by Kastro CVE-2022-22954 · VMware Workspace ONE Access and Identity Manager
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 660 of 786
VMware
mitre
CVE-2022-27115 · mitre
In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload.
CVE-2021-37291 · mitre
An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 ivia the input_id POST parameter i…
CVE-2022-27268 · mitre
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabil…
CVE-2022-27269 · mitre
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabil…
CVE-2021-32157 · mitre
A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature.
CVE-2022-27270 · mitre
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabil…
CVE-2022-27271 · mitre
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabil…
CVE-2022-27272 · mitre
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabil…
CVE-2022-27273 · mitre
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabil…
CVE-2022-27274 · mitre
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabil…
CVE-2022-27275 · mitre
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabil…
CVE-2022-27276 · mitre
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution (RCE) vulnerabil…
CVE-2022-27129 · mitre
An arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2022-27131 · mitre
An arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to execute arbitrary code via a crafted PH…
CVE-2022-27128 · mitre
An incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts.
CVE-2022-27477 · mitre
Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit.
CVE-2022-27126 · mitre
zbzcms v1.0 was discovered to contain a SQL injection vulnerability via the art parameter at /include/make.php.
CVE-2022-27277 · mitre
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability…
CVE-2022-27133 · mitre
zbzcms v1.0 was discovered to contain an arbitrary file deletion vulnerability via /include/up.php.
Rockwell Automation
CVE-2022-1161 · Rockwell Automation 1768 CompactLogix controllers
ICSA-22-090-05 Rockwell Automation Logix Controllers
Unknown
CVE-2022-0949 · Unknown Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection
WP Block and Stop Bad Bots < 6.930 - Unauthenticated SQLi
microfocus
mruby
alvarotrigo
CVE-2022-1295 · alvarotrigo alvarotrigo/fullpage.js
Prototype Pollution in alvarotrigo/fullpage.js
Samsung Mobile
CVE-2022-26098 · Samsung Mobile Samsung Mobile Devices
Heap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to SMR Apr-2022 Release 1 allows code execut…
CVE-2022-27568 · Samsung Mobile Samsung Mobile Devices
Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code executio…
CVE-2022-27569 · Samsung Mobile Samsung Mobile Devices
Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code executio…
CVE-2022-27570 · Samsung Mobile Samsung Mobile Devices
Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code e…
CVE-2022-27571 · Samsung Mobile Samsung Mobile Devices
Heap-based buffer overflow vulnerability in sheifd_get_info_image function in libsimba library prior to SMR Apr-2022 Release 1 allows cod…
CVE-2022-27572 · Samsung Mobile Samsung Mobile Devices
Heap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR Apr-2022 Release 1 allows code executio…
CVE-2022-26093 · Samsung Mobile Samsung Mobile Devices
Null pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds w…
CVE-2022-26094 · Samsung Mobile Samsung Mobile Devices
Null pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds w…
CVE-2022-26095 · Samsung Mobile Samsung Mobile Devices
Null pointer dereference vulnerability in parser_colr function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds w…
CVE-2022-26096 · Samsung Mobile Samsung Mobile Devices
Null pointer dereference vulnerability in parser_ispe function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds w…
CVE-2022-26097 · Samsung Mobile Samsung Mobile Devices
Null pointer dereference vulnerability in parser_unknown_property function in libsimba library prior to SMR Apr-2022 Release 1 allows out…
CVE-2022-27567 · Samsung Mobile Samsung Mobile Devices
Null pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds w…
CVE-2022-26099 · Samsung Mobile Samsung Mobile Devices
Null pointer dereference vulnerability in parser_infe function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds r…
Huawei
CVE-2022-22258 · huawei
The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications…
CVE-2021-46742 · Huawei HarmonyOS
The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of th…
polonel
CVE-2022-1045 · polonel polonel/trudesk
Stored XSS viva .svg file upload in polonel/trudesk
CVE-2022-1290 · polonel polonel/trudesk
Stored XSS in "Name", "Group Name" & "Title" in polonel/trudesk
SICK AG
Dell
unspecified
CVE-2022-1287 · unspecified School Club Application System
School Club Application System resource injection
radareorg
CVE-2022-1296 · radareorg radareorg/radare2
Out-of-bounds read in `r_bin_ne_get_relocs` function in radareorg/radare2
CVE-2022-1297 · radareorg radareorg/radare2
Out-of-bounds Read in r_bin_ne_get_entrypoints function in radareorg/radare2
gnuboard
CVE-2022-1252 · gnuboard gnuboard/gnuboard5