by Kastro CVE-2022-26318 · WatchGuard Firebox and XTM Appliances
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 670 of 786
WatchGuard
github
mitre
CVE-2021-46393 · mitre
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN.
CVE-2021-46704 · mitre
In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (li…
CVE-2022-24193 · mitre
CasaOS before v0.2.7 was discovered to contain a command injection vulnerability.
CVE-2022-25125 · mitre
MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file /mdiy/dict/listExcludeApp.
CVE-2021-46394 · mitre
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN.
CVE-2022-26495 · mitre
In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow.
CVE-2022-26496 · mitre
In nbd-server in nbd before 3.24, there is a stack-based buffer overflow.
CVE-2022-26520 · mitre
In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitra…
CVE-2021-46384 · mitre
https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: RCE.
CVE-2021-46703 · mitre
In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sand…
CVE-2022-24609 · mitre
Luocms v2.0 is affected by an incorrect access control vulnerability.
CVE-2022-25069 · mitre
Mark Text v0.16.3 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability which allows attackers to perform remote…
CVE-2022-24600 · mitre
Luocms v2.0 is affected by SQL Injection through /admin/login.php.
CVE-2022-26201 · mitre
Victor CMS v1.0 was discovered to contain a SQL injection vulnerability.
CVE-2022-24602 · mitre
Luocms v2.0 is affected by SQL Injection in /admin/news/news_mod.php.
CVE-2022-24603 · mitre
Luocms v2.0 is affected by SQL Injection in /admin/news/sort_mod.php.
CVE-2022-24604 · mitre
Luocms v2.0 is affected by SQL Injection in /admin/link/link_mod.php.
CVE-2022-24605 · mitre
Luocms v2.0 is affected by SQL Injection in /admin/link/link_ok.php.
CVE-2022-24606 · mitre
Luocms v2.0 is affected by SQL Injection in /admin/news/sort_ok.php.
CVE-2022-24607 · mitre
Luocms v2.0 is affected by SQL Injection in /admin/news/news_ok.php.
CVE-2022-23383 · mitre
YzmCMS v6.3 is affected by broken access control.
TP-Link
Unknown
CVE-2022-0349 · Unknown NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notification Bar Plugin With Elementor
NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection
CVE-2022-0434 · Unknown Page View Count
Page Views Count < 2.4.15 - Unauthenticated SQL Injection
CVE-2022-0441 · Unknown MasterStudy LMS – WordPress LMS Plugin
MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation
redhat
alextselegidis
CVE-2022-0482 · alextselegidis alextselegidis/easyappointments
Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments
hazelcast
CVE-2022-0265 · hazelcast hazelcast/hazelcast
Improper Restriction of XML External Entity Reference in hazelcast/hazelcast
liquibase
CVE-2022-0839 · liquibase liquibase/liquibase
Improper Restriction of XML External Entity Reference in liquibase/liquibase
Apache Software Foundation
CVE-2022-25312 · Apache Software Foundation Apache Any23
An XML external entity (XXE) injection vulnerability exists in the Apache Any23 RDFa XSLTStylesheet extractor
janeczku
CVE-2022-0766 · janeczku janeczku/calibre-web
Server-Side Request Forgery (SSRF) in janeczku/calibre-web
CVE-2022-0767 · janeczku janeczku/calibre-web
Server-Side Request Forgery (SSRF) in janeczku/calibre-web
Power Line Communications
CVE-2022-26131 · Power Line Communications PLC4TRUCKS
ICSA-22-063-01 Improper Protection against Electromagnetic Fault Injection in Trailer Power Line Communications (PLC) J2497
CVE-2022-25922 · Power Line Communications PLC4TRUCKS
ICSA-22-063-01 Missing Authentication for Critical Function in Trailer Power Line Communications (PLC) J2497
Siemens
CVE-2022-26314 · Siemens Mendix Forgot Password Appstore module
A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1), Mendix Forgot Password A…
CVE-2022-26313 · Siemens Mendix Forgot Password Appstore module
A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1).
CVE-2021-37208 · Siemens RUGGEDCOM i800
A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802…
Huawei
SAP SE
Xiaomi
pytorchlightning
CVE-2022-0845 · pytorchlightning pytorchlightning/pytorch-lightning
Code Injection in pytorchlightning/pytorch-lightning
Secomea
TianoCore
F-Secure
CVE-2021-44749 · F-Secure F-Secure SAFE Browser for Android Version 18.5
Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser Protection for Android
Samsung Mobile
CVE-2022-25818 · Samsung Mobile Samsung Mobile Devices