by Kastro CVE-2022-21724 · GitHub_M
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 678 of 786
talos
mitre
CVE-2022-24144 · mitre
Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function WanParameterSetting.
CVE-2022-24223 · mitre
AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.
CVE-2021-43510 · mitre
SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php.
CVE-2022-24263 · mitre
Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php vi…
CVE-2021-46455 · mitre
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings.
CVE-2021-46456 · mitre
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanACLSettings.
CVE-2021-46457 · mitre
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function ChgSambaUserSettings.
CVE-2022-23357 · mitre
mozilo2.0 was discovered to be vulnerable to directory traversal attacks via the parameter curent_dir.
CVE-2022-24148 · mitre
Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function mDMZSetCfg.
CVE-2022-24150 · mitre
Tenda AX3 v16.03.12.10_CN was discovered to contain a command injection vulnerability in the function formSetSafeWanWebMan.
CVE-2022-24165 · mitre
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetQvlanList.
CVE-2022-24167 · mitre
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetDMZ.
CVE-2022-24168 · mitre
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpGroup.
CVE-2022-24170 · mitre
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetIpSecTun…
CVE-2022-24171 · mitre
Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetPppoeSer…
CVE-2022-24218 · mitre
An issue in /admin/delete_image.php of eliteCMS v1.0 allows attackers to delete arbitrary files.
CVE-2021-31617 · mitre
In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4…
CVE-2021-42637 · mitre
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use user-controlled input to craft a URL, resulting in a Server Side Request Forg…
CVE-2021-43509 · mitre
SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-service.php.
CVE-2021-45079 · mitre
In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client an…
CVE-2022-24300 · mitre
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack m…
CVE-2020-36064 · mitre
Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the c…
CVE-2021-42640 · mitre
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that a…
CVE-2022-24307 · mitre
Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities.
CVE-2021-46093 · mitre
eliteCMS v1.0 is vulnerable to Insecure Permissions via manage_uploads.php.
CVE-2021-46444 · mitre
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_group_edit&agID.
CVE-2021-46445 · mitre
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/categories.php?box_group_id.
CVE-2021-46446 · mitre
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_access_group_…
CVE-2021-46448 · mitre
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/customers.php?page=1&cID.
CVE-2021-46660 · mitre
Signiant Manager+Agents before 15.1 allows XML External Entity (XXE) attacks.
CVE-2022-24123 · mitre
MarkText through 0.16.3 does not sanitize the input of a mermaid block before rendering.
CVE-2022-24219 · mitre
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_page.php.
CVE-2022-24220 · mitre
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_post.php.
CVE-2022-24221 · mitre
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php.
CVE-2022-24222 · mitre
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_user.php.
Unknown
CVE-2021-24762 · Unknown Perfect Survey
Perfect Survey < 1.5.2 - Unauthenticated SQL Injection
CVE-2022-0320 · Unknown Essential Addons for Elementor
Essential Addons for Elementor < 5.0.5 - Unauthenticated LFI
snyk
ibm
WPScan
nvidia
janeczku
CVE-2022-0339 · janeczku janeczku/calibre-web