by Kastro CVE-2022-24706 · Apache Software Foundation Apache CouchDB
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 655 of 786
Apache Software Foundation
Mitel
ballcat-projects
CVE-2022-24881 · ballcat-projects ballcat-codegen
Command Injection in Ballcat Codegen
FreeRDP
mitre
CVE-2021-46422 · mitre
Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands with…
CVE-2021-46442 · mitre
In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functi…
CVE-2022-27336 · mitre
Seacms v11.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/weixin.php.
CVE-2022-29078 · mitre
The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side template injection in settings[view options][out…
CVE-2022-29081 · mitre
Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-con…
CVE-2022-29806 · mitre
ZoneMinder before 1.36.13 allows remote code execution via an invalid language.
CVE-2021-45840 · mitre
It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) by sending specifically…
CVE-2022-27984 · mitre
CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter parameter at /administrator/templates/default/h…
CVE-2022-27985 · mitre
CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via /administrator/alerts/alertLightbox.php.
CVE-2021-46424 · mitre
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, ev…
CVE-2022-27468 · mitre
Monstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows attackers to execute arbitrary code via a crafted file…
CVE-2022-28093 · mitre
SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a local file inclusion vulnerability which allow attackers to…
CVE-2022-29077 · mitre
A heap-based buffer overflow exists in rippled before 1.8.5.
CVE-2021-41921 · mitre
novel-plus V3.6.1 allows unrestricted file uploads.
CVE-2022-27299 · mitre
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php.
CVE-2022-27311 · mitre
Gibbon v3.4.4 and below allows attackers to execute a Server-Side Request Forgery (SSRF) via a crafted URL.
CVE-2022-28521 · mitre
ZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c=home&a=sp_set_config.
CVE-2022-29264 · mitre
An issue was discovered in coreboot 4.13 through 4.16.
CVE-2021-41945 · mitre
Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.cop…
CVE-2022-27469 · mitre
Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).
CVE-2022-29859 · mitre
component/common/network/dhcp/dhcps.c in ambiot amb1_sdk (aka SDK for Ameba1) before 2022-03-11 mishandles data structures for DHCP packe…
CVE-2022-27429 · mitre
Jizhicms v1.9.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via /admin.php/Plugins/update.html.
CVE-2022-28524 · mitre
ED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post.php.
CVE-2022-29556 · mitre
The iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2 allows SSRF because the Azure IoT Hub integration prov…
CVE-2022-27332 · mitre
An access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log without authentication.
CVE-2022-28464 · mitre
Apifox through 2.1.6 is vulnerable to Cross Site Scripting (XSS) which can lead to remote code execution.
CVE-2022-28101 · mitre
Turtlapp Turtle Note v0.7.2.6 does not filter the <meta> tag during markdown parsing, allowing attackers to execute HTML injection.
CVE-2022-28114 · mitre
DSCMS v3.0 was discovered to contain an arbitrary file deletion vulnerability via /controller/Adv.php.
Unknown
CVE-2022-1390 · Unknown Admin Word Count Column
Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File Read
CVE-2022-1391 · Unknown Cab fare calculator
Cab fare calculator < 1.0.4 - Unauthenticated LFI
CVE-2022-0693 · Unknown Master Elements
Master Elements <= 8.0 - Unauthenticated SQLi
CVE-2022-0769 · Unknown Users Ultra Membership, Users Community and Member Profiles With PayPal Integration Plugin
Users Ultra <= 3.1.0 - Unauthenticated SQL Injection
CVE-2022-0541 · Unknown flo-launch
Flo Launch < 2.4.1 - Missing Authentication Allow Full Site Takeover
CVE-2022-0657 · Unknown 5 Stars Rating Funnel WordPress Plugin | RRatingg
5 Stars Rating Funnel < 1.2.53 - Unauthenticated SQLi
CVE-2022-0782 · Unknown Donations
Donations <= 1.8 - Unauthenticated SQLi
Hammock Corporation
hestiacp
CVE-2022-1509 · hestiacp hestiacp/hestiacp
Command Injection Vulnerability in hestiacp/hestiacp
Bender / ebee
Elcomplus
CVE-2021-43934 · Elcomplus SmartPTT
Elcomplus SmartPtt Unrestricted Upload of File with Dangerous Type
CVE-2021-43932 · Elcomplus SmartPTT
Elcomplus SmartPtt Cross-site Scripting
Mufeng
CVE-2022-29411 · Mufeng Hermit 音乐播放器 (WordPress plugin)
WordPress Hermit 音乐播放器 plugin <= 3.1.6 - Unauthenticated SQL Injection SQLi) vulnerability
IBM
neorazorx
CVE-2022-1457 · neorazorx neorazorx/facturascripts
Store XSS in title parameter executing at EditUser Page & EditProducto page in neorazorx/facturascripts
CVE-2022-1514 · neorazorx neorazorx/facturascripts