by Kastro CVE-2021-43421 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 661 of 786
mitre
CVE-2022-26635 · mitre
PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute CLRF injection.
CVE-2022-28219 · mitre
Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remote Code Execution.
CVE-2021-43474 · mitre
An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 (Lastest) via any parameter in the HNAP1 function
CVE-2021-46419 · mitre
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts.
CVE-2022-23900 · mitre
A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve…
CVE-2022-27351 · mitre
Zoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /public_html/apply_vacancy.
CVE-2022-27357 · mitre
Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customer_register.php.
CVE-2021-33207 · mitre
The HTTP client in MashZone NextGen through 10.7 GA deserializes untrusted data when it gets an HTTP response with a 570 status code.
CVE-2021-43517 · mitre
FOSCAM Camera FI9805E with firmware V4.02.R12.00018510.10012.143900.00000 contains a backdoor that opens Telnet port when special command…
CVE-2022-24231 · mitre
Simple Student Information System v1.0 was discovered to contain a SQL injection vulnerability via add/Student.
CVE-2022-27016 · mitre
There is a stack overflow vulnerability in the SetStaticRouteCfg() function in the httpd service of Tenda AC9 15.03.2.21_cn.
CVE-2022-27022 · mitre
There is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of Tenda AC9 V15.03.2.21_cn.
CVE-2022-28001 · mitre
Movie Seat Reservation v1 was discovered to contain a SQL injection vulnerability at /index.php?page=reserve via the id parameter.
CVE-2022-28468 · mitre
Payroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
CVE-2022-28805 · mitre
singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a heap-ba…
CVE-2020-19229 · mitre
Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437.
CVE-2022-26613 · mitre
PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter in categorymenu.php.
CVE-2022-26628 · mitre
Matrimony v1.0 was discovered to contain a SQL injection vulnerability via the Password parameter.
CVE-2022-27123 · mitre
Employee Performance Evaluation v1.0 was discovered to contain a SQL injection vulnerability via the email parameter.
CVE-2022-27304 · mitre
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter.
CVE-2020-22253 · mitre
Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, a…
CVE-2021-28428 · mitre
File upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading a .htaccess and *.hello files using the Media Files upload fun…
CVE-2021-30080 · mitre
An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control.
CVE-2021-41751 · mitre
Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function ecma_builtin_array_prototype_object_slice in Jerrysc…
CVE-2021-41752 · mitre
Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded re…
CVE-2021-43453 · mitre
A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parser_parse_for_s…
CVE-2022-27047 · mitre
mogu_blog_cms 5.2 suffers from upload arbitrary files without any limitation.
CVE-2022-27124 · mitre
Insurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
CVE-2022-27818 · mitre
SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname.
CVE-2022-28115 · mitre
Online Sports Complex Booking v1.0 was discovered to contain a SQL injection vulnerability via the id parameter.
CVE-2022-28116 · mitre
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter.
CVE-2022-28467 · mitre
Online Student Admission v1.0 was discovered to contain a SQL injection vulnerability via the txtapplicationID parameter.
Apache Software Foundation
CVE-2022-26612 · Apache Software Foundation Apache Hadoop
Arbitrary file write in FileUtil#unpackEntries on Windows
Dell
CVE-2021-36287 · Dell VNX2
Dell VNX2 for file version 8.1.21.266 and earlier, contain an unauthenticated remote code execution vulnerability which may lead unauthen…
CVE-2022-26852 · Dell PowerScale OneFS
Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator.
CVE-2021-36288 · Dell VNX2
Dell VNX2 for File version 8.1.21.266 and earlier, contain a path traversal vulnerability which may lead unauthenticated users to read/wr…
CVE-2022-26851 · Dell PowerScale OneFS
Dell PowerScale OneFS, 8.2.2-9.3.x, contains a predictable file name from observable state vulnerability.
strukturag
CVE-2022-1253 · strukturag strukturag/libde265
Heap-based Buffer Overflow in strukturag/libde265
Cisco
CVE-2022-20754 · Cisco Cisco TelePresence Video Communication Server (VCS) Expressway
Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
CVE-2022-20755 · Cisco Cisco TelePresence Video Communication Server (VCS) Expressway
Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
Fortinet
CVE-2021-26112 · Fortinet Fortinet FortiWAN
Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN be…
CVE-2021-26114 · Fortinet Fortinet FortiWAN
Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthe…
CVE-2022-23441 · Fortinet Fortinet FortiEDR
A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticate…
mruby
CVE-2022-0790 · Google Chrome
Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific use…
CVE-2022-0452 · Google Chrome
Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape…
CVE-2022-0466 · Google Chrome