by Kastro CVE-2022-22965 · VMware Spring Framework
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 662 of 786
VMware
VMware Tanzu
jirutka
CVE-2022-24803 · jirutka asciidoctor-include-ext
Command Injection vulnerability in asciidoctor-include-ext
GitLab
mitre
CVE-2022-28368 · mitre
Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (w…
CVE-2022-28381 · mitre
Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long…
CVE-2022-26585 · mitre
Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via /cms/content/list.
CVE-2021-43484 · mitre
A Remote Code Execution (RCE) vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate th…
CVE-2021-43722 · mitre
D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow.
CVE-2022-25017 · mitre
Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field.
CVE-2021-43479 · mitre
A Remote Code Execution (RCE) vulnerability exists in The-Secretary 2.5 via install.php.
CVE-2022-26562 · mitre
An issue in provider/libserver/ECKrbAuth.cpp of Kopano Core <= v11.0.2.51 contains an issue which allows attackers to authenticate even i…
CVE-2021-43506 · mitre
An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php.
CVE-2021-44135 · mitre
pagekit all versions, as of 15-10-2021, is vulnerable to SQL Injection via Comment listing.
CVE-2022-24136 · mitre
Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type vulerability in treatmentrecord.php.
CVE-2022-25569 · mitre
Bettini Srl GAMS Product Line v4.3.0 was discovered to re-use static SSH keys across installations, allowing unauthenticated attackers to…
CVE-2022-26530 · mitre
swaylock before 1.6 allows attackers to trigger a crash and achieve unlocked access to a Wayland compositor.
CVE-2022-26546 · mitre
Hospital Management System v1.0 was discovered to lack an authorization component, allowing attackers to access sensitive information and…
CVE-2021-30064 · mitre
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Applianc…
snyk
Kaspersky
Moxa
CVE-2021-32974 · Moxa NPort IAW5000A-I/O series firmware
Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation
CVE-2021-32976 · Moxa NPort IAW5000A-I/O series firmware
Moxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflow
netflix
OPPO
MDT Software
CVE-2021-32933 · MDT Software MDT AutoSave
MDT AutoSave Command Injection
CVE-2021-32953 · MDT Software MDT AutoSave
MDT AutoSave SQL Injection
Mitsubishi
CVE-2022-25157 · Mitsubishi
Use of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versi…
CVE-2022-25158 · Mitsubishi
Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi E…
Automation Direct
CVE-2021-32980 · Automation Direct CLICK PLC CPU Modules: C0-1x CPUs
Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel
CVE-2021-32984 · Automation Direct CLICK PLC CPU Modules: C0-1x CPUs
Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel
CVE-2021-32986 · Automation Direct CLICK PLC CPU Modules: C0-1x CPUs
Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel
AVEVA
CVE-2021-33008 · AVEVA AVEVA System Platform
AVEVA System Platform Missing Authentication for Critical Function
Bandisoft International Inc.
CVE-2021-26623 · Bandisoft International Inc. Bandizip
Bandisoft ARK Library Out-of-bound Vulnerability
hackerone
janeczku
CVE-2022-0939 · janeczku janeczku/calibre-web
Server-Side Request Forgery (SSRF) in janeczku/calibre-web
CVE-2022-0990 · janeczku janeczku/calibre-web
Server-Side Request Forgery (SSRF) in janeczku/calibre-web
Unknown
CVE-2022-1165 · Unknown Blackhole for Bad Bots
Blackhole for Bad Bots < 3.3.2 - Arbitrary IP Address Blocking via IP Spoofing
Philips
Qualcomm, Inc.
CVE-2021-35088 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdrago…
CVE-2021-35117 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv…
CVE-2021-1942 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking