Export limit exceeded: 420081 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 108848 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (108848 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-38368 | 1 Aviatrix | 1 Gateway | 2024-11-21 | 8.8 High |
| An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands. | ||||
| CVE-2022-38362 | 1 Apache | 1 Apache-airflow-providers-docker | 2024-11-21 | 8.8 High |
| Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host. | ||||
| CVE-2022-38359 | 1 Eyeofnetwork | 1 Eyes Of Network Web | 2024-11-21 | 8.8 High |
| Cross-site request forgery attacks can be carried out against the Eyes of Network web application, due to an absence of adequate protections. An attacker can, for instance, delete the admin user by directing an authenticated user to the URL https://<target-address>/module/admin_user/index.php?DataTables_Table_0_length=10&user_selected%5B%5D=1&user_mgt_list=delete_user&action=submit by means of a crafted link. | ||||
| CVE-2022-38357 | 1 Eyeofnetwork | 1 Eyes Of Network Web | 2024-11-21 | 8.8 High |
| Improper neutralization of special elements leaves the Eyes of Network Web application vulnerable to an iFrame injection attack, via the url parameter of /module/module_frame/index.php. | ||||
| CVE-2022-38342 | 1 Safe | 1 Fme Server | 2024-11-21 | 8.5 High |
| Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows authenticated attackers to perform data exfiltration or Server-Side Request Forgery (SSRF) attacks. | ||||
| CVE-2022-38341 | 1 Safe | 1 Fme Server | 2024-11-21 | 7.1 High |
| Safe Software FME Server v2021.2.5 and below does not employ server-side validation. | ||||
| CVE-2022-38333 | 1 Openwrt | 1 Openwrt | 2024-11-21 | 7.5 High |
| Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function header_value(). This vulnerability allows attackers to access sensitive information via a crafted HTTP request. | ||||
| CVE-2022-38323 | 1 Event Management System Project | 1 Event Management System | 2024-11-21 | 7.2 High |
| Event Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /Royal_Event/update_image.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. | ||||
| CVE-2022-38306 | 1 Lief-project | 1 Lief | 2024-11-21 | 7.8 High |
| LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc. | ||||
| CVE-2022-38305 | 1 Aerocms Project | 1 Aerocms | 2024-11-21 | 8.8 High |
| AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the component /admin/profile.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. | ||||
| CVE-2022-38304 | 1 Online Leave Management System Project | 1 Online Leave Management System | 2024-11-21 | 7.2 High |
| Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manage_leave_type.php. | ||||
| CVE-2022-38303 | 1 Online Leave Management System Project | 1 Online Leave Management System | 2024-11-21 | 7.2 High |
| Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manage_leave_type.php. | ||||
| CVE-2022-38302 | 1 Online Leave Management System Project | 1 Online Leave Management System | 2024-11-21 | 7.2 High |
| Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manage_department.php. | ||||
| CVE-2022-38301 | 1 Onedev Project | 1 Onedev | 2024-11-21 | 8.8 High |
| Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib. | ||||
| CVE-2022-38298 | 1 Appsmith | 1 Appsmith | 2024-11-21 | 8.8 High |
| Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery (SSRF) via redirecting incoming requests to the AWS internal metadata endpoint. | ||||
| CVE-2022-38286 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list. | ||||
| CVE-2022-38285 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list. | ||||
| CVE-2022-38284 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list. | ||||
| CVE-2022-38283 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list. | ||||
| CVE-2022-38282 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list. | ||||