Export limit exceeded: 381913 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 381913 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (381913 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-34962 | 1 Openteknik | 1 Open Source Social Network | 2024-11-21 | 5.4 Medium |
| OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Group Timeline module. | ||||
| CVE-2022-34961 | 1 Openteknik | 1 Open Source Social Network | 2024-11-21 | 5.4 Medium |
| OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Users Timeline module. | ||||
| CVE-2022-34960 | 1 Mikrotik | 1 Routeros | 2024-11-21 | 9.8 Critical |
| The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to locations on the host device. This allows the attacker to mount any arbitrary file to any location on the host. | ||||
| CVE-2022-34956 | 1 Pligg | 1 Pligg Cms | 2024-11-21 | 9.8 Critical |
| Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_groups.php. | ||||
| CVE-2022-34955 | 1 Pligg | 1 Pligg Cms | 2024-11-21 | 9.8 Critical |
| Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_topusers.php. | ||||
| CVE-2022-34954 | 1 Phptpoint | 1 Pharmacy Management System | 2024-11-21 | 9.8 Critical |
| Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at invoiceprint.php. | ||||
| CVE-2022-34953 | 1 Phptpoint | 1 Pharmacy Management System | 2024-11-21 | 9.8 Critical |
| Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getOrderReport.php. | ||||
| CVE-2022-34952 | 1 Phptpoint | 1 Pharmacy Management System | 2024-11-21 | 9.8 Critical |
| Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at edituser.php. | ||||
| CVE-2022-34951 | 1 Phptpoint | 1 Pharmacy Management System | 2024-11-21 | 9.8 Critical |
| Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php. | ||||
| CVE-2022-34950 | 1 Pharmacy Management System Project | 1 Pharmacy Management System | 2024-11-21 | 9.8 Critical |
| Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editproduct.php. | ||||
| CVE-2022-34949 | 1 Pharmacy Management System Project | 1 Pharmacy Management System | 2024-11-21 | 9.8 Critical |
| Pharmacy Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the email or password parameter at login.php. | ||||
| CVE-2022-34948 | 1 Pharmacy Management System Project | 1 Pharmacy Management System | 2024-11-21 | 9.8 Critical |
| Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editbrand.php. | ||||
| CVE-2022-34947 | 1 Pharmacy Management System Project | 1 Pharmacy Management System | 2024-11-21 | 9.8 Critical |
| Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editcategory.php. | ||||
| CVE-2022-34946 | 1 Pharmacy Management System Project | 1 Pharmacy Management System | 2024-11-21 | 9.8 Critical |
| Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php. | ||||
| CVE-2022-34945 | 1 Pharmacy Management System Project | 1 Pharmacy Management System | 2024-11-21 | 9.8 Critical |
| Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getproductreport.php. | ||||
| CVE-2022-34937 | 1 Yuba | 1 U5cms | 2024-11-21 | 8.8 High |
| Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vulnerability allows attackers to execute arbitrary code. | ||||
| CVE-2022-34928 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 8.8 High |
| JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user. | ||||
| CVE-2022-34927 | 1 Milkytracker Project | 1 Milkytracker | 2024-11-21 | 7.8 High |
| MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file. | ||||
| CVE-2022-34924 | 1 Landray | 1 Landray Office Automation | 2024-11-21 | 7.5 High |
| Lanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains an arbitrary file read vulnerability via the component /sys/ui/extend/varkind/custom.jsp. | ||||
| CVE-2022-34919 | 1 Zengenti | 1 Contensis | 2024-11-21 | 9.8 Critical |
| The file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check that a user has authenticated. By uploading a crafted aspx file, it is possible to execute arbitrary commands. | ||||