by Kastro CVE-2022-0543 · Debian redis
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 673 of 786
Debian
AccessPress Themes
CVE-2021-24867 · AccessPress Themes Frontend Post WordPress Plugin – AccessPress Anonymous Post
Backdoored Plugins & Themes from AccessPress Themes
mitre
CVE-2021-44567 · mitre
An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsN…
CVE-2022-25072 · mitre
TP-Link Archer A54 Archer A54(US)_V1_210111 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr().
CVE-2022-25073 · mitre
TL-WR841Nv14_US_0.9.1_4.18 routers were discovered to contain a stack overflow in the function dm_fillObjByStr().
CVE-2022-25074 · mitre
TP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the function DM_ Fillobjbystr().
CVE-2022-25075 · mitre
TOTOLink A3000RU V5.9c.2280_B20180512 was discovered to contain a command injection vulnerability in the "Main" function.
CVE-2022-25077 · mitre
TOTOLink A3100R V4.1.2cu.5050_B20200504 was discovered to contain a command injection vulnerability in the "Main" function.
CVE-2022-25322 · mitre
ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.
CVE-2021-46036 · mitre
An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to execute arbitrary c…
CVE-2022-24553 · mitre
An issue was found in Zfaka <= 1.4.5.
CVE-2022-25076 · mitre
TOTOLink A800R V4.1.2cu.5137_B20200730 was discovered to contain a command injection vulnerability in the "Main" function.
CVE-2022-25078 · mitre
TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability in the "Main" function.
CVE-2022-25132 · mitre
A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015…
CVE-2022-25133 · mitre
A command injection vulnerability in the function isAssocPriDevice of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211…
CVE-2022-25134 · mitre
A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015…
CVE-2022-25135 · mitre
A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20…
CVE-2021-45401 · mitre
A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49_multi via…
CVE-2022-25130 · mitre
A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B202110…
CVE-2022-25131 · mitre
A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.…
CVE-2022-25136 · mitre
A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211…
CVE-2022-25137 · mitre
A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20…
CVE-2022-25643 · mitre
seatd-launch in seatd 0.6.x before 0.6.4 allows removing files with escalated privileges when installed setuid root.
CVE-2021-46063 · mitre
MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module.
CVE-2021-46110 · mitre
Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno param…
CVE-2022-23848 · mitre
In Alluxio before 2.7.3, the logserver does not validate the input stream.
CVE-2022-25337 · mitre
Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows injection attacks via image filenames.
CVE-2021-29656 · mitre
Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation.
CVE-2021-29655 · mitre
Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks.
Airspan Networks
CVE-2022-21141 · Airspan Networks MMP
Airspan Networks Mimosa Incorrect Authorization
CVE-2022-21196 · Airspan Networks MMP
Airspan Networks Mimosa Improper Authorization
CVE-2022-21215 · Airspan Networks MMP
Airspan Networks Mimosa Server-Side Request Forgery (SSRF)
CVE-2022-21143 · Airspan Networks MMP
Airspan Networks Mimosa OS Command Injection
Sonos
CVE-2022-24046 · Sonos One Speaker
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.…
CVE-2022-24049 · Sonos One Speaker
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 sy…
unshiftio
CVE-2022-0691 · unshiftio unshiftio/url-parse
Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
CVE-2022-0686 · unshiftio unshiftio/url-parse
Authorization Bypass Through User-Controlled Key in unshiftio/url-parse
BMC
gravitl
CVE-2022-0664 · gravitl gravitl/netmaker
Use of Hard-coded Cryptographic Key in gravitl/netmaker
redhat
brocade
envoyproxy
TmaxSoft Co., Ltd
CVE-2021-26618 · TmaxSoft Co., Ltd ToOffice
Tmax ToOffice arbitrary file creation vulnerability
microweber
CVE-2022-0688 · microweber microweber/microweber
Business Logic Errors in microweber/microweber
Bluetree Co., Ltd
CVE-2021-26619 · Bluetree Co., Ltd BigFileAgent