Archive
17 November 2022
Vulnerabilities first published on this day (UTC), newest first.
88 results · Feed
-
Medium 5.4
A stored XSS vulnerability was discovered in adminweb/ra/viewendentity.jsp in PrimeKey EJBCA through 7.9.0.2. A low-pri…
-
Low 2.4
Student Attendance Management System createClass.php cross site scripting
A vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an unknown function of the file createClass.php. The manipulation of the argument className leads to cross site scripting. It is possible to …
-
Medium 4.7
Student Attendance Management System createClass.php sql injection
A vulnerability was found in Student Attendance Management System and classified as critical. This issue affects some unknown processing of the file /Admin/createClass.php. The manipulation of the argument Id leads to sql injection. The attack may be initiate…
-
Medium 6.3
Hostel Searching Project view-property.php sql injection
A vulnerability has been found in Hostel Searching Project and classified as critical. This vulnerability affects unknown code of the file view-property.php. The manipulation of the argument property_id leads to sql injection. The attack can be initiated remo…
-
Critical 9.8
Arbitrary file write in F-Secure Policy Manager through 2022-08-10 allows unauthenticated users to write the file with …
-
Medium 5.4CVE-2022-36432 Public exploit
The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers …
-
Critical 9.9
DLINK - DSL-224 Post-auth RCE.
DLINK - DSL-224 Post-auth RCE. DLINK router version 3.0.8 has an interface where you can configure NTP servers (Network Time Protocol) via jsonrpc API. It is possible to inject a command through this interface that will run with ROOT permissions on the router.
-
High 7.5
The Java Admin Console in Veritas NetBackup through 10.1 and related Veritas products on Linux and UNIX allows authenti…
-
Critical 9.8
SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php
-
High 8.8CVE-2022-44384 Public exploit
An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP f…
-
High 7.2
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manage_user&id=.
-
High 7.2
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_transaction.
-
Critical 9.8
An issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the CORBA back-end services…
-
High 7.8
OPC Foundation Local Discovery Server (LDS) through 1.04.403.478 uses a hard-coded file path to a configuration file. T…
-
High 7.8CVE-2022-23748 Exploited
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from wh…
KEV Feb 6, 2025 -
Medium 6.3
Zip slip in Lancet
Lancet is a general utility library for the go programming language. Affected versions are subject to a ZipSlip issue when using the fileutil package to unzip files. This issue has been addressed and a fix will be included in versions 2.1.10 and 1.3.4. Users …
-
High 7.5
BKG Professional NtripCaster 2.0.39 allows querying information over the UDP protocol without authentication. The NTRIP…
-
High 7.5
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…
-
Medium 5.3
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…
-
High 7.5
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…
-
High 7.5
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…
-
Critical 9.8
Dreamer CMS 4.0.01 is vulnerable to SQL Injection.
-
Medium 6.1
Hustoj 22.09.22 has a XSS Vulnerability in /admin/problem_judge.php.
-
High 8.8
Doufox 0.0.4 contains a CSRF vulnerability that can add system administrator account.
-
Medium 5.4
Keyfactor EJBCA before 7.10.0 allows XSS.
-
Medium 4.8
The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users …
-
High 7.8
In shared_metadata_init of SharedMetadata.cpp, there is a possible out of bounds write due to an integer overflow. This…
-
Low 3.3
Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list.
-
High 7.5
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). An unauthenticated Server-Side Reque…
-
High 7.5
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…
-
High 7.5
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server ho…
-
High 7.2
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet…
-
Medium 6.8CVE-2022-43096 Public exploit
Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port.
-
High 7.5CVE-2022-43140 Scanner template
kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.contro…
-
Medium 6.1
A cross-site scripting (XSS) vulnerability in the add-fee.php component of Password Storage Application v1.0 allows att…
-
Medium 6.7
An arbitrary file upload vulnerability in the component /dede/file_manage_control.php of Dedecms v5.7.101 allows attack…
-
High 8.8
XXL-JOB vulnerable to Server-Side Request Forgery (SSRF)
XXL-Job before v2.3.1 contains a Server-Side Request Forgery (SSRF) via the component /admin/controller/JobLogController.java.
-
High 7.2
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?p…
-
Medium 6.1CVE-2022-43332 Public exploit
A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers to execute arbitrary web scripts or HTM…
-
High 7.2
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet…