by Kastro CVE-2022-25082 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 672 of 786
mitre
CVE-2022-25084 · mitre
TOTOLink T6 V5.9c.4085_B20190428 was discovered to contain a command injection vulnerability in the "Main" function.
CVE-2022-25414 · mitre
Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the parameter NPTR.
CVE-2021-44663 · mitre
A Remote Code Execution (RCE) vulnerability exists in the Xerte Project Xerte through 3.8.4 via a crafted php file through elfinder in co…
CVE-2022-25079 · mitre
TOTOLink A810R V4.1.2cu.5182_B20201026 was discovered to contain a command injection vulnerability in the "Main" function.
CVE-2022-25080 · mitre
TOTOLink A830R V5.9c.4729_B20191112 was discovered to contain a command injection vulnerability in the "Main" function.
CVE-2022-25081 · mitre
TOTOLink T10 V5.9c.5061_B20200511 was discovered to contain a command injection vulnerability in the "Main" function.
CVE-2022-25083 · mitre
TOTOLink A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection vulnerability in the "Main" function.
CVE-2022-25809 · mitre
Improper Neutralization of audio output from 3rd and 4th Generation Amazon Echo Dot devices allows arbitrary voice command execution on t…
CVE-2022-25003 · mitre
Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doc…
CVE-2022-25004 · mitre
Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doc…
CVE-2022-25403 · mitre
HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php.
CVE-2022-25417 · mitre
Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function saveparentcontrolinfo.
CVE-2022-25418 · mitre
Tenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function openSchedWifi.
CVE-2021-39363 · mitre
Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack after ARP cache poisoning has been achieved.
CVE-2021-44550 · mitre
An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).
CVE-2021-44610 · mitre
Multiple SQL Injection vulnerabilities exist in bloofoxCMS 0.5.2.1 - 0.5.1 via the (1) URLs, (2) lang_id, (3) tmpl_id, (4) mod_rewrite (5…
CVE-2021-45977 · mitre
JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1…
CVE-2022-24331 · mitre
In JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible.
CVE-2022-25402 · mitre
An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files.
CVE-2022-24340 · mitre
In JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was possible.
CVE-2022-25404 · mitre
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the DELETE_STR parameter.
CVE-2022-25405 · mitre
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in change_box.php via the DELETE_STR parameter.
CVE-2022-25406 · mitre
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete_query.php via the DELETE_STR parameter.
CVE-2022-25098 · mitre
ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter.
WP Statistics
CVE-2022-0651 · WP Statistics WP Statistics
WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_type
CVE-2022-25148 · WP Statistics WP Statistics
WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id
CVE-2022-25149 · WP Statistics WP Statistics
WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IP
Trend Micro
CVE-2022-25330 · Trend Micro Trend Micro ServerProtect for Storage
Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the…
CVE-2022-25329 · Trend Micro Trend Micro ServerProtect for Storage
Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed…
Oracle Corporation
CVE-2021-35689 · Oracle Corporation Oracle Talent Acquisition Cloud - Taleo Enterprise Edition
A potential vulnerability in the Oracle Talent Acquisition Cloud - Taleo Enterprise Edition.
appleple inc.
Gabia Co., Ltd
CVE-2021-26617 · Gabia Co., Ltd Firstmall
Gabia Firstmall remote code execution vulnerability
Cybonet
CVE-2022-22794 · Cybonet Pineapp Mail Relay
Cybonet - PineApp Mail Relay Unauthenticated Sql Injection
microweber
CVE-2022-0724 · microweber microweber/microweber
Insecure Storage of Sensitive Information in microweber/microweber
huawei
CVE-2021-22426 · Huawei EMUI
There is a memory address out of bounds in smartphones.
CVE-2021-22429 · Huawei EMUI
There is a memory address out of bounds in smartphones.
CVE-2021-22430 · Huawei EMUI
There is a logic bypass vulnerability in smartphones.
CVE-2021-22431 · Huawei EMUI
There is a vulnerability when configuring permission isolation in smartphones.
CVE-2021-22432 · Huawei EMUI
There is a vulnerability when configuring permission isolation in smartphones.
CVE-2021-22433 · Huawei EMUI
There is a memory address out of bounds in smartphones.
CVE-2021-22434 · Huawei EMUI
There is a memory address out of bounds vulnerability in smartphones.
CVE-2021-22480 · Huawei HarmonyOS
The interface of a certain HarmonyOS module has an integer overflow vulnerability.
CVE-2021-40046 · huawei
PCManager versions 11.1.1.95 has a privilege escalation vulnerability.
CVE-2021-22394 · Huawei EMUI
There is a buffer overflow vulnerability in smartphones.
CVE-2021-22448 · Huawei EMUI
There is an improper verification vulnerability in smartphones.
General Electric
CVE-2022-21798 · General Electric Proficy CIMPLICITY