Export limit exceeded: 420028 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 108814 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (108814 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-36882 | 2 Jenkins, Redhat | 2 Git, Openshift | 2024-11-21 | 8.8 High |
| A cross-site request forgery (CSRF) vulnerability in Jenkins Git Plugin 4.11.3 and earlier allows attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit. | ||||
| CVE-2022-36881 | 2 Jenkins, Redhat | 2 Git Client, Openshift | 2024-11-21 | 8.1 High |
| Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enabling man-in-the-middle attacks. | ||||
| CVE-2022-36833 | 2 Google, Samsung | 2 Android, Gameoptimizingservice | 2024-11-21 | 7.3 High |
| Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above allows local attacker to execute hidden function for developer by changing package name. | ||||
| CVE-2022-36803 | 1 Atlassian | 1 Jira Align | 2024-11-21 | 8.8 High |
| The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permission to use the MasterUserEdit API to modify any users role to Super Admin. This vulnerability was reported by Jacob Shafer from Bishop Fox. | ||||
| CVE-2022-36799 | 1 Atlassian | 2 Jira Data Center, Jira Server | 2024-11-21 | 7.2 High |
| This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has been implemented. Affected versions of Atlassian Jira Server and Data Center allowed remote attackers with system administrator permissions to execute arbitrary code via Template Injection leading to Remote Code Execution (RCE) in the Email Templates feature. In this case the security improvement was to protect against using the XStream library to be able to execute arbitrary code in velocity templates. The affected versions are before version 8.13.19, from version 8.14.0 before 8.20.7, and from version 8.21.0 before 8.22.1. | ||||
| CVE-2022-36788 | 1 Slic3r | 1 Libslic3r | 2024-11-21 | 8.1 High |
| A heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially-crafted STL file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. | ||||
| CVE-2022-36773 | 2 Ibm, Netapp | 2 Cognos Analytics, Oncommand Insight | 2024-11-21 | 8.1 High |
| IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 233571. | ||||
| CVE-2022-36768 | 1 Ibm | 2 Aix, Vios | 2024-11-21 | 7.8 High |
| IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain root privileges. IBM X-Force ID: 232014. | ||||
| CVE-2022-36754 | 1 Oretnom23 | 1 Expense Management System | 2024-11-21 | 7.2 High |
| Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/debit_credit_p. | ||||
| CVE-2022-36721 | 1 Library Management System Project | 1 Library Management System | 2024-11-21 | 8.8 High |
| Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /admin/modify.php. | ||||
| CVE-2022-36720 | 1 Library Management System Project | 1 Library Management System | 2024-11-21 | 8.8 High |
| Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/modify1.php. | ||||
| CVE-2022-36704 | 1 Library Management System Project | 1 Library Management System | 2024-11-21 | 8.8 High |
| Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /librarian/studentdetails.php. | ||||
| CVE-2022-36703 | 1 Ingredients Stock Management System Project | 1 Ingredients Stock Management System | 2024-11-21 | 8.8 High |
| Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /stocks/manage_stockin.php. | ||||
| CVE-2022-36701 | 1 Ingredients Stock Management System Project | 1 Ingredients Stock Management System | 2024-11-21 | 8.8 High |
| Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /items/view_item.php. | ||||
| CVE-2022-36700 | 1 Ingredients Stock Management System Project | 1 Ingredients Stock Management System | 2024-11-21 | 8.8 High |
| Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /items/manage_item.php. | ||||
| CVE-2022-36699 | 1 Ingredients Stock Management System Project | 1 Ingredients Stock Management System | 2024-11-21 | 8.8 High |
| Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /categories/manage_category.php. | ||||
| CVE-2022-36698 | 1 Ingredients Stock Management System Project | 1 Ingredients Stock Management System | 2024-11-21 | 8.8 High |
| Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /categories/view_category.php. | ||||
| CVE-2022-36690 | 1 Ingredient Stock Management System Project | 1 Ingredient Stock Management System | 2024-11-21 | 8.8 High |
| Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user&id=. | ||||
| CVE-2022-36689 | 1 Ingredient Stock Management System Project | 1 Ingredient Stock Management System | 2024-11-21 | 8.8 High |
| Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/waste&month=. | ||||
| CVE-2022-36688 | 1 Ingredient Stock Management System Project | 1 Ingredient Stock Management System | 2024-11-21 | 8.8 High |
| Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockout&month=. | ||||