CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2022-29004

2022-05-30

N/A

6.1 MEDIUM

Diary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name parameter in search-result.php.

CVE-2022-29002

Xuxueli, Xxl-job

Xxl-conf, Xxl-job

2022-06-07

N/A

8.8 HIGH

A Cross-Site Request Forgery (CSRF) in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-job-admin/user/add.

CVE-2022-29001

2022-05-10

N/A

7.2 HIGH

In SpringBootMovie <=1.2, the uploaded file suffix parameter is not filtered, resulting in arbitrary file upload vulnerability

CVE-2022-2900

2022-09-16

N/A

9.1 CRITICAL

Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 8.1.0.

CVE-2022-28999

2022-06-07

N/A

8.8 HIGH

Insecure permissions in the install directories and binaries of Dev-CPP v4.9.9.2 allows attackers to execute arbitrary code via overwriting the binary devcpp.exe.

CVE-2022-28998

2022-06-03

N/A

8.1 HIGH

Xlight FTP v3.9.3.2 was discovered to contain a stack-based buffer overflow which allows attackers to leak sensitive information via crafted code.

CVE-2022-28997

2022-06-03

N/A

7.5 HIGH

CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/.

CVE-2022-28995

2022-05-26

N/A

9.8 CRITICAL

Rengine v1.0.2 was discovered to contain a remote code execution (RCE) vulnerability via the yaml configuration function.

CVE-2022-28994

2022-05-10

N/A

9.8 CRITICAL

Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request.

CVE-2022-28993

2022-06-01

N/A

9.8 CRITICAL

Multi Store Inventory Management System v1.0 allows attackers to perform an account takeover via a crafted POST request.

« Previous 1 … 10,151 10,152 10,153 10,154 10,155 … 11,258 Next »