Skip to content
OpenAdvisories

Archive

28 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /28 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

36 results · Feed

  • Unscored —
    CVE-2022-38511

    TOTOLINK A810R V5.9c.4050_B20190424 was discovered to contain a command injection vulnerability via the component downl…

  • Unscored —
    CVE-2022-38510

    Tenda_TX9pro V22.03.02.10 was discovered to contain a buffer overflow via the component httpd/SetNetControlList.

  • Unscored —
    CVE-2022-36616

    TOTOLINK A810R V4.1.2cu.5182_B20201026 and V5.9c.4050_B20190424 was discovered to contain a hardcoded password for root…

  • Unscored —
    CVE-2022-36615

    TOTOLINK A3000RU V4.1.2cu.5185_B20201128 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

  • Unscored —
    CVE-2022-36614

    TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

  • Unscored —
    CVE-2022-36612

    TOTOLINK A950RG V4.1.2cu.5204_B20210112 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

  • Unscored —
    CVE-2022-36613

    TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

  • Unscored —
    CVE-2022-36611

    TOTOLINK A800R V4.1.2cu.5137_B20200730 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

  • Unscored —
    CVE-2022-36610

    TOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

  • Medium 6.1
    CVE-2022-36573

    Pagekit CMS cross-site scripting in Markdown text box where articles are edited

    A cross-site scripting (XSS) vulnerability in Pagekit CMS v1.0.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Markdown text box under /blog/post/edit.

    pagekit/pagekit Packagist
  • Unscored —
    CVE-2022-36572 EPSS 23%

    Sinsiu Sinsiu Enterprise Website System v1.1.1.0 was discovered to contain a remote code execution (RCE) vulnerability …

  • Unscored —
    CVE-2022-36708

    Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /student…

  • Unscored —
    CVE-2022-36706

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter a…

  • Unscored —
    CVE-2022-36705

    Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter a…

  • Unscored —
    CVE-2022-36704

    Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /librari…

  • Unscored —
    CVE-2022-38562

    Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools…

  • Unscored —
    CVE-2022-38564

    Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow vulnerability in the function formSetPicListItem. …

  • Unscored —
    CVE-2022-38565

    Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. …

  • Unscored —
    CVE-2022-38566

    Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formEmailTest. …

  • Unscored —
    CVE-2022-38567

    Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo. …

  • Unscored —
    CVE-2022-38563

    Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools…

  • Unscored —
    CVE-2022-38568

    Tenda M3 V1.0.0.12(4856) was discovered to contain a heap buffer overflow vulnerability in the function formSetFixTools…

  • Unscored —
    CVE-2022-38569

    Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelAd.

  • Unscored —
    CVE-2022-38571

    Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow in the function formSetGuideListItem.

  • Unscored —
    CVE-2022-38570

    Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelPushedAd. This vulnerability…

  • Unscored —
    CVE-2022-38555 EPSS 10%

    Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name.

  • Critical 9.8
    CVE-2022-37055 Exploited EPSS 56%

    D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, …

    KEV Dec 8, 2025
  • Critical 9.8
    CVE-2022-37056 EPSS 11%

    D-Link GO-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 is vulnerable to Command Injection via /cgibin…

  • Unscored —
    CVE-2022-37057 EPSS 26%

    D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Command Injection via cgibin…

  • Unscored —
    CVE-2022-37053

    TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.

  • Unscored —
    CVE-2022-38556

    Trendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.

  • Unscored —
    CVE-2022-38557

    D-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d/S80telnetd.sh.

  • Unscored —
    CVE-2022-36756

    DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php.

  • Unscored —
    CVE-2022-36755

    D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZED_GROUP=1 value, as demonstrated by a request…

  • Medium 4.3
    CVE-2022-3017

    Cross-Site Request Forgery (CSRF) in froxlor/froxlor

    Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 0.10.38.

    froxlor froxlor/froxlor froxlor/froxlor Packagist
  • High 7.8
    CVE-2022-3016

    Use After Free in vim/vim

    Use After Free in GitHub repository vim/vim prior to 9.0.0286.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine