Export limit exceeded: 94956 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (94956 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-37807 | 1 Tenda | 2 Ac1206, Ac1206 Firmware | 2024-11-21 | 9.8 Critical |
| Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function formSetClientState. | ||||
| CVE-2022-37806 | 1 Tenda | 2 Ac1206, Ac1206 Firmware | 2024-11-21 | 9.8 Critical |
| Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromDhcpListClient. | ||||
| CVE-2022-37805 | 1 Tenda | 2 Ac1206, Ac1206 Firmware | 2024-11-21 | 9.8 Critical |
| Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromWizardHandle. | ||||
| CVE-2022-37804 | 1 Tenda | 2 Ac1206, Ac1206 Firmware | 2024-11-21 | 9.8 Critical |
| Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo. | ||||
| CVE-2022-37803 | 1 Tenda | 2 Ac1206, Ac1206 Firmware | 2024-11-21 | 9.8 Critical |
| Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat. | ||||
| CVE-2022-37802 | 1 Tenda | 2 Ac1206, Ac1206 Firmware | 2024-11-21 | 9.8 Critical |
| Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromNatStaticSetting. | ||||
| CVE-2022-37801 | 1 Tenda | 2 Ac1206, Ac1206 Firmware | 2024-11-21 | 9.8 Critical |
| Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand. | ||||
| CVE-2022-37800 | 1 Tenda | 2 Ac1206, Ac1206 Firmware | 2024-11-21 | 9.8 Critical |
| Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function fromSetRouteStatic. | ||||
| CVE-2022-37799 | 1 Tenda | 2 Ac1206, Ac1206 Firmware | 2024-11-21 | 9.8 Critical |
| Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter at the function setSmartPowerManagement. | ||||
| CVE-2022-37798 | 1 Tenda | 2 Ac1206, Ac1206 Firmware | 2024-11-21 | 9.8 Critical |
| Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetVirtualSer. | ||||
| CVE-2022-37796 | 1 Oretnom23 | 1 Simple Online Book Store System | 2024-11-21 | 5.4 Medium |
| In Simple Online Book Store System 1.0 in /admin_book.php the Title, Author, and Description parameters are vulnerable to Cross Site Scripting(XSS). | ||||
| CVE-2022-37781 | 1 Fdkaac Project | 1 Fdkaac | 2024-11-21 | 7.8 High |
| fdkaac v1.0.3 was discovered to contain a heap buffer overflow via __interceptor_memcpy.part.46 at /sanitizer_common/sanitizer_common_interceptors.inc. | ||||
| CVE-2022-37775 | 1 Genesys | 1 Pureconnect | 2024-11-21 | 6.1 Medium |
| Genesys PureConnect Interaction Web Tools Chat Service (up to at least 26- September- 2019) allows XSS within the Printable Chat History via the participant -> name JSON POST parameter. | ||||
| CVE-2022-37771 | 2 Iobit, Microsoft | 2 Malware Fighter, Windows | 2024-11-21 | 6.7 Medium |
| IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable. | ||||
| CVE-2022-37731 | 1 Ftcms | 1 Ftcms | 2024-11-21 | 6.1 Medium |
| ftcms 2.1 poster.PHP has a XSS vulnerability. The attacker inserts malicious JavaScript code into the web page, causing the user / administrator to trigger malicious code when accessing. | ||||
| CVE-2022-37724 | 1 Apple | 1 Webobjects | 2024-11-21 | 6.1 Medium |
| Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces. | ||||
| CVE-2022-37679 | 1 Miniblog.core Project | 1 Miniblog.core | 2024-11-21 | 4.8 Medium |
| Miniblog.Core v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blog/edit. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Excerpt field. | ||||
| CVE-2022-37452 | 2 Debian, Exim | 2 Debian Linux, Exim | 2024-11-21 | 9.8 Critical |
| Exim before 4.95 has a heap-based buffer overflow for the alias list in host_name_lookup in host.c when sender_host_name is set. | ||||
| CVE-2022-37451 | 2 Exim, Fedoraproject | 2 Exim, Fedora | 2024-11-21 | 7.5 High |
| Exim before 4.96 has an invalid free in pam_converse in auths/call_pam.c because store_free is not used after store_malloc. | ||||
| CVE-2022-37435 | 1 Apache | 1 Shenyu | 2024-11-21 | 8.8 High |
| Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3. | ||||