by Kastro CVE-2021-32941 · Annke N48PBB (NVR)
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 647 of 786
Annke
mitre
CVE-2022-28531 · mitre
Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername (aka Userna…
CVE-2022-28927 · mitre
A remote code execution (RCE) vulnerability in Subconverter v0.7.2 allows attackers to execute arbitrary code via crafted config and url…
CVE-2022-30887 · mitre
Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/editP…
CVE-2022-31259 · mitre
The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to bypass access control.
CVE-2022-31267 · mitre
Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as…
CVE-2021-34111 · mitre
Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php.
CVE-2021-37413 · mitre
GRANDCOM DynWEB before 4.2 contains a SQL Injection vulnerability in the admin login interface.
CVE-2022-28104 · mitre
Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary file upload vulnerability.
CVE-2022-28995 · mitre
Rengine v1.0.2 was discovered to contain a remote code execution (RCE) vulnerability via the yaml configuration function.
CVE-2022-29021 · mitre
A buffer overflow vulnerability exists in the razerkbd driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of Ser…
CVE-2022-29022 · mitre
A buffer overflow vulnerability exists in the razeraccessory driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial…
CVE-2022-29023 · mitre
A buffer overflow vulnerability exists in the razermouse driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of S…
CVE-2022-30886 · mitre
School Dormitory Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /dms/admin/rep…
CVE-2021-42654 · mitre
SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbi…
CVE-2022-26632 · mitre
Multi-Vendor Online Groceries Management System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter i…
CVE-2022-26633 · mitre
Simple Student Quarterly Result/Grade System v1.0 was discovered to contain a SQL injection vulnerability via /sqgs/Actions.php.
CVE-2022-28962 · mitre
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=delete_client.
CVE-2022-28993 · mitre
Multi Store Inventory Management System v1.0 allows attackers to perform an account takeover via a crafted POST request.
CVE-2022-30518 · mitre
ChatBot Application with a Suggestion Feature 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /simple…
CVE-2022-28348 · mitre
Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r…
CVE-2022-28349 · mitre
Arm Mali GPU Kernel Driver has a use-after-free: Midgard r28p0 through r29p0 before r30p0, Bifrost r17p0 through r23p0 before r24p0, and…
CVE-2022-28350 · mitre
Arm Mali GPU Kernel Driver allows improper GPU operations in Valhall r29p0 through r36p0 before r37p0 to reach a use-after-free situation.
CVE-2022-28105 · mitre
Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /scbs/vie…
CVE-2022-28106 · mitre
Online Sports Complex Booking System v1.0 was discovered to allow attackers to take over user accounts via a crafted POST request.
CVE-2022-28660 · mitre
The querier component in Grafana Enterprise Logs 1.1.x through 1.3.x before 1.4.0 does not require authentication when X-Scope-OrgID is u…
CVE-2022-28932 · mitre
D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions.
CVE-2022-30454 · mitre
Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_product.
CVE-2022-30455 · mitre
Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_court_rental, id.
Unknown
CVE-2022-0781 · Unknown Nirweb support
Nirweb support < 2.8.2 - Unauthenticated SQLi
CVE-2022-1014 · Unknown WP Contacts Manager
WP Contacts Manager <= 2.2.4 - Unauthenticated SQLi
vmware
CVE-2022-22972 · vmware
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local doma…
CVE-2022-22978 · vmware
In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfig…
Apache Software Foundation
CVE-2022-29599 · Apache Software Foundation Apache Maven
Commandline class shell injection vulnerabilities
polonel
CVE-2022-1770 · polonel polonel/trudesk
Improper Privilege Management in polonel/trudesk
CVE-2022-1775 · polonel polonel/trudesk
Weak Password Requirements in polonel/trudesk
CVE-2022-1752 · polonel polonel/trudesk
Unrestricted Upload of File with Dangerous Type in polonel/trudesk
argoproj
Cognex
CVE-2021-32935 · Cognex In-Sight OPC Server
Cognex In-Sight OPC Server - Deserialization of Untrusted Data
Fieldcomm Group
CVE-2020-16209 · Fieldcomm Group HART-IP Developer Kit
Fieldcomm Group HART-IP and hipserver - Stack-based Buffer Overflow
hpe
rundeck
AVEVA
CVE-2022-1467 · AVEVA AVEVA InTouch Access Anywhere
AVEVA InTouch Access Anywhere Exposure of Resource to Wrong Sphere
Handysoft Co.,Ltd
CVE-2021-26630 · Handysoft Co.,Ltd HANDY Groupware
HANDY Groupware file download and execute vulnerability
Mitsubishi Electric
CVE-2020-14496 · Mitsubishi Electric CPU Module Logging Configuration Tool
Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues
publify
CVE-2022-1810 · publify publify/publify
Authorization Bypass Through User-Controlled Key in publify/publify
CVE-2022-1811 · publify publify/publify