CVEs published August 25, 2022
232 CVEs were published on August 25, 2022: 2 critical, 13 high. 1 is now in CISA KEV.
- Published
- 232
- Critical
- 2
- High
- 13
- Medium
- 10
- Low
- 0
- Unrated
- 207
- Now in CISA KEV
- 1
- Fix available
- 11
Most affected products
- upx
- 7
- samba
- 5
- SoX
- 4
- Rockwell Automation ISaGRAF Workbench
- 3
- Cisco NX-OS Software
- 2
- GE Gas Power WorkstationST
- 2
- Odyssey
- 2
- RPM
- 2
- vim/vim
- 2
- Active IQ Unified Manager
- 1
Critical 2
High 13
- CVE-2022-37318Archer Platform 6.9 SP2 P2 before 6.11 P3 (6.11.0.3) contain a reflected XSS vulnerability.
- CVE-2022-37317Archer Platform 6.x before 6.11 P3 contain an HTML injection vulnerability.
- CVE-2022-20824Cisco FXOS and NX-OS Software Cisco Discovery Protocol Denial of Service and Arbitrary Code Execution VulnerabilityCisco NX-OS Software
- CVE-2022-20823Cisco NX-OS Software OSPFv3 Denial of Service VulnerabilityCisco NX-OS Software
- CVE-2022-20921Cisco ACI Multi-Site Orchestrator Privilege Escalation VulnerabilityCisco ACI Multi-Site Orchestrator Software
- CVE-2022-2465ISaGRAF Workbench Deserialization of Untrusted Data CWE-502Rockwell Automation ISaGRAF Workbench
- CVE-2022-2464ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22Rockwell Automation ISaGRAF Workbench
- CVE-2022-36510H3C GR2200 MiniGR1A0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
- CVE-2022-36508H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPInfoById.
- CVE-2022-36509H3C GR3200 MiniGR1B0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
- CVE-2022-36504H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID.
- CVE-2022-36804Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10,Atlassian Bitbucket Server · Atlassian Bitbucket Data Center
- CVE-2022-2982Use After Free in vim/vimvim/vim
Medium, low and unrated 217
- CVE-2022-36168A directory traversal vulnerability was discovered in Wuzhicms 4.1.0.
- CVE-2022-36226SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx.
- CVE-2021-3020An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15.
- CVE-2021-32570In Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS authorization group can retrieve the data from cert
- CVE-2022-35192D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Servic
- CVE-2022-30984A buffer overflow vulnerability in the Rubrik Backup Service (RBS) Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1, 7.0.
- CVE-2022-29850Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence
- CVE-2022-36121An issue was discovered in Blue Prism Enterprise 6.0 through 7.01.
- CVE-2022-36120An issue was discovered in Blue Prism Enterprise 6.0 through 7.01.
- CVE-2022-36119An issue was discovered in Blue Prism Enterprise 6.0 through 7.01.
- CVE-2022-36118An issue was discovered in Blue Prism Enterprise 6.0 through 7.01.
- CVE-2022-36117An issue was discovered in Blue Prism Enterprise 6.0 through 7.01.
- CVE-2022-36116An issue was discovered in Blue Prism Enterprise 6.0 through 7.01.
- CVE-2022-36115An issue was discovered in Blue Prism Enterprise 6.0 through 7.01.
- CVE-2022-37316Archer Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control vulnerability in a multi-instance system that could po
- CVE-2022-28747Key reuse in GoSecure Titan Inbox Detection & Response (IDR) through 2022-04-05 leads to remote code execution.
- CVE-2022-31798Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) whe
- CVE-2022-31499Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo.
- CVE-2022-31269Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doo
- CVE-2022-36721Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /admin/modify.php.
- CVE-2022-36720Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/modify1.php.
- CVE-2022-36719Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the ok parameter at /admin/history.php.
- CVE-2022-36715Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php.
- CVE-2022-36716Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/changestock.php.
