by Kastro CVE-2022-23227 · NUUO NVRmini2 Devices
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 681 of 786
NUUO
Oracle Corporation
CVE-2021-35587 · Oracle Corporation Access Manager
Oracle Fusion Middleware Unspecified Vulnerability
CVE-2022-21306 · Oracle Corporation WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
CVE-2022-21390 · Oracle Corporation Communications Billing and Revenue Management
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Webse…
CVE-2022-21275 · Oracle Corporation Communications Billing and Revenue Management
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Conne…
CVE-2022-21389 · Oracle Corporation Communications Billing and Revenue Management
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Conne…
CVE-2021-35683 · Oracle Corporation Hyperion Essbase Administration Services
Vulnerability in the Oracle Essbase Administration Services product of Oracle Essbase (component: EAS Console).
CVE-2022-21391 · Oracle Corporation Communications Billing and Revenue Management
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Conne…
CVE-2022-21276 · Oracle Corporation Communications Billing and Revenue Management
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Conne…
mitre
CVE-2022-23221 · mitre
H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETT…
CVE-2021-33912 · mitre
libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unau…
CVE-2021-33913 · mitre
libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticate…
CVE-2022-23178 · mitre
An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices.
CVE-2021-45468 · mitre
Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade…
CVE-2021-33962 · mitre
China Mobile An Lianbao WF-1 router v1.0.1 is affected by an OS command injection vulnerability in the web interface /api/ZRUsb/pop_usb_d…
CVE-2021-33963 · mitre
China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and…
CVE-2021-38697 · mitre
SoftVibe SARABAN for INFOMA 1.1 allows Unauthenticated unrestricted File Upload, that allows attackers to upload files with any file exte…
CVE-2021-44738 · mitre
Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter.
CVE-2021-44757 · mitre
Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypass authentication,…
CVE-2021-46013 · mitre
An unrestricted file upload vulnerability exists in Sourcecodester Free school management software 1.0.
CVE-2021-46204 · mitre
Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter.
CVE-2022-23408 · mitre
wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations.
stanfordnlp
CVE-2022-0239 · stanfordnlp stanfordnlp/corenlp
Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp
Apache Software Foundation
CVE-2022-23305 · Apache Software Foundation Apache Log4j 1.x
SQL injection in JDBC Appender in Apache Log4j V1
Le-yan Co., Ltd.
CVE-2022-22055 · Le-yan Co., Ltd. Dental Management System
Le-yan Co., Ltd. dental management system - SQL Injection
CVE-2022-22056 · Le-yan Co., Ltd. Dental Management System
Le-yan Co., Ltd. dental management system - Hard-coded Credentials
Siemens
CVE-2022-23303 · Siemens SIDIS Secured SmartPlug
The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of ca…
CVE-2022-23304 · Siemens SIDIS Secured SmartPlug
The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result o…
google_android
Cisco
CVE-2022-20658 · Cisco Cisco Unified Contact Center Domain Manager
Cisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager Privilege Escalation Vulnerability
QNAP Systems Inc.
CVE-2021-38682 · QNAP Systems Inc. QVR Elite
Stack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard
CVE-2021-38689 · QNAP Systems Inc. QVR Elite
Stack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard
CVE-2021-38690 · QNAP Systems Inc. QVR Elite
Stack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard
CVE-2021-38691 · QNAP Systems Inc. QVR Elite
Stack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard
CVE-2021-38692 · QNAP Systems Inc. QVR Elite
Stack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard
hackerone
hpe
M-Files
Arista Networks
CVE-2021-28506 · Arista Networks EOS
An issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.
CVE-2021-28500 · Arista Networks Arista EOS
An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration.
CVE-2021-28501 · Arista Networks Terminattr