by Kastro CVE-2022-24086 · Adobe Magento Commerce
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 674 of 786
Adobe
D-Link
Siemens
CVE-2022-25315 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
CVE-2022-25236 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.
CVE-2022-25235 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is…
redhat
CVE-2021-3781 · redhat
A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially craft…
CVE-2021-3773 · redhat
A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditio…
mitre
CVE-2021-46314 · mitre
A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1…
CVE-2022-22916 · mitre
O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.
CVE-2021-44868 · mitre
A problem was found in ming-soft MCMS v5.1.
CVE-2021-46315 · mitre
Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1_FW100A43.bin a…
CVE-2021-46319 · mitre
Remote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin.
CVE-2021-46461 · mitre
njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c.
CVE-2022-22912 · mitre
Prototype pollution vulnerability via .parse() in Plist before v3.0.4 allows attackers to cause a Denial of Service (DoS) and may lead to…
CVE-2022-24984 · mitre
Forms generated by JQueryForm.com before 2022-02-05 (if file-upload capability is enabled) allow remote unauthenticated attackers to uplo…
CVE-2021-33945 · mitre
RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 22…
CVE-2021-46262 · mitre
Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the PPPoE module.
CVE-2021-46263 · mitre
Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wifiTime module.
CVE-2021-46264 · mitre
Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the onlineList module.
CVE-2021-46265 · mitre
Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wanBasicCfg module.
CVE-2021-46321 · mitre
Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wifiBasicCfg module.
CVE-2021-46463 · mitre
njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerability in njs_promise…
CVE-2022-25139 · mitre
njs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in njs_await_fulfilled.
CVE-2021-37354 · mitre
Xerox Phaser 4622 v35.013.01.000 was discovered to contain a buffer overflow in the function sub_3226AC via the TIMEZONE variable.
CVE-2021-45005 · mitre
Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statem…
CVE-2022-22880 · mitre
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /jeecg-boot/sys/user/queryUserByDepId.
CVE-2022-22881 · mitre
Jeecg-boot v3.0 was discovered to contain a SQL injection vulnerability via the code parameter in /sys/user/queryUserComponentData.
CVE-2022-22885 · mitre
Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation.
CVE-2022-22922 · mitre
TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, all…
CVE-2021-3242 · mitre
DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=.
CVE-2021-46250 · mitre
An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attackers to authenticate…
CVE-2022-23358 · mitre
EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php.
VeronaLabs
Alexander Fuchs
CVE-2022-24665 · Alexander Fuchs PHP Everywhere
Remote Code Execution by by Contributor+ users via WordPress gutenberg block
CVE-2022-24663 · Alexander Fuchs PHP Everywhere
Remote Code Execution by Subscriber+ users via WordPress shortcode
CVE-2022-24664 · Alexander Fuchs PHP Everywhere
Remote Code Execution by by Contributor+ users via WordPress metabox
microweber
CVE-2022-0660 · microweber microweber/microweber
Generation of Error Message Containing Sensitive Information in microweber/microweber
ca
snyk
teluu
CVE-2021-43299 · teluu pjsip
Stack overflow in PJSUA API when calling pjsua_player_create.
CVE-2021-43300 · teluu pjsip
Stack overflow in PJSUA API when calling pjsua_recorder_create.
CVE-2021-43301 · teluu pjsip
Stack overflow in PJSUA API when calling pjsua_playlist_create.
CVE-2021-43303 · teluu pjsip
Buffer overflow in PJSUA API when calling pjsua_call_dump.
CVE-2021-43302 · teluu pjsip
Read out-of-bounds in PJSUA API when calling pjsua_recorder_create.
TIBCO Software Inc.
CVE-2021-43049 · TIBCO Software Inc. TIBCO BusinessConnect Container Edition
TIBCO BusinessConnect Container Edition username and password leakage
CVE-2022-22770 · TIBCO Software Inc. TIBCO AuditSafe
TIBCO AuditSafe API Authentication vulnerability
https://accel-ppp.org/
CVE-2022-24705 · https://accel-ppp.org/ accel-ppp