- CVE-2021-43329A SQL injection vulnerability in license_update.php in Mumara Classic through 2.93 allows a remote unauthenticated attacker to execute arbit
- CVE-2022-36696Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php
- CVE-2022-36697Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php
- CVE-2022-36695Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php
- CVE-2022-36692Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php
- CVE-2022-36693Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php
- CVE-2022-36700Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /items/manage_item.
- CVE-2022-36701Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /items/view_item.ph
- CVE-2022-36698Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /categories/view_ca
- CVE-2022-36703Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /stocks/manage_stoc
- CVE-2022-36699Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /categories/manage_
- CVE-2022-2997Session Fixation in snipe/snipe-itsnipe/snipe-it
- CVE-2020-27802An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.upx
- CVE-2020-27801A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.upx
- CVE-2020-27800A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file.upx
- CVE-2020-27799A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file.upx
- CVE-2020-27798An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.upx
- CVE-2020-27797An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.upx
- CVE-2020-27796A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.upx
- CVE-2021-3914It was found that the smallrye health metrics UI component did not properly sanitize some user inputs.smallrye-health · io.smallrye:smallrye-health-ui
- CVE-2021-3929A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU.QEMU
- CVE-2021-23172A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file.SoX
- CVE-2021-4112A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape.ansible-tower
- CVE-2021-23159A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf() in formats_i.c file.SoX
- CVE-2021-23210A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file.SoX
- CVE-2021-33844A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file.SoX
- CVE-2022-36527Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field uncom.jflyfox:jflyfox_jfinal
- CVE-2022-20865Cisco FXOS Software Command Injection VulnerabilityCisco Firepower Extensible Operating System
- CVE-2021-43767Odyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is configured to use the PostgreSQL server using 'truOdyssey
- CVE-2021-43766Odyssey passes to server unencrypted bytes from man-in-the-middle When Odyssey is configured to use certificate Common Name for client autheOdyssey
- CVE-2021-42523There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c sepcolord
- CVE-2021-42522There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c.GNOME anjuta
- CVE-2021-4022A vulnerability was found in rizin.rizin
- CVE-2022-2255A vulnerability was found in mod_wsgi.mod_wsgi · mod-wsgi
- CVE-2022-37952WorkstationST - Reflected XSS in iHistorian Data Display TagsGE Gas Power WorkstationST
- CVE-2022-37953WorkstationST - Response Splitting in AM Gateway Challenge-ResponseGE Gas Power WorkstationST
- CVE-2022-23235Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability whichActive IQ Unified Manager
- CVE-2022-23715A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and ElasticsearcElastic Cloud Enterprise
- CVE-2022-36358WordPress SEO Scout plugin <= 0.9.83 - Cross-Site Request Forgery (CSRF) vulnerabilitySEO Scout
- CVE-2022-2463ISaGRAF Workbench Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-22Rockwell Automation ISaGRAF Workbench
- CVE-2022-2991A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem.kernel
- CVE-2022-37160Claroline 13.5.7 and prior allows an authenticated attacker to elevate privileges via the arbitrary creation of a privileged user.
- CVE-2022-37159Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload.
- CVE-2022-37161Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload.
- CVE-2022-37162Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS).
- CVE-2022-37158RuoYi v3.8.3 has a Weak password vulnerability in the management system.
- CVE-2022-37292Tenda AX12 V22.03.01.21_CN is vulnerable to Buffer Overflow.
- CVE-2022-37238MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.
- CVE-2022-37239MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint.
- CVE-2022-37240MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.
- CVE-2022-37241MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoin
- CVE-2022-37242MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.
- CVE-2022-37243MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.
- CVE-2022-37244MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter.
- CVE-2022-37245MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint.
- CVE-2022-37822Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetRouteStatic.
- CVE-2022-37816Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetIpMacBind.
- CVE-2022-37820Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ddnsEn parameter in the function formSetSysToolDDNS.
