by Kastro CVE-2022-23131 · Zabbix Frontend
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 682 of 786
Zabbix
Siemens
CVE-2022-23218 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path a…
CVE-2022-23219 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname…
CVE-2022-22822 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVE-2022-22823 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
CVE-2022-22824 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
Apache Software Foundation
CVE-2021-43297 · Apache Software Foundation Apache Dubbo
Dubbo Hessian cause RCE when parse error
CVE-2021-45456 · Apache Software Foundation Apache Kylin
Command injection
CVE-2021-31522 · Apache Software Foundation Apache Kylin
Apache Kylin unsafe class loading
h2database
Microsoft
CVE-2022-21907 · Microsoft Windows 10 Version 1809
HTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2022-21849 · Microsoft Windows 10 Version 1809
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
CVE-2022-21898 · Microsoft Windows 10 Version 1809
DirectX Graphics Kernel Remote Code Execution Vulnerability
CVE-2022-21874 · Microsoft Windows 10 Version 1809
Windows Security Center API Remote Code Execution Vulnerability
CVE-2022-21846 · Microsoft Microsoft Exchange Server 2016 Cumulative Update 22
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-21969 · Microsoft Microsoft Exchange Server 2013 Cumulative Update 23
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-21855 · Microsoft Microsoft Exchange Server 2013 Cumulative Update 23
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-21901 · Microsoft Windows 10 Version 1809
Windows Hyper-V Elevation of Privilege Vulnerability
Commvault
mitre
CVE-2021-45411 · mitre
In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and lever…
CVE-2021-46067 · mitre
In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.
CVE-2022-22845 · mitre
QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key across different c…
CVE-2021-45003 · mitre
Laundry Booking Management System 1.0 (Latest) and previous versions are affected by a remote code execution (RCE) vulnerability in profi…
CVE-2021-45334 · mitre
Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection.
CVE-2022-22817 · mitre
PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method.
CVE-2021-45807 · mitre
jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall.
CVE-2022-22704 · mitre
The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly e…
CVE-2020-28102 · mitre
cscms v4.1 allows for SQL injection via the "js_del" function.
CVE-2020-28103 · mitre
cscms v4.1 allows for SQL injection via the "page_del" function.
CVE-2022-22847 · mitre
Formpipe Lasernet before 9.13.3 allows file inclusion in Client Web Services (either by an authenticated attacker, or in a configuration…
Unknown
CVE-2021-25032 · Unknown PublishPress Capabilities – User Role Access, Editor Permissions, Admin Menus
PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise
CVE-2021-24949 · Unknown The Plus Addons for Elementor - Pro
The Plus Addons for Elementor Pro < 5.0.7 - Unauthenticated SQL Injection
Adobe
CVE-2021-40722 · Adobe Experience Manager
AEM Forms Improper Restriction of XML External Entity Reference
snyk
dahua
Western Digital
CVE-2022-22989 · Western Digital My Cloud
Pre-authenticated stack overflow vulnerability on FTP Service
CVE-2022-22988 · Western Digital EdgeRover
Insecure file and directory permissions on EdgeRover
huawei
CVE-2021-40010 · huawei
The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.
CVE-2021-39993 · huawei
There is an Integer overflow vulnerability with ACPU in smartphones.
CVE-2021-39996 · huawei
There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones.
sismics
TIBCO Software Inc.
CVE-2021-43052 · TIBCO Software Inc. TIBCO FTL - Community Edition
TIBCO FTL Secret Generation Vulnerability
Mirantis
Qualcomm, Inc.
CVE-2021-30285 · Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking