by Kastro CVE-2021-21960 · talos
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 677 of 786
talos
CVE-2021-21961 · talos
A stack-based buffer overflow vulnerability exists in the NBNS functionality of Sealevel Systems, Inc.
CVE-2021-21962 · talos
A heap-based buffer overflow vulnerability exists in the OTA Update u-download functionality of Sealevel Systems, Inc.
CVE-2021-21965 · talos
A denial of service vulnerability exists in the SeaMax remote configuration functionality of Sealevel Systems, Inc.
mitre
CVE-2022-22831 · mitre
An issue was discovered in Servisnet Tessa 0.0.2.
CVE-2022-23329 · mitre
A vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows attackers to execute arbitrary commands…
CVE-2022-24260 · mitre
A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level.
CVE-2021-41816 · mitre
CGI.escape_html in Ruby before 2.7.5 and 3.x before 3.0.3 has an integer overflow and resultant buffer overflow via a long string on plat…
CVE-2021-44880 · mitre
D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection…
CVE-2021-44881 · mitre
D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function.
CVE-2021-44882 · mitre
D-Link device DIR_878_FW1.30B08_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function.
CVE-2021-45733 · mitre
TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost.
CVE-2021-45738 · mitre
TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile.
CVE-2021-46227 · mitre
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function proxy_client.asp.
CVE-2021-46229 · mitre
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function usb_paswd.asp.
CVE-2021-46454 · mitre
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanApcliSettings.
CVE-2021-29393 · mitre
Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthe…
CVE-2021-44247 · mitre
Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain…
CVE-2021-45742 · mitre
TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function.
CVE-2021-45998 · mitre
D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the LocalIPAddress param…
CVE-2021-46226 · mitre
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function wget_test.asp.
CVE-2021-46228 · mitre
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpd_debug.asp.
CVE-2021-46230 · mitre
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgrade_filter.
CVE-2021-46231 · mitre
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function urlrd_opt.asp.
CVE-2021-46232 · mitre
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function version_upgrade.asp.
CVE-2021-46233 · mitre
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function msp_info.htm.
CVE-2021-46452 · mitre
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographyS…
CVE-2021-46453 · mitre
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStaticRouteSettings.
CVE-2021-44978 · mitre
iCMS <= 8.0.0 allows users to add and render a comtom template, which has a SSTI vulnerability which causes remote code execution.
CVE-2021-45990 · mitre
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function uploadPicture.
CVE-2022-24259 · mitre
An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via…
CVE-2021-29396 · mitre
Systemic Insecure Permissions in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to use vari…
CVE-2021-38172 · mitre
perM 0.4.0 has a Buffer Overflow related to strncpy.
CVE-2021-45986 · mitre
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetUSBShare…
CVE-2021-45987 · mitre
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetNetCheck…
CVE-2021-45740 · mitre
TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function.
CVE-2022-23379 · mitre
Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid().
CVE-2022-24552 · mitre
A flaw was found in the REST API in StarWind Stack.
snyk
Apache Software Foundation
CVE-2021-36152 · Apache Software Foundation Apache Gobblin
Insecure TrustManager used in LDAP connections
bildsben
CVE-2022-23611 · bildsben iTunesRPC-Remastered
OS command injection in iTunesRPC-Remastered
CVE-2022-23609 · bildsben iTunesRPC-Remastered
Path traveresal in iTunesRPC-Remastered
G.J.P.
CVE-2021-44779 · G.J.P. [GWA] AutoResponder (WordPress plugin)