- CVE-2022-37814Tenda AC1206 V15.03.06.23 was discovered to contain multiple stack overflows via the deviceMac and the device_id parameters in the function
- CVE-2022-37817Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the function fromSetIpMacBind.
- CVE-2022-37824Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGusetBasic.
- CVE-2022-37815Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex.
- CVE-2022-37813Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromSetSysTime.
- CVE-2022-37818Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand.
- CVE-2022-37809Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the speed_dir parameter in the function formSetSpeedWan.
- CVE-2022-37810Tenda AC1206 V15.03.06.23 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac.
- CVE-2022-37808Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the index parameter in the function formWifiWpsOOB.
- CVE-2022-37823Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function formSetVirtualSer.
- CVE-2022-37821Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the ProvinceCode parameter in the function formSetProvince.
- CVE-2022-37819Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the timezone parameter in the function fromSetSysTime.
- CVE-2022-36455TOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.c
- CVE-2022-37807Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function formSetClientState.
- CVE-2022-37806Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromDhcpListClient.
- CVE-2022-37805Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the function fromWizardHandle.
- CVE-2022-37811Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the startIp parameter in the function formSetPPTPServer.
- CVE-2022-37812Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the firewallEn parameter in the function formSetFirewallCfg.
- CVE-2022-37803Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat.
- CVE-2022-37800Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function fromSetRouteStatic.
- CVE-2022-37801Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetQosBand.
- CVE-2022-37802Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromNatStaticSetting.
- CVE-2022-37804Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo.
- CVE-2022-37798Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function formSetVirtualSer.
- CVE-2022-37799Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter at the function setSmartPowerManagement.
- CVE-2022-37100H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateMacClone.
- CVE-2022-37098H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateIpv6Params.
- CVE-2022-37095H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateWanParams.
- CVE-2022-37096H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EnableIpv6.
- CVE-2022-37097H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPInfoById.
- CVE-2022-37099H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateSnat.
- CVE-2022-37093H3C H200 H200V100R004 was discovered to contain a stack overflow via the function AddMacList.
- CVE-2022-37094H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.
- CVE-2022-37092H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.
- CVE-2022-37090H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID.
- CVE-2022-37091H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditWlanMacList.
- CVE-2022-37088H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAP5GWifiById.
- CVE-2022-37087H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetMobileAPInfoById.
- CVE-2022-37089H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditMacList.
- CVE-2022-37085H3C H200 H200V100R004 was discovered to contain a stack overflow via the AddWlanMacList function.
- CVE-2022-37086H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed.
- CVE-2022-37084TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the sPort parameter at the addEffect function.
- CVE-2022-37083TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the ip parameter at the function setD
- CVE-2022-37082TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the host_time parameter at the functi
- CVE-2022-37080TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the command parameter at setting/setTracerouteCfg.
- CVE-2022-37081TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setT
- CVE-2022-37079TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the hostName parameter in the functio
- CVE-2022-37078TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLan
- CVE-2022-37077TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the pppoeUser parameter.
- CVE-2022-37074H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function switch_debug_info_set.
- CVE-2022-37076TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a command injection vulnerability via the FileName parameter in the functio
- CVE-2022-37072H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanLinkspyMulti.
- CVE-2022-37075TOTOLink A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg.
- CVE-2022-36519H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function AddWlanMacList.
- CVE-2022-37071H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateOne2One.
- CVE-2022-37073H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanModeMulti.
- CVE-2022-37070H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList.
- CVE-2022-37069H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateSnat.
- CVE-2022-37068H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal.
- CVE-2022-37066H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateDDNS.
- CVE-2022-37067H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateWanParamsMulti.
- CVE-2022-36520H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function DEleteusergroup.
- CVE-2022-36518H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function EditWlanMacList.
- CVE-2022-36516H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function ap_version_check.
- CVE-2022-36517H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function debug_wlan_advance.
- CVE-2022-36514H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function WanModeSetMultiWan.
- CVE-2022-36515H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function addactionlist.
- CVE-2022-36507H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddWlanMacList.
