by Kastro CVE-2021-45461 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,284 matching vulnerabilities · Page 686 of 786
mitre
CVE-2020-20601 · mitre
An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.
CVE-2021-45459 · mitre
lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter.
CVE-2021-44659 · mitre
Adding a new pipeline in GoCD server version 21.3.0 has a functionality that could be abused to do an un-intended action in order to achi…
CVE-2021-45090 · mitre
Stormshield Endpoint Security before 2.1.2 allows remote code execution.
CVE-2021-40612 · mitre
An issue was discovered in Opmantek Open-AudIT after 3.5.0.
CVE-2021-44031 · mitre
An issue was discovered in Quest KACE Desktop Authority before 11.2.
CVE-2021-39306 · mitre
A stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in the client code when an attacker sends a b…
CVE-2021-43155 · mitre
Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php.
CVE-2021-43157 · mitre
Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cart_remove.php.
CVE-2021-43628 · mitre
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php.
CVE-2021-43629 · mitre
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php.
CVE-2021-43631 · mitre
Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment.php.
CVE-2021-44029 · mitre
An issue was discovered in Quest KACE Desktop Authority before 11.2.
talos
CVE-2021-21881 · talos
An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.…
CVE-2021-21892 · talos
A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in…
CVE-2021-40417 · talos
When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decoding parameters that…
CVE-2021-40418 · talos
When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a proper…
CVE-2021-21872 · talos
An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0…
CVE-2021-21879 · talos
A directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8.9.0.0R4.
CVE-2021-21882 · talos
An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4.
CVE-2021-21883 · talos
An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4.
CVE-2021-40393 · talos
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit…
CVE-2021-40394 · talos
An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit…
CVE-2021-21889 · talos
A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).
CVE-2021-21884 · talos
An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4.
CVE-2021-21873 · talos
A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter.
CVE-2021-21874 · talos
A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter.
CVE-2021-21875 · talos
A specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd parameter.
CVE-2021-21876 · talos
Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests.
CVE-2021-21877 · talos
Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests.
CVE-2021-21887 · talos
A stack-based buffer overflow vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R…
CVE-2021-21888 · talos
An OS command injection vulnerability exists in the Web Manager SslGenerateCertificate functionality of Lantronix PremierWave 2050 8.9.0.…
CVE-2021-21890 · talos
A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4…
CVE-2021-21891 · talos
A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4…
CVE-2021-21901 · talos
A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0.
CVE-2021-21903 · talos
A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Module CMA Version 5.0.
CVE-2021-21904 · talos
A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA Version 5.0.
CVE-2021-21894 · talos
A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).
CVE-2021-21895 · talos
A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).
CVE-2021-21952 · talos
An authentication bypass vulnerability exists in the CMD_DEVICE_GET_RSA_KEY_REQUEST functionality of the home_security binary of Anker Eu…
Apache Software Foundation
CVE-2021-44548 · Apache Software Foundation Apache Solr
Apache Solr information disclosure vulnerability through DataImportHandler
pjsip
Mesa Labs
CVE-2021-27447 · Mesa Labs AmegaView
Mesa Labs AmegaView command injection
CVE-2021-27449 · Mesa Labs AmegaView
Mesa Labs AmegaView Command Injection
CVE-2021-27453 · Mesa Labs AmegaView
Mesa Labs AmegaView authentication bypass
CVE-2021-27451 · Mesa Labs AmegaView
Mesa Labs AmegaView improper authentication
Dell
pimcore
CVE-2021-4139 · pimcore pimcore/pimcore