The archive.

CVE-2021-44626 · mitre

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/get_reg_verify_code feature, wh…

CVE-2021-44627 · mitre

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/get_reset_pwd_veirfy_code featu…

CVE-2021-44628 · mitre

A Buffer Overflow vulnerabiltiy exists in TP-LINK WR-886N 20190826 2.3.8 in thee /cloud_config/router_post/login feature, which allows ma…

CVE-2021-44629 · mitre

A Buffer Overflow vulnerabilitiy exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/register feature, which allows…

CVE-2021-44630 · mitre

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/modify_account_pwd feature, whi…

CVE-2021-44631 · mitre

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/reset_cloud_pwd feature, which…

CVE-2021-44632 · mitre

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/upgrade_info feature, which all…

CVE-2021-45887 · mitre

An issue was discovered in PONTON X/P Messenger before 3.11.2.

CVE-2022-24651 · mitre

sentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in PHP cod…

CVE-2022-24652 · mitre

sentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in php cod…

CVE-2022-22814 · mitre

The System Diagnosis service of MyASUS before 3.1.2.0 allows privilege escalation.

CVE-2021-44623 · mitre

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 via the /cloud_config/router_post/check_reset_pwd_verify_code in…

CVE-2021-44625 · mitre

A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in /cloud_config/cloud_device/info interface, which allows a mal…

CVE-2021-33293 · mitre

Panorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function panoParserFindOLine() in parser.c.

EPSS 2%CVSS 9.1

CVE-2021-44618 · mitre

A Server-side Template Injection (SSTI) vulnerability exists in Nystudio107 Seomatic 3.4.12 in src/helpers/UrlHelper.php via the host hea…

CVE-2021-44620 · mitre

A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime parameters.

Schneider Electric3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2022-22805 · Schneider Electric SmartConnect

A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause remote code execu…

EPSS 12%CVSS 9.8

CVE-2022-22806 · Schneider Electric SmartConnect

A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause an unauthenticated connection to the UPS when a…

EPSS 12%CVSS 9.8

CVE-2022-0715 · Schneider Electric APC Smart-UPS

A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a…

EPSS 6%CVSS 9.1

Unknown5 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2021-25003 · Unknown WPCargo Track & Trace

WPCargo < 6.9.0 - Unauthenticated RCE

EPSS 56%CVSS 9.8

CVE-2022-0169 · Unknown Photo Gallery by 10Web – Mobile-Friendly Image Gallery

Photo Gallery by 10Web < 1.6.0 - Unauthenticated SQL Injection

EPSS 75%CVSS 9.8

CVE-2022-0658 · Unknown CommonsBooking

CommonsBooking < 2.6.8 - Unauthenticated SQL Injection

EPSS 8%CVSS 9.8

CVE-2022-0254 · Unknown WordPress Zero Spam

Zero Spam < 5.2.11 - Admin+ SQL Injection

CVE-2021-25007 · Unknown MOLIE – Instructure Canvas Linking tool

MOLIE <= 0.5 - Authenticated SQL Injection

snyk2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2022-21187 · snyk

Command Injection

EPSS 4%CVSS 9.8

CVE-2022-24433 · snyk

Command Injection

EPSS 4%CVSS 9.8

Aternity4 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2021-42786 · Aternity SteelCentral AppInternals Dynamic Sampling Agent

Remote Code Execution at AgentControllerServlet

CVE-2021-42853 · Aternity SteelCentral AppInternals Dynamic Sampling Agent

Directory Traversal Delete/Read at AgentDiagnosticServlet

CVE-2021-42854 · Aternity SteelCentral AppInternals Dynamic Sampling Agent

Directory Traversal Read/Write/Delete at PluginServlet

CVE-2021-42787 · Aternity SteelCentral AppInternals Dynamic Sampling Agent

Directory Traversal Write/Delete/Partial Read at AgentConfigurationServlet

pjsip1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2022-24754 · pjsip pjproject

Buffer overflow in pjsip

microweber2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2022-0895 · microweber microweber/microweber

Static Code Injection in microweber/microweber

CVE-2022-0913 · microweber microweber/microweber

Integer Overflow or Wraparound in microweber/microweber

EPSS 1%CVSS 9.1

cobbler1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2022-0860 · cobbler cobbler/cobbler

Improper Authorization in cobbler/cobbler

EPSS 2%CVSS 9.1

NEC Platforms, Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2022-25621 · NEC Platforms, Ltd. UNIVERGE DT

UUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511 Ver8.2.11 and prior, UNIVERGE WA 1512 Ver8.…

SmarterTools1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2022-24387 · SmarterTools SmarterTrack

File upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010

EPSS 2%CVSS 9.1

LGE1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2022-23730 · LGE

The public API error causes for the attacker to be able to bypass API access control.