by Kastro CVE-2022-24112 · Apache Software Foundation Apache APISIX
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 675 of 786
Apache Software Foundation
CVE-2021-44521 · Apache Software Foundation Apache Cassandra
Remote code execution for scripted UDFs
mitre
CVE-2021-31932 · mitre
Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass.
CVE-2021-45420 · mitre
Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.…
CVE-2022-23389 · mitre
PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter.
CVE-2022-24954 · mitre
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for the 'subform col…
CVE-2021-46362 · mitre
A Server-Side Template Injection (SSTI) vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allow…
CVE-2022-24977 · mitre
ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading t…
CVE-2020-26728 · mitre
A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42_multi and Tenda AC9 V1.0 V15.03.05.19(6318)_CN which allows for remote code…
CVE-2021-46361 · mitre
An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary…
CVE-2020-36062 · mitre
Dairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access t…
CVE-2021-34235 · mitre
Tokheim Profleet DiaLOG 11.005.02 is affected by SQL Injection.
CVE-2022-23337 · mitre
DedeCMS v5.7.87 was discovered to contain a SQL injection vulnerability in article_coonepage_rule.php via the ids parameter.
CVE-2022-22295 · mitre
Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameter_admin.class.php via the table_para parameter.
CVE-2022-23335 · mitre
Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in language_general.class.php via doModifyParameter.
CVE-2022-23806 · mitre
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int…
CVE-2022-24961 · mitre
In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days.
CVE-2022-23390 · mitre
An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files.
CVE-2021-42940 · mitre
A Cross Site Scripting (XSS) vulnerability exists in Projeqtor 9.3.1 via /projeqtor/tool/saveAttachment.php, which allows an attacker to…
CVE-2022-23336 · mitre
S-CMS v5.0 was discovered to contain a SQL injection vulnerability in member_pay.php via the O_id parameter.
CVE-2022-23902 · mitre
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in export_data.php via the d_name parameter.
CVE-2022-24206 · mitre
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobile_seal/get_seal.php via the DEVICE_LIST parameter.
CVE-2022-24976 · mitre
Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a c…
CVE-2022-24988 · mitre
In galois_2p8 before 0.1.2, PrimitivePolynomialField::new has an off-by-one buffer overflow for a vector.
CVE-2022-24955 · mitre
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files.
schneider
CVE-2021-22802 · schneider
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing leng…
CVE-2021-22823 · schneider
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context…
CVE-2021-22803 · schneider
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution through a number…
CVE-2021-22801 · schneider
A CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary command execution when the software is config…
CVE-2021-22805 · schneider
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context…
google_android
CVE-2021-39675 · google_android
In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow.
CVE-2021-39616 · google_android
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438
CVE-2021-39658 · google_android
ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does not check the per…
CVE-2021-39635 · google_android
ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions，so that normal a…
Mitsubishi Electric
CVE-2020-14523 · Mitsubishi Electric CW Configurator
Mitsubishi Electric Factory Automation Products Path Traversal
CVE-2020-14521 · Mitsubishi Electric C Controller Interface Module Utility
Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element
Wireshark Foundation
Debian
CVE-2022-0290 · Google Chrome
Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape…
CVE-2022-0097 · Google Chrome
Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a mal…
Drupal
https://accel-ppp.org/
CVE-2022-24704 · https://accel-ppp.org/ Accel-PPP
Buffer Overflow via Crafted IPv6 Addr Attribute Type Client Request in Accel-PPP v1.12
Qualcomm, Inc.
CVE-2021-30317 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compu…
CVE-2021-35068 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Sn…
QNAP Systems Inc.
CVE-2021-38679 · QNAP Systems Inc. Kazoo Server
Improper Authentication in Kazoo Server
Samsung Mobile
CVE-2022-23425 · Samsung Mobile Samsung Mobile Devices
Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages wi…
CVE-2022-24927 · Samsung Mobile Samsung Video Player