by Kastro CVE-2022-22947 · VMware Spring Cloud Gateway
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 671 of 786
VMware
mitre
CVE-2022-25060 · mitre
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_startPing.
CVE-2022-25061 · mitre
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_setIp6DefaultRoute.
CVE-2022-25064 · mitre
TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the function oal_wan6_setIpA…
CVE-2022-25089 · mitre
Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEY_LOCAL_MACHINE via UITa…
CVE-2022-23898 · mitre
MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via the categoryId parameter in the file IContentDao.xml.
CVE-2021-45414 · mitre
A Remote Code Execution (RCE) vulnerability exists in DataRobot through 2021-10-28 because it allows submission of a Docker environment o…
CVE-2022-24305 · mitre
Zoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that leads to privilege escalation.
CVE-2022-24442 · mitre
JetBrains YouTrack before 2021.4.40426 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.
CVE-2022-25359 · mitre
On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files.
CVE-2022-25411 · mitre
A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafte…
CVE-2022-23878 · mitre
seacms V11.5 is affected by an arbitrary code execution vulnerability in admin_config.php.
CVE-2022-24306 · mitre
Zoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because authorization is mishandled.
CVE-2022-25016 · mitre
Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /student…
CVE-2022-25096 · mitre
Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/vi…
CVE-2022-25263 · mitre
JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration.
CVE-2021-42952 · mitre
Zepl Notebooks before 2021-10-25 are affected by a sandbox escape vulnerability.
CVE-2022-24571 · mitre
Car Driving School Management System v1.0 is affected by SQL injection in the login page.
CVE-2022-25394 · mitre
Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php.
CVE-2022-25045 · mitre
Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileg…
CVE-2022-25095 · mitre
Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request.
CVE-2022-25260 · mitre
JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).
CVE-2022-25262 · mitre
In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.
CVE-2022-26169 · mitre
Air Cargo Management System v1.0 was discovered to contain a SQL injection vulnerability via the ref_code parameter.
CVE-2022-26170 · mitre
Simple Mobile Comparison Website v1.0 was discovered to contain a SQL injection vulnerability via the search parameter.
CVE-2022-26171 · mitre
Bank Management System v1.o was discovered to contain a SQL injection vulnerability via the email parameter.
CVE-2021-43086 · mitre
ARM astcenc 3.2.0 is vulnerable to Buffer Overflow.
CVE-2022-23899 · mitre
MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java.
CVE-2022-25396 · mitre
Cosmetics and Beauty Product Online Store v1.0 was discovered to contain a SQL injection vulnerability via the search parameter.
CVE-2022-25398 · mitre
Auto Spare Parts Management v1.0 was discovered to contain a SQL injection vulnerability via the user parameter.
CVE-2022-25399 · mitre
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter.
CVE-2021-42767 · mitre
A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and…
CVE-2022-25395 · mitre
Cosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross-site scripting (XSS) attacks via the se…
CVE-2022-25010 · mitre
The component /rootfs in RageFile of Stepmania v5.1b2 and below allows attackers access to the entire file system.
TemplateInvaders
CVE-2022-0412 · TemplateInvaders TI WooCommerce Wishlist
TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection
Zyxel
Hicos
CVE-2020-12775 · Hicos citizen certificate client-side component
Hicos citizen certificate client-side component - Command Injection
redhat
wireapp
Fortinet
CVE-2021-36166 · Fortinet Fortinet FortiMail
An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative ac…
CVE-2021-32586 · Fortinet Fortinet FortiMail
An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attack…
monitorjbl
CVE-2022-23640 · monitorjbl excel-streaming-reader
Improper Restriction of XML External Entity Reference in Excel-Streaming-Reader
codeigniter4
CVE-2022-24711 · codeigniter4 CodeIgniter4
Remote CLI Command Execution Vulnerability in CodeIgniter4
zulip
Unknown
CVE-2021-25010 · Unknown Post Snippets