by Kastro CVE-2022-26082 · Open Automation Software OAS Platform
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 646 of 786
Open Automation Software
Dell
CVE-2022-24422 · Dell Integrated Dell Remote Access Controller 9
Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability.
CVE-2022-26857 · Dell OpenManage Enterprise
Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability.
mitre
CVE-2022-29337 · mitre
C-DATA FD702XW-X-R430 v2.1.13_X001 was discovered to contain a command injection vulnerability via the va_cmd parameter in formlanipv6.
CVE-2022-29632 · mitre
An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arb…
CVE-2022-29660 · mitre
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del.
CVE-2022-30521 · mitre
The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR89…
CVE-2022-29361 · mitre
Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted…
CVE-2022-30510 · mitre
School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/daily_collection_report.php:59.
CVE-2022-30493 · mitre
In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing r…
CVE-2022-30595 · mitre
libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files.
CVE-2021-45914 · mitre
In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request.
CVE-2021-45915 · mitre
In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value.
CVE-2022-26945 · mitre
go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response…
CVE-2022-29379 · mitre
Nginx NJS v0.7.3 was discovered to contain a stack overflow in the function njs_default_module_loader at /src/njs/src/njs_module.c.
CVE-2022-29730 · mitre
USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded credentials for its highest privileged account.
CVE-2022-30516 · mitre
In Hospital-Management-System v1.0, the editid parameter in the doctor.php page is vulnerable to SQL injection attacks.
CVE-2022-29650 · mitre
Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/f…
CVE-2022-30472 · mitre
Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat
CVE-2022-30474 · mitre
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a heap overflow in the httpd module when handling /goform/savePa…
CVE-2022-30476 · mitre
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling…
CVE-2022-30477 · mitre
Tenda AC Series Router AC18_V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling…
CVE-2022-23775 · mitre
TrueStack Direct Connect 1.4.7 has Incorrect Access Control.
CVE-2022-29334 · mitre
An issue in H v1.0 allows attackers to bypass authentication via a session replay attack.
CVE-2022-29633 · mitre
An access control issue in Linglong v1.0 allows attackers to access the background of the application via a crafted cookie.
CVE-2022-30461 · mitre
Water-billing-management-system v1.0 is vulnerable to SQL Injection via /wbms/classes/Master.php?f=delete_client, id
CVE-2022-30495 · mitre
In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attacke…
CVE-2022-30500 · mitre
Jfinal cms 5.1.0 is vulnerable to SQL Injection.
CVE-2022-30838 · mitre
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=update_application_status
CVE-2022-28862 · mitre
In Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in dwr/call/plaincall/workflow.runWorkflowRule.dwr.
CVE-2022-30584 · mitre
Archer Platform 6.3 before 6.11 (6.11.0.0) contains an Improper Access Control Vulnerability within SSO ADFS functionality that could pot…
Apple
CVE-2022-26711 · Apple watchOS
An integer overflow issue was addressed with improved input validation.
CVE-2022-26708 · Apple macOS
This issue was addressed with improved checks.
CVE-2022-26775 · Apple Security Update - Catalina
An integer overflow was addressed with improved input validation.
CVE-2022-26776 · Apple macOS
This issue was addressed with improved checks.
CVE-2022-26723 · Apple macOS
A memory corruption issue was addressed with improved input validation.
CVE-2022-26693 · Apple macOS
This issue was addressed with improved checks.
CVE-2022-26694 · Apple macOS
This issue was addressed with improved checks.
Debian
hackerone
azure-rtos
LCDS—Leão Consultoria e Desenvolvimento de Sistemas Ltda ME
CVE-2021-32989 · LCDS—Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA
LCDS LAquis SCADA - Cross-site Scripting
causefx
CVE-2022-1909 · causefx causefx/organizr
Cross-site Scripting (XSS) - Stored in causefx/organizr
IBM
HCL Software
CVE-2021-27779 · HCL Software HCL VersionVault Express