by Kastro CVE-2022-23881 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,277 matching vulnerabilities · Page 665 of 786
mitre
CVE-2022-24934 · mitre
wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEY_CURRENT_USER in the registry.
CVE-2022-26187 · mitre
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the pingCheck function.
CVE-2022-27228 · mitre
In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary c…
CVE-2021-43650 · mitre
WebRun 3.6.0.42 is vulnerable to SQL Injection via the P_0 parameter used to set the username during the login process.
CVE-2022-26186 · mitre
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the exportOvpn interface at cstecg…
CVE-2022-26289 · mitre
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand.
CVE-2022-26188 · mitre
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via /setting/NTPSyncWithHost.
CVE-2022-26189 · mitre
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the langType parameter in the logi…
CVE-2022-26290 · mitre
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac.
CVE-2022-26536 · mitre
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools.
CVE-2022-27076 · mitre
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd.
CVE-2022-27077 · mitre
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic.
CVE-2022-27078 · mitre
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail.
CVE-2022-27079 · mitre
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem.
CVE-2022-27080 · mitre
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode.
CVE-2022-27081 · mitre
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo.
CVE-2022-27082 · mitre
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo.
CVE-2022-27083 · mitre
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic.
CVE-2021-31326 · mitre
D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parameter to /goform/fo…
CVE-2021-43736 · mitre
CmsWing CMS 1.3.7 is affected by a Remote Code Execution (RCE) vulnerability via parameter: log rule
CVE-2022-25517 · mitre
MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.…
CVE-2022-26284 · mitre
Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manage_client en…
CVE-2022-26285 · mitre
Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint.
CVE-2021-45809 · mitre
GlobalProtect-openconnect versions prior to 1.4.3 are affected by incorrect access control in GPService through DBUS, GUI Application.
CVE-2022-23880 · mitre
An arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2 allows attackers to execute arbitrary code…
CVE-2021-38278 · mitre
Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the urls parameter in the saveParentControlInfo function.
CVE-2021-41736 · mitre
Faust v2.35.0 was discovered to contain a heap-buffer overflow in the function realPropagate() at propagate.cpp.
CVE-2022-26260 · mitre
Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse().
CVE-2021-43735 · mitre
CmsWing 1.3.7 is affected by a SQLi vulnerability via parameter: behavior rule.
CVE-2021-45756 · mitre
Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffer overflow in blocking_request.cgi.
Rockwell Automation
CVE-2021-27472 · Rockwell Automation FactoryTalk AssetCentre
Rockwell Automation FactoryTalk AssetCentre SQL Injection
CVE-2021-27460 · Rockwell Automation FactoryTalk AssetCentre
Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data
CVE-2021-27462 · Rockwell Automation FactoryTalk AssetCentre
Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data
CVE-2021-27464 · Rockwell Automation FactoryTalk AssetCentre
Rockwell Automation FactoryTalk AssetCentre SQL Injection
CVE-2021-27466 · Rockwell Automation FactoryTalk AssetCentre
Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data
CVE-2021-27468 · Rockwell Automation FactoryTalk AssetCentre
Rockwell Automation FactoryTalk AssetCentre SQL Injection
CVE-2021-27470 · Rockwell Automation FactoryTalk AssetCentre
Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data
CVE-2021-27476 · Rockwell Automation FactoryTalk AssetCentre
Rockwell Automation FactoryTalk AssetCentre OS Command Injection
CVE-2021-27474 · Rockwell Automation FactoryTalk AssetCentre
Rockwell Automation FactoryTalk AssetCentre Use of Potentially Dangerous Function
SaturdayDrive
CVE-2022-0888 · SaturdayDrive Ninja Forms - File Uploads
Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload
hp
vmware
CVE-2022-22951 · vmware
VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains an…
CVE-2022-22952 · vmware