by Kastro CVE-2022-29622 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 648 of 786
mitre
CVE-2022-24108 · mitre
The Skyoftech So Listing Tabs module 2.2.0 for OpenCart allows a remote attacker to inject a serialized PHP object via the setting parame…
CVE-2022-28956 · mitre
An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.
CVE-2022-30011 · mitre
In HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL injection vulnerability.
CVE-2022-30055 · mitre
Prime95 30.7 build 9 suffers from a Buffer Overflow vulnerability that could lead to Remote Code Execution.
CVE-2021-42897 · mitre
A remote command execution (RCE) vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php.
CVE-2022-29351 · mitre
An arbitrary file upload vulnerability in the file upload module of Tiddlywiki5 v5.2.2 allows attackers to execute arbitrary code via a c…
CVE-2022-29354 · mitre
An arbitrary file upload vulnerability in the file upload module of Keystone v4.2.1 allows attackers to execute arbitrary code via a craf…
CVE-2022-30105 · mitre
In Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp, which is accessible before and after configuring the device,…
CVE-2022-30767 · mitre
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check,…
CVE-2021-33318 · mitre
An Input Validation Vulnerability exists in Joel Christner .NET C# packages WatsonWebserver, IpMatcher 1.0.4.1 and below (IpMatcher) and…
CVE-2022-28929 · mitre
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the delid parameter at viewtreatmentrecord.php.
CVE-2022-29353 · mitre
An arbitrary file upload vulnerability in the file upload module of Graphql-upload v13.0.0 allows attackers to execute arbitrary code via…
CVE-2022-29644 · mitre
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for the telnet servi…
CVE-2022-29645 · mitre
TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a hard coded password for root stored in t…
CVE-2022-28930 · mitre
ERP-Pro v3.7.5 was discovered to contain a SQL injection vulnerability via the component /base/SysEveMenuAuthPointMapper.xml..
CVE-2022-30052 · mitre
In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks.
CVE-2022-30053 · mitre
In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks.
CVE-2022-30054 · mitre
In Covid 19 Travel Pass Management 1.0, the code parameter is vulnerable to SQL injection attacks.
CVE-2022-30765 · mitre
Calibre-Web before 0.6.18 allows user table SQL Injection.
Unknown
CVE-2022-0867 · Unknown Pricing Table Plugin
ARPrice Lite < 3.6.1 - Unauthenticated SQLi
CVE-2022-1386 · Unknown Fusion Builder
Fusion Builder < 3.6.2 - Unauthenticated SSRF
fedora
CVE-2022-30600 · fedora
A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed.
CVE-2022-30599 · fedora
A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria.
hpe
CVE-2022-23657 · hpe
A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and bel…
CVE-2022-23658 · hpe
A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and bel…
CVE-2022-23660 · hpe
A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and bel…
CVE-2022-28617 · hpe
A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0.
CVE-2022-23661 · hpe
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9…
CVE-2022-23662 · hpe
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9…
CVE-2022-23663 · hpe
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9…
CVE-2022-23664 · hpe
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9…
CVE-2022-23665 · hpe
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9…
CVE-2022-23666 · hpe
A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9…
CVE-2022-28616 · hpe
A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0.
Weintek
CVE-2021-27446 · Weintek cMT-SVR-1xx/2xx
Weintek EasyWeb cMT Code Injection
CVE-2021-27444 · Weintek cMT-SVR-1xx/2xx
Weintek EasyWeb cMT Improper Access Control
CVE-2021-27442 · Weintek cMT-SVR-1xx/2xx
Weintek EasyWeb cMT Cross-site Scripting
Cambium Networks
CVE-2022-1360 · Cambium Networks cnMaestro
Cambium Networks cnMaestro OS Command Injection
CVE-2022-1357 · Cambium Networks cnMaestro
Cambium Networks cnMaestro OS Command Injection
FUJITSU LIMITED
CVE-2022-29516 · FUJITSU LIMITED IPCOM EX2 series, IPCOM EX series, IPCOM VE2 series, and IPCOM VA2/VE1 series
The web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100, 3200, 3500), IPCOM EX2 SC(1100, 3200, 3500)…
redhat
CVE-2022-1586 · redhat
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_co…
CVE-2022-1587 · redhat
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compil…
Zoom Video Communications Inc
CVE-2022-22785 · Zoom Video Communications Inc Zoom Client for Meetings for Android