by Kastro CVE-2022-24755 · bareos bareos
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 668 of 786
bareos
mitre
CVE-2022-25487 · mitre
Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php.
CVE-2022-26213 · mitre
Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, vi…
CVE-2022-25488 · mitre
Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php.
CVE-2022-26210 · mitre
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000…
CVE-2022-27002 · mitre
Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd, h_ddn…
CVE-2022-25498 · mitre
CuppaCMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the saveConfigData function in /classes/ajax/Func…
CVE-2022-26208 · mitre
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000…
CVE-2022-26211 · mitre
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000…
CVE-2022-26212 · mitre
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000…
CVE-2022-26214 · mitre
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000…
CVE-2022-26990 · mitre
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulne…
CVE-2022-26991 · mitre
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulne…
CVE-2022-26992 · mitre
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulne…
CVE-2022-26993 · mitre
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulne…
CVE-2022-26994 · mitre
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulne…
CVE-2022-26995 · mitre
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan_pptp.html) function via the pptp_fix_ip…
CVE-2022-26996 · mitre
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoe_username, pppoe_pass…
CVE-2022-26997 · mitre
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp function via the upnp_ttl parameter.
CVE-2022-26998 · mitre
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wps_enrolee_pin para…
CVE-2022-26999 · mitre
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip settings function via the wan_ip_stat,…
CVE-2022-27000 · mitre
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the h_primary_ntp…
CVE-2022-27001 · mitre
Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp function via the hostname parameter.
CVE-2022-25495 · mitre
The component /jquery_file_upload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execute arbitrary…
CVE-2022-26206 · mitre
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000…
CVE-2022-26207 · mitre
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000…
CVE-2022-26209 · mitre
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000…
CVE-2022-25490 · mitre
HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php.
CVE-2022-25492 · mitre
HMS v1.0 was discovered to contain a SQL injection vulnerability via the medicineid parameter in ajaxmedicine.php.
CVE-2021-45786 · mitre
In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges.
CVE-2022-25494 · mitre
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via staff_login.php.
CVE-2022-26320 · mitre
The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon…
PTC
CVE-2022-25247 · PTC Axeda agent
PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function
CVE-2022-25246 · PTC Axeda agent
PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials
CVE-2022-25251 · PTC Axeda agent
PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function
totolink
CVE-2022-27005 · totolink x5000r_firmware
Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnera…
CVE-2022-27003 · totolink x5000r_firmware
Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnera…
CVE-2022-27004 · totolink x5000r_firmware
Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnera…
TIBCO Software Inc.
CVE-2022-22771 · TIBCO Software Inc. TIBCO JasperReports Library
TIBCO JasperReports Library Directory Traversal Vulnerability
sqlpad
Atlassian
Sylius
CVE-2022-24752 · Sylius SyliusGridBundle
SQL Injection through sorting parameters in SyliusGridBundle
google_android
CVE-2021-39708 · google_android
In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to an incorrect bounds check.
CVE-2021-39710 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A
CVE-2021-39720 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A
CVE-2021-39723 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A
CVE-2021-39737 · google_android
Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A
star7th
CVE-2022-0942 · star7th star7th/showdoc
Stored XSS due to Unrestricted File Upload in star7th/showdoc
CVE-2022-0945 · star7th star7th/showdoc
Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc
CVE-2022-0965 · star7th star7th/showdoc