- CVE-2022-36503H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateMacClone.
- CVE-2022-36505H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EDitusergroup.
- CVE-2022-36506H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMacAccessMode.
- CVE-2022-36499H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function DEleteusergroup.
- CVE-2022-36502H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateWanParams.
- CVE-2022-36496H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMobileAPInfoById.
- CVE-2022-36498H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed.
- CVE-2022-36500H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditWlanMacList.
- CVE-2022-36501H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateSnat.
- CVE-2022-36492H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddMacList.
- CVE-2022-36495H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function addactionlist.
- CVE-2022-36497H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.
- CVE-2022-36490H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditMacList.
- CVE-2022-36493H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.
- CVE-2022-36491H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateIpv6Params.
- CVE-2022-36494H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function edditactionlist.
- CVE-2022-36489H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EnableIpv6.
- CVE-2022-36488TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRul
- CVE-2022-36487TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function
- CVE-2022-36485TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the hostName parameter in the functio
- CVE-2022-36486TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the FileName parameter in the functio
- CVE-2022-36484TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg.
- CVE-2022-36483TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter.
- CVE-2022-36482TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function se
- CVE-2022-36481TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the ip parameter in the function setD
- CVE-2022-36480TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg
- CVE-2022-36479TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the host_time parameter in the functi
- CVE-2022-36474H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function WlanWpsSet.
- CVE-2022-36477H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddWlanMacList.
- CVE-2022-36478H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID.
- CVE-2022-36473H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.
- CVE-2022-36475H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddMacList.
- CVE-2022-36470H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAP5GWifiById.
- CVE-2022-36472H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMobileAPInfoById.
- CVE-2022-36469H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.
- CVE-2022-36471H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMacAccessMode.
- CVE-2022-36467H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function EditMacList.d.
- CVE-2022-36468H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed.
- CVE-2022-36466TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg.
- CVE-2022-36465TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter.
- CVE-2022-36464TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRul
- CVE-2022-36463TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg
- CVE-2022-36462TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.
- CVE-2022-36461TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the hostName parameter in the functio
- CVE-2022-36459TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the host_time parameter in the functi
- CVE-2022-36460TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the FileName parameter in the functio
- CVE-2022-36458TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function
- CVE-2022-36456TOTOLink A720R V4.1.5cu.532_B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi
- CVE-2022-2957SourceCodester Simple and Nice Shopping Cart Script profile.php sql injectionSourceCodester Simple and Nice Shopping Cart Script
- CVE-2022-34960The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to l
- CVE-2022-32427PrinterLogic Windows Client through 25.0.0.676 allows attackers to execute directory traversal.
- CVE-2021-20224An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c.ImageMagick
- CVE-2021-25642Apache Hadoop YARN remote code execution in ZKConfigurationStore of capacity schedulerApache Software Foundation Apache Hadoop · org.apache.hadoo…
- CVE-2021-35937A race condition vulnerability was found in rpm.RPM
- CVE-2021-35938A symbolic link issue was found in rpm.RPM
- CVE-2021-3979A key length flaw was found in Red Hat Ceph Storage.ceph
- CVE-2021-42521There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx.vtk
- CVE-2022-0135An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer).virglrenderer
- CVE-2022-2031A flaw was found in Samba.samba
- CVE-2022-22728libapreq2 multipart form parse memory corruptionApache Software Foundation libapreq2
- CVE-2022-2959A race condition was found in the Linux kernel's watch queue due to a missing lock in pipe_resize_ring().kernel · :linux_kernel:
- CVE-2022-2980NULL Pointer Dereference in vim/vimvim/vim
- CVE-2022-32742A flaw was found in Samba.samba
- CVE-2022-32744A flaw was found in Samba.samba
- CVE-2022-32745A flaw was found in Samba.samba
- CVE-2022-32746A flaw was found in the Samba AD LDAP server.samba
- CVE-2022-38533In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in st