Page(s) : 1 ... 465 466 467 468 469 470 471 472 473 474 [475] 476 477 478 479 480 481 482 483 484 485 ... | Result(s) : 43350 |
Alerts
DATE | NAME | CATEGORIES | DETAIL | |
---|---|---|---|---|
9.8 | 2022-11-22 | CVE-2022-40189 | cve | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Pig Provider, Apache Airflow allows an attac... |
9.8 | 2022-11-22 | CVE-2022-36179 | cve | Fusiondirectory 1.3 suffers from Improper Session Handling. |
9.6 | 2022-11-22 | CVE-2022-36180 | cve | Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via /fusiondirectory/index.php?message=[injection], /fusiondirectory/index.php?message=invalidparameter&plug={Inj... |
9.1 | 2022-11-22 | CVE-2022-40842 | cve | ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php. |
9.8 | 2022-11-22 | CVE-2022-41326 | cve | The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls. A s... |
9.8 | 2022-11-22 | CVE-2022-43214 | cve | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at printOrder.php. |
9.8 | 2022-11-22 | CVE-2022-43215 | cve | Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php. |
9.8 | 2022-11-22 | CVE-2022-36227 | cve | In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a re... |
9.8 | 2022-11-22 | CVE-2022-40602 | cve | A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote attacker to access the device using an improper pre-configured password if the r... |
9.8 | 2022-11-21 | CVE-2022-41945 | cve | super-xray is a vulnerability scanner (xray) GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced ??into the command, resulting in a possible RCE vuln... |
9.8 | 2022-11-21 | CVE-2022-44785 | cve | An issue was discovered in Appalti & Contratti 9.12.2. The target web applications are subject to multiple SQL Injection vulnerabilities, some of which executable even by unauth... |
9.6 | 2022-11-21 | CVE-2022-43143 | cve | A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error mod... |
9.8 | 2022-11-21 | CVE-2022-30257 | cve | An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V1 of unintended domain name resolution. A revoked domain name can still be resolvable for a l... |
9.8 | 2022-11-21 | CVE-2022-30258 | cve | An issue was discovered in Technitium DNS Server through 8.0.2 that allows variant V2 of unintended domain name resolution. A revoked domain name can still be resolvable for a l... |
9.8 | 2022-11-21 | CVE-2022-44171 | cve | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set. |
9.8 | 2022-11-21 | CVE-2022-44172 | cve | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler. |
9.8 | 2022-11-21 | CVE-2022-44174 | cve | Tenda AC18 V15.03.05.05 is vulnerable to Buffer Overflow via function formSetDeviceName. |
9.8 | 2022-11-21 | CVE-2022-44175 | cve | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg. |
9.8 | 2022-11-21 | CVE-2022-44176 | cve | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function fromSetRouteStatic. |
9.8 | 2022-11-21 | CVE-2022-44177 | cve | Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formWifiWpsStart. |
Page(s) : 1 ... 465 466 467 468 469 470 471 472 473 474 [475] 476 477 478 479 480 481 482 483 484 485 ... | Result(s) : 43350 |