
CVE-2021-42888 · mitre
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which c…
CVE-2021-42890 · mitre
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which…
CVE-2022-30909 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm.
CVE-2022-30910 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.
CVE-2022-30912 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm.
CVE-2022-30913 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the ipqos_set_bandwidth parameter at /goform/asp…
CVE-2022-30914 · mitre
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateMacClone parameter at /goform/aspForm.
CVE-2022-30927 · mitre
A SQL injection vulnerability exists in Simple Task Scheduling System 1.0 when MySQL is being used as the application database.
CVE-2022-25361 · mitre
WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directorie…
CVE-2022-31462 · mitre
Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be…
Unknown
CVE-2022-1692 · Unknown CP Image Store with Slideshow
CP Image Store with Slideshow < 1.0.68 - Unauthenticated SQLi
CVE-2022-0788 · Unknown WP Fundraising Donation and Crowdfunding Platform
WP Fundraising Donation and Crowdfunding Platform < 1.5.0 - Unauthenticated SQLi
snyk
Apache Software Foundation
CVE-2022-31813 · Apache Software Foundation Apache HTTP Server
mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
CVE-2022-28615 · Apache Software Foundation Apache HTTP Server
Read beyond bounds in ap_strcmp_match()
Dell
emicklei
CVE-2022-1996 · emicklei emicklei/go-restful
Authorization Bypass Through User-Controlled Key in emicklei/go-restful
ITarian
CVE-2022-25152 · ITarian ITarian platform (SAAS / on-premise)
ITarian - Any user with a valid session token can create and execute agent procedures and bypass mandatory approvals
LenelS2
CVE-2022-31479 · LenelS2 LNL-X2210
Remote Code Execution via command injection of the hostname
CVE-2022-31481 · LenelS2 LNL-X2210
Remote Code Execution via buffer overflow in firmware update process
CVE-2022-31483 · LenelS2 LNL-X2210
Arbitrary file write via authenticated OSDP file upload
pjsip
IBM
CVE-2022-31768 · IBM InfoSphere Information Server
IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection.
Schneider Electric
CVE-2022-30234 · Schneider Electric Wiser Smart
A CWE-798: Use of Hard-coded Credentials vulnerability exists that could allow arbitrary code to be executed when root level access is ob…
CVE-2022-30235 · Schneider Electric Wiser Smart
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow unauthorized access when an at…
HCL Software
CVE-2021-27786 · HCL Software HCL OneTest Server
HCL OneTest Server is vulnerable to Cross Origin Resource Sharing: Arbitrary Origin Trusted
Samsung Mobile
CVE-2022-30722 · Samsung Mobile Samsung Mobile Devices
Implicit Intent hijacking vulnerability in Samsung Account prior to SMR Jun-2022 Release 1 allows attackers to bypass user confirmation o…
CVE-2022-30710 · Samsung Mobile Samsung Mobile Devices
Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-30711 · Samsung Mobile Samsung Mobile Devices
Improper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-30713 · Samsung Mobile Samsung Mobile Devices
Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVE-2022-30712 · Samsung Mobile Samsung Mobile Devices