by Kastro CVE-2022-24900 · onlaj Piano-LED-Visualizer
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 654 of 786
onlaj
OpenSSL
Delta Electronics
CVE-2022-1366 · Delta Electronics DIAEnergie
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx.
CVE-2022-1367 · Delta Electronics DIAEnergie
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx.
CVE-2022-1378 · Delta Electronics DIAEnergie
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx.
CVE-2022-1369 · Delta Electronics DIAEnergie
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegIND.
CVE-2022-1370 · Delta Electronics DIAEnergie
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadREGbyID.
CVE-2022-1371 · Delta Electronics DIAEnergie
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegf.
CVE-2022-1372 · Delta Electronics DIAEnergie
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in dlSlog.aspx.
CVE-2022-1374 · Delta Electronics DIAEnergie
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_unHandler.ashx.
CVE-2022-1375 · Delta Electronics DIAEnergie
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_slogHandler.ashx.
CVE-2022-1376 · Delta Electronics DIAEnergie
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_privgrpHandler.ashx.
CVE-2022-1377 · Delta Electronics DIAEnergie
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_rltHandler.ashx.
mitre
CVE-2021-44596 · mitre
Wondershare LTD Dr.
CVE-2022-28054 · mitre
Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code…
CVE-2022-28452 · mitre
Red Planet Laundry Management System 1.0 is vulnerable to SQL Injection.
CVE-2022-28561 · mitre
There is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd service of Tenda ax12 22.03.01.21_cn router.
CVE-2022-28573 · mitre
D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting.
CVE-2022-29904 · mitre
The SemanticDrilldown extension for MediaWiki through 1.37.2 (before e688bdba6434591b5dff689a45e4d53459954773) allows SQL injection with…
CVE-2022-28571 · mitre
D-link 882 DIR882A1_FW130B06 was discovered to contain a command injection vulnerability in`/usr/bin/cli.
CVE-2022-28118 · mitre
SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.
CVE-2020-23620 · mitre
The Java Remote Management Interface of all versions of Orlansoft ERP was discovered to contain a vulnerability due to insecure deseriali…
CVE-2020-23621 · mitre
The Java Remote Management Interface of all versions of SVI MS Management System was discovered to contain a vulnerability due to insecur…
CVE-2022-27982 · mitre
RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain a remote code execution (RCE) vulnerability via the fileName paramete…
CVE-2022-28994 · mitre
Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request.
CVE-2022-24449 · mitre
Solar appScreener through 3.10.4, when a valid license is not present, allows XXE and SSRF attacks via a crafted XML document.
CVE-2022-27466 · mitre
MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do.
CVE-2022-28480 · mitre
ALLMediaServer 1.6 is vulnerable to Buffer Overflow via MediaServer.exe.
CVE-2022-28481 · mitre
CSV-Safe gem < 3.0.0 doesn't filter out special characters which could trigger CSV Injection.
CVE-2022-28560 · mitre
There is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd service of Tenda ac9 15.03.2.21_cn router.
CVE-2022-28056 · mitre
ShopXO v2.2.5 and below was discovered to contain a system re-install vulnerability via the Add function in app/install/controller/Index.…
CVE-2022-29906 · mitre
The admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66) omits a che…
Unknown
CVE-2022-0773 · Unknown Documentor – Create Product Documentation
Documentor <= 1.5.3 - Unauthenticated SQLi
CVE-2022-1281 · Unknown Photo Gallery by 10Web – Mobile-Friendly Image Gallery
Photo Gallery < 1.6.3 - Unauthenticated SQL Injection
CVE-2022-0783 · Unknown Multiple Shipping Address Woocommerce
Multiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQLi
CVE-2022-0771 · Unknown SiteSuperCharger
SiteSuperCharger < 5.2.0 - Unauthenticated SQLi
rtxteam
snyk
CVE-2022-25842 · snyk
Arbitrary File Write via Archive Extraction (Zip Slip)
CVE-2022-24437 · snyk
Command Injection
CVE-2022-25767 · snyk
Remote Code Execution
CVE-2022-22143 · snyk
Prototype Pollution
CVE-2022-21189 · snyk
Prototype Pollution
CVE-2022-21167 · snyk
Arbitrary Code Execution
CVE-2022-23923 · snyk
Sandbox Bypass
CVE-2022-25301 · snyk
Prototype Pollution
TRUMPF
Elcomplus
CVE-2021-43938 · Elcomplus SmartPTT SCADA Server
Elcomplus SmartPTT SCADA Server Information Exposure
erudika
CVE-2022-1543 · erudika erudika/scoold
Improper handling of Length parameter in erudika/scoold
Ping Identity
CVE-2021-42001 · Ping Identity PingID Desktop