by Kastro CVE-2022-1388 · F5 BIG-IP
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 652 of 786
F5
RARLAB
mitre
CVE-2020-19213 · mitre
SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories.
CVE-2022-29535 · mitre
Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports.
CVE-2022-29592 · mitre
Tenda TX9 Pro 22.03.02.10 devices allow OS command injection via set_route (called by doSystemCmd_route).
CVE-2022-27412 · mitre
Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request.
CVE-2022-28005 · mitre
An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL.
CVE-2022-28575 · mitre
It is found that there is a command injection vulnerability in the setopenvpnclientcfg interface in TOTOlink A7100RU (v7.4cu.2313_b201910…
CVE-2022-28577 · mitre
It is found that there is a command injection vulnerability in the delParentalRules interface in TOTOlink A7100RU (v7.4cu.2313_b20191024)…
CVE-2022-28578 · mitre
It is found that there is a command injection vulnerability in the setOpenVpnCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) ro…
CVE-2022-28579 · mitre
It is found that there is a command injection vulnerability in the setParentalRules interface in TOTOlink A7100RU (v7.4cu.2313_b20191024)…
CVE-2022-28580 · mitre
It is found that there is a command injection vulnerability in the setL2tpServerCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024)…
CVE-2022-28581 · mitre
It is found that there is a command injection vulnerability in the setWiFiAdvancedCfg interface in TOTOlink A7100RU (v7.4cu.2313_b2019102…
CVE-2022-28582 · mitre
It is found that there is a command injection vulnerability in the setWiFiSignalCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024)…
CVE-2022-28583 · mitre
It is found that there is a command injection vulnerability in the setWiFiWpsCfg interface in TOTOlink A7100RU (v7.4cu.2313_b20191024) ro…
CVE-2022-28584 · mitre
It is found that there is a command injection vulnerability in the setWiFiWpsStart interface in TOTOlink A7100RU (v7.4cu.2313_b20191024)…
CVE-2022-28738 · mitre
A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2.
CVE-2022-27360 · mitre
SpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the component customSqlSegment.
CVE-2022-27411 · mitre
TOTOLINK N600R v5.3c.5507_B20171031 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter in the "Ma…
CVE-2022-28470 · mitre
marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.
CVE-2022-28530 · mitre
Sourcecodester Covid-19 Directory on Vaccination System 1.0 is vulnerable to SQL Injection via cmdcategory.
CVE-2022-28533 · mitre
Sourcecodester Medical Hub Directory Site 1.0 is vulnerable to SQL Injection via /mhds/clinic/view_details.php.
CVE-2022-29502 · mitre
SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges.
CVE-2022-28606 · mitre
An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd.
CVE-2022-28120 · mitre
Beijing Runnier Network Technology Co., Ltd Open virtual simulation experiment teaching management platform software 2.0 has a file uploa…
Unknown
CVE-2022-0592 · Unknown MapSVG
MapSVG < 6.2.20 - Unauthenticated SQLi
CVE-2022-0817 · Unknown BadgeOS
BadgeOS <= 3.7.0 - Unauthenticated SQLi
CVE-2022-0826 · Unknown WP Video Gallery
WP Video Gallery <= 1.7.1 - Unauthenticated SQLi
CVE-2022-0948 · Unknown Order Listener for WooCommerce – Play Sounds Instantly on New Orders
Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi
CVE-2022-0814 · Unknown Ubigeo de Perú para Woocommerce y WordPress
Ubigeo de Peru < 3.6.4 - Unauthenticated SQLi
CVE-2022-1013 · Unknown Personal Dictionary
Personal Dictionary < 1.3.4 - Unauthenticated SQLi
CVE-2022-0836 · Unknown SEMA API
SEMA API < 4.02 - Unauthenticated SQLi
rubygems
CVE-2022-29176 · rubygems rubygems.org
Unauthorized gem takeover for some gems on rubygems.org
snyk
QNAP Systems Inc.
CVE-2022-27588 · QNAP Systems Inc. QVR
Vulnerability in QVR
CVE-2021-44055 · QNAP Systems Inc. Video Station
Information leakage in Video Station
CVE-2021-44056 · QNAP Systems Inc. Video Station
Improper authentication in Video Station
CVE-2021-44057 · QNAP Systems Inc. Photo Station
Improper authentication in Photo Station
solana-labs
Adam Skaat
CVE-2022-29423 · Adam Skaat Countdown & Clock (WordPress plugin)
WordPress Countdown & Clock plugin <= 2.3.2 - Pro Features Lock Bypass vulnerability
fluxcd
brocade
redhat
charmbracelet
CVE-2022-29180 · charmbracelet charm
Charm vulnerable to server-side request forgery (SSRF)
HCL Software
CVE-2021-27762 · HCL Software BigFix Platform