by Kastro CVE-2022-30284 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 653 of 786
mitre
CVE-2022-28082 · mitre
Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList.
CVE-2022-28557 · mitre
There is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin…
CVE-2022-30292 · mitre
Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sq_reservestack call.
CVE-2021-41739 · mitre
A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000.
CVE-2022-27413 · mitre
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in admin.php.
CVE-2022-28568 · mitre
Sourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image upload from the administrator panel.
CVE-2022-29347 · mitre
An arbitrary file upload vulnerability in Web@rchiv 1.0 allows attackers to execute arbitrary commands via a crafted PHP file.
CVE-2021-42242 · mitre
A command execution vulnerability exists in jfinal_cms 5.0.1 via com.jflyfox.component.controller.Ueditor.
CVE-2021-43163 · mitre
A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW_3.0(1)B11P…
CVE-2022-28111 · mitre
MyBatis PageHelper v1.x.x-v3.7.0 v4.0.0-v5.0.0,v5.1.0-v5.3.0 was discovered to contain a time-blind SQL injection vulnerability via the o…
CVE-2022-27420 · mitre
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearc…
CVE-2022-28055 · mitre
Fusionpbx v4.4 and below contains a command injection vulnerability via the download email logs function.
CVE-2022-28512 · mitre
A SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 .
CVE-2021-42185 · mitre
wdja v2.1 is affected by a SQL injection vulnerability in the foreground search function.
CVE-2022-27431 · mitre
Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the groupid parameter at /coreframe/app/member/admin/group.php.
CVE-2022-27962 · mitre
Bluecms 1.6 has a SQL injection vulnerability at cooike.
CVE-2021-42235 · mitre
SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administratio…
CVE-2022-28461 · mitre
mingyuefusu Library Management System all versions as of 03-27-2022 is vulnerable to SQL Injection.
CVE-2022-28585 · mitre
EmpireCMS 7.5 has a SQL injection vulnerability in AdClass.php
ARM
CVE-2021-27435 · ARM mbed
ARM mbed Integer Overflow or Wraparound
CVE-2021-27433 · ARM mbed-ualloc memory library
ARM mbed-ualloc memory library Integer Overflow or Wraparound
CVE-2021-27431 · ARM CMSIS RTOS2
ARM CMSIS RTOS2 Integer Overflow or Wraparound
Accusoft
Cisco
CVE-2022-20777 · Cisco Cisco Enterprise NFV Infrastructure Software
Cisco Enterprise NFV Infrastructure Software Vulnerabilities
CVE-2022-20779 · Cisco Cisco Enterprise NFV Infrastructure Software
Cisco Enterprise NFV Infrastructure Software Vulnerabilities
CVE-2022-20780 · Cisco Cisco Enterprise NFV Infrastructure Software
Cisco Enterprise NFV Infrastructure Software Vulnerabilities
Siemens
CVE-2022-29155 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd,…
Apache Software Foundation
CVE-2022-28890 · Apache Software Foundation Apache Jena
Processing external DTDs
GurumNetworks
CVE-2021-38439 · GurumNetworks GurumDDS
GurumDDS Heap-based Buffer Overflow
CVE-2021-38423 · GurumNetworks GurumDDS
GurumDDS Heap-based Incorrect Calculation of Buffer Size
OCI
Eclipse
jgraph
Cesanta Software
CVE-2021-27425 · Cesanta Software Mongoose-OS
Cesanta Software Mongoose-OS Integer Overflow or Wraparound
NXP
RTI
CVE-2021-38487 · RTI Connext Professional
Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro
CVE-2021-38435 · RTI Connext DDS Professional
RTI Connext DDS Professional and Connext DDS Secure Incorrect Calculation of Buffer Size
TencentOS-tiny
CVE-2021-27439 · TencentOS-tiny TencentOS-tiny
TencentOS-tiny Integer Overflow or Wraparound
clinical-genomics
CVE-2022-1592 · clinical-genomics clinical-genomics/scout
Server-Side Request Forgery in scout in clinical-genomics/scout
neorazorx
CVE-2022-1571 · neorazorx neorazorx/facturascripts
Cross-site scripting - Reflected in Create Subaccount in neorazorx/facturascripts
eCosCentric
CVE-2021-27417 · eCosCentric eCosPro RTOS
eCosCentric eCosPro RTOS Integer Overflow or Wraparound
yetiforcecompany
CVE-2022-1411 · yetiforcecompany yetiforcecompany/yetiforcecrm