by Kastro CVE-2022-22930 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 680 of 786
mitre
CVE-2021-44734 · mitre
Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to remote code execu…
CVE-2021-44735 · mitre
Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.
CVE-2022-23366 · mitre
HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php.
CVE-2021-40247 · mitre
SQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23, allows attackers to execute arbitrary SQ…
CVE-2022-22928 · mitre
MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code.
CVE-2022-22929 · mitre
MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute a…
CVE-2021-26706 · mitre
An issue was discovered in lib_mem.c in Micrium uC/OS uC/LIB 1.38.x and 1.39.00.
CVE-2021-40908 · mitre
SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute…
CVE-2021-44736 · mitre
The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” feature.
CVE-2021-40909 · mitre
Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretn…
CVE-2021-46061 · mitre
An SQL Injection vulnerability exists in Sourcecodester Computer and Mobile Repair Shop Management system (RSMS) 1.0 via the code paramet…
CVE-2021-46198 · mitre
An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app.
CVE-2021-46200 · mitre
An SQL Injection vulnerability exists in Sourcecodester Simple Music Clour Community System 1.0 via the email parameter in /music/ajax.php.
CVE-2021-46201 · mitre
An SQL Injection vulnerability exists in Sourcecodester Online Resort Management System 1.0 via the id parameterv in /orms/ node.
CVE-2021-46307 · mitre
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php.
CVE-2021-46308 · mitre
An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter.
CVE-2021-46309 · mitre
An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the username parameter.
CVE-2022-23314 · mitre
MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do.
CVE-2022-23315 · mitre
MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do.
CVE-2022-23855 · mitre
An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x.
CVE-2021-30636 · mitre
In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation…
CVE-2021-40595 · mitre
SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL c…
CVE-2021-44092 · mitre
An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form.
CVE-2021-44244 · mitre
An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php.
CVE-2021-44245 · mitre
An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System (CTMS) 1.0 via the (1) username and (2) contac…
CVE-2022-23364 · mitre
HMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php.
CVE-2022-23365 · mitre
HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php.
CVE-2021-40596 · mitre
SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary…
CVE-2021-40907 · mitre
SQL injection vulnerability in Sourcecodester Storage Unit Rental Management System v1 by oretnom23, allows attackers to execute arbitrar…
CVE-2021-41471 · mitre
SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbit…
CVE-2021-41472 · mitre
SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL command…
CVE-2021-41659 · mitre
SQL injection vulnerability in Sourcecodester Banking System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the…
CVE-2021-44090 · mitre
An SQL Injection vulnerability exists in Sourcecodester Online Reviewer System 1.0 via the password parameter.
CVE-2021-46024 · mitre
Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart_add.php, No l…
CVE-2022-23363 · mitre
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via index.php.
CVE-2021-40855 · mitre
The EU Technical Specifications for Digital COVID Certificates before 1.1 mishandle certificate governance.
Siemens
CVE-2022-23852 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
TP-Link
CVE-2021-35003 · TP-Link Archer C90
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114…
CVE-2021-35004 · TP-Link TL-WA1201
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 1.0.1 Build 20200709…
Mitsubishi
IBM
CVE-2020-4879 · IBM Cognos Controller
IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused by improper valida…
CVE-2020-4877 · IBM Cognos Controller
IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized modifications by using public fields in public classes.
Dell
Fresenius Kabi
CVE-2021-23196 · Fresenius Kabi Agilia Link+
Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials
CVE-2021-23233 · Fresenius Kabi Agilia Link+
Fresenius Kabi Agilia Connect Infusion System
CVE-2021-43355 · Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard)
Fresenius Kabi Agilia Connect Infusion System use of client side authentication
CVE-2021-31562 · Fresenius Kabi Agilia Link+