Export limit exceeded: 43563 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (43563 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-38278 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list. | ||||
| CVE-2022-38277 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list. | ||||
| CVE-2022-38276 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list. | ||||
| CVE-2022-38275 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list. | ||||
| CVE-2022-38274 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list. | ||||
| CVE-2022-38273 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve. | ||||
| CVE-2022-38272 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list. | ||||
| CVE-2022-38269 | 1 School Activity Updates With Sms Notification Project | 1 School Activity Updates With Sms Notification | 2024-11-21 | 7.2 High |
| School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/modstudent/index.php?view=edit&id=. | ||||
| CVE-2022-38268 | 1 School Activity Updates With Sms Notification Project | 1 School Activity Updates With Sms Notification | 2024-11-21 | 7.2 High |
| School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/autonumber/index.php?view=edit&id=. | ||||
| CVE-2022-38267 | 1 School Activity Updates With Sms Notification Project | 1 School Activity Updates With Sms Notification | 2024-11-21 | 7.2 High |
| School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/user/index.php?view=edit&id=. | ||||
| CVE-2022-38265 | 1 Apartment Visitor Management System Project | 1 Apartment Visitor Management System | 2024-11-21 | 7.2 High |
| Apartment Visitor Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /avms/edit-apartment.php. | ||||
| CVE-2022-38250 | 1 Nagios | 1 Nagios Xi | 2024-11-21 | 9.8 Critical |
| Nagios XI v5.8.6 was discovered to contain a SQL injection vulnerability via the mib_name parameter at the Manage MIBs page. | ||||
| CVE-2022-38183 | 1 Gitea | 1 Gitea | 2024-11-21 | 6.5 Medium |
| In Gitea before 1.16.9, it was possible for users to add existing issues to projects. Due to improper access controls, an attacker could assign any issue to any project in Gitea (there was no permission check for fetching the issue). As a result, the attacker would get access to private issue titles. | ||||
| CVE-2022-38130 | 1 Keysight | 1 Sensor Management Server | 2024-11-21 | 9.8 Critical |
| The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file (i.e., \\<attacker-host>\sms\<attacker-db.zip>), effectively controlling the content of the database to be restored. | ||||
| CVE-2022-38118 | 1 Hgiga | 1 Oaklouds Portal | 2024-11-21 | 8.8 High |
| OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service. | ||||
| CVE-2022-37794 | 1 Library Management System Project | 1 Library Management System | 2024-11-21 | 9.8 Critical |
| In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection. | ||||
| CVE-2022-37768 | 1 Jpeg | 1 Libjpeg | 2024-11-21 | 7.5 High |
| libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer. | ||||
| CVE-2022-37767 | 1 Pebbletemplates | 1 Pebble Templates | 2024-11-21 | 9.8 Critical |
| Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement arbitrary code execution with springbok. NOTE: the vendor disputes this because input to the Pebble templating engine is intended to include arbitrary Java code, and thus either the input should not arrive from an untrusted source, or else the application using the engine should apply restrictions to the input. The engine is not responsible for validating the input. | ||||
| CVE-2022-37333 | 1 Exceedone | 2 Exment, Laravel-admin | 2024-11-21 | 8.8 High |
| SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows remote authenticated attackers to execute arbitrary SQL commands. | ||||
| CVE-2022-37223 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 9.8 Critical |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/role/list. | ||||