by Kastro CVE-2022-31003 · freeswitch sofia-sip
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 645 of 786
freeswitch
mitre
CVE-2022-24702 · mitre
An issue was discovered in WinAPRS 2.9.0.
CVE-2022-25237 · mitre
Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the R…
CVE-2022-30512 · mitre
School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/payment_history.php:31.
CVE-2022-30808 · mitre
elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.
CVE-2021-42872 · mitre
TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.
CVE-2022-29776 · mitre
Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a stack overflow via the component Des…
CVE-2022-29777 · mitre
Onlyoffice Document Server v6.0.0 and below and Core 6.1.0.26 and below were discovered to contain a heap overflow via the component Desk…
CVE-2022-30506 · mitre
An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP…
CVE-2022-30511 · mitre
School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/view_details.php:4.
CVE-2020-28246 · mitre
A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0.
CVE-2021-44095 · mitre
A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker t…
CVE-2022-28605 · mitre
Hardcoded admin token in SoundBar apps in Linkplay SDK 1.00 allows remote attackers to gain admin privilege access in linkplay antifactory
CVE-2022-31799 · mitre
Bottle before 0.12.20 mishandles errors during early request binding.
CVE-2022-28945 · mitre
An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file.
CVE-2022-29712 · mitre
LibreNMS v22.3.0 was discovered to contain multiple command injection vulnerabilities via the service_ip, hostname, and service_param par…
CVE-2022-30352 · mitre
phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "auth_user" parameter in index…
CVE-2022-30423 · mitre
Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the sy…
CVE-2022-30478 · mitre
Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \search_product.php via the keyword parameters.
CVE-2022-30481 · mitre
Food-order-and-table-reservation-system- 1.0 is vulnerable to SQL Injection in categorywise-menu.php via the catid parameters.
CVE-2021-44096 · mitre
EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profile_action - update_user.
CVE-2021-44097 · mitre
EGavilan Media Contact-Form-With-Messages-Entry-Management 1.0 is vulnerable to SQL Injection via Addmessage.php.
CVE-2021-44098 · mitre
EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php.
CVE-2022-30324 · mitre
HashiCorp Nomad and Nomad Enterprise version 0.2.0 up to 1.3.0 were impacted by go-getter vulnerabilities enabling privilege escalation t…
CVE-2022-30490 · mitre
Badminton Center Management System V1.0 is vulnerable to SQL Injection via parameter 'id' in /bcms/admin/court_rentals/update_status.php.
CVE-2022-24239 · mitre
ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp.
CVE-2022-30797 · mitre
Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php.
CVE-2022-30809 · mitre
elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=.
CVE-2022-30810 · mitre
elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php.
CVE-2022-30813 · mitre
elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php.
CVE-2022-30814 · mitre
elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.
CVE-2022-30815 · mitre
elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=
CVE-2022-30816 · mitre
elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.
CVE-2022-30817 · mitre
Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php.
CVE-2022-31327 · mitre
Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=.
CVE-2022-31328 · mitre
Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=.
CVE-2022-31329 · mitre
Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php.
CVE-2022-31335 · mitre
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=.
CVE-2022-31336 · mitre
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php.
CVE-2022-31337 · mitre
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=.
CVE-2022-31338 · mitre
Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=.
CVE-2022-31340 · mitre
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.
CVE-2022-24240 · mitre
ACEweb Online Portal 3.5.065 was discovered to contain a SQL injection vulnerability via the criteria parameter in showschedule.awp.
Keysight
CVE-2022-1660 · Keysight N6854A Geolocation server and N6841A RF Sensor software
Keysight N6854A Geolocation server and N6841A RF Sensor software
Siemens
CVE-2022-29875 · Siemens Biograph Horizon PET/CT Systems
A vulnerability has been identified in Biograph Horizon PET/CT Systems (All VJ30 versions < VJ30C-UD01), MAGNETOM Family (NUMARIS X: VA12…
Cisco
CVE-2022-20797 · Cisco Cisco Stealthwatch Enterprise
Cisco Secure Network Analytics Remote Code Execution Vulnerability
polonel
CVE-2022-1931 · polonel polonel/trudesk
Incorrect Synchronization in polonel/trudesk
CVE-2022-1947 · polonel polonel/trudesk