Skip to contentUnspecified vulnerabilities
Newest
- nodebbNodeBB abort cross-site request forgeryCVE-2022-3978Fix available4.3 Medium
- matrix-org matrix-appservice-irc, matrix irc bridge +1 morematrix-appservice-irc PgDataStore.ts sql injectionCVE-2022-3971Fix available4.6 Medium
- libtiff, apple ipados, iphone os +4 more +6 moreLibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflowCVE-2022-3970Fix available6.3 Medium
- openkmOpenKM FileUtils.java getFileExtension temp fileCVE-2022-39692.6 Low
- emlogemlog article_save.php cross site scriptingCVE-2022-39683.5 Low
- unspecified vesta control panel, vestacp control panel +1 moreVesta Control Panel sed main.sh argument injectionCVE-2022-39675.3 Medium
- ultimatemember ultimate member, unspecified ultimate member plugin +1 moreUltimate Member Plugin Template class-shortcodes.php load_template pathname traversalCVE-2022-39664.3 Medium
- ffmpegffmpeg QuickTime Graphics Video Encoder smcenc.c smc_encode_stream out-of-boundsCVE-2022-3965Fix available4.3 Medium
- ffmpegffmpeg QuickTime RPZA Video Encoder rpzaenc.c out-of-boundsCVE-2022-3964Fix available4.3 Medium
- sir gnuboard, unspecified gnuboard5 +1 moregnuboard5 FAQ Key ID faq.php cross site scriptingCVE-2022-39633.5 Low
- drogondrogon Session Hash small space of random valuesCVE-2022-39593.1 Low
- gpacGPAC SVG Parser svg_attributes.c svg_parse_preserveaspectratio memory leakCVE-2022-3957Fix available4.3 Medium
- activity log project log, unspecified activity log plugin +1 moreActivity Log Plugin HTTP Header neutralization for logsCVE-2022-39415.3 Medium
- phpipamphpipam Import Preview import-load-data.php cross site scriptingCVE-2022-38452.4 Low
- centreoncentreon Contact Groups Form formContactGroup.php sql injectionCVE-2022-3827Fix available6.3 Medium
- nodered node-red-dashboardnode-red-dashboard ui_text Format ui-component-ctrl.js cross site scriptingCVE-2022-3783Fix available3.5 Low
- redisRedis on Windows dbghelp.dll uncontrolled search pathCVE-2022-3734Disputed6.3 Medium
- unspecified vim, debian linux, fedoraproject fedora +1 more +3 morevim autocmd quickfix.c qf_update_buffer use after freeCVE-2022-3705Fix available5.0 Medium
- rubyonrails rails, unspecified ruby on rails +1 moreRuby on Rails _table.html.erb cross site scriptingCVE-2022-3704Disputed3.5 Low
- exim, fedoraproject fedora +1 moreExim DMARC dmarc.c dmarc_dns_lookup use after freeCVE-2022-3620Fix available5.6 Medium
- exim, fedoraproject fedora +1 moreExim Regex use after freeCVE-2022-3559Fix available4.6 Medium
- itsourcecode human resource management systemHuman Resource Management System Leave cross site scriptingCVE-2022-35023.5 Low
- puppycmspuppyCMS settings.php cross site scriptingCVE-2022-3464Public exploit4.3 Medium
- open5gsOpen5GS UDP Packet ogs-tlv-msg.c denial of serviceCVE-2022-33543.5 Low
- open5gsOpen5GS AMF client.c denial of serviceCVE-2022-32994.3 Medium
- fast food ordering system project food ordering system, oretnom23 fast food ordering system +1 moreoretnom23 Fast Food Ordering System cross site scriptingCVE-2022-30153.5 Low
- fast food ordering system project food ordering system, oretnom23 fast food ordering system +1 moreoretnom23 Fast Food Ordering System index.php sql injectionCVE-2022-30126.3 Medium
- laravelLaravel deserializationCVE-2022-2886Fix available5.0 Medium
- laravellaravel deserializationCVE-2022-2870Fix available4.1 Medium
- sem-cms semcmsSEMCMS Ant_Check.php sql injectionCVE-2022-27266.3 Medium
- fast food ordering system project food ordering system, oretnom23 fast food ordering system +1 moreoretnom23 Fast Food Ordering System Menu List Page cross site scriptingCVE-2022-26863.5 Low
- private cloud management platform project cloud management platform, unspecified private cloud management platform +1 morePrivate Cloud Management Platform POST Request global_config_query improper authenticationCVE-2022-26647.3 High
- jeecg boot, unspecified jeecg-boot +1 morejeecg-boot unrestricted uploadCVE-2022-26477.3 High
- revmakx infinitewp client, unspecified infinitewp client plugin +1 moreInfiniteWP Client Plugin injectionCVE-2016-150047.3 High
- logostore project logostoreLogoStore search.php sql injectionCVE-2017-201296.3 Medium
- kb messages php script project messages php script, unspecified kb messages php script +1 moreKB Messages PHP Script sql injectionCVE-2017-201287.3 High
- kb login authentication script project login authentication script, unspecified kb login authentication script +1 moreKB Login Authentication Script sql injectionCVE-2017-201277.3 High
- kb affiliate referral script project affiliate referral script, unspecified kb affiliate referral script +1 moreKB Affiliate Referral Script index.php sql injectionCVE-2017-201267.3 High
- online hotel booking project hotel booking, unspecified online hotel booking system +1 moreOnline Hotel Booking System Room edit_room_cat.php sql injectionCVE-2022-22634.7 Medium
- online hotel booking project hotel booking, unspecified online hotel booking system +1 moreOnline Hotel Booking System Room edit_all_room.php sql injectionCVE-2022-22624.7 Medium
- bestsoftinc online hotel booking system, unspecified online hotel booking system pro +1 moreOnline Hotel Booking System Pro roomtype-details.php sql injectionCVE-2017-201256.3 Medium
- bestsoftinc online hotel booking system, unspecified online hotel booking system pro plugin +1 moreOnline Hotel Booking System Pro Plugin roomtype-details.php sql injectionCVE-2017-201246.3 Medium
- sparklabs viscosityViscosity DLL untrusted search pathCVE-2017-201238.8 High
- easy table project table, unspecified easy table plugin +1 moreEasy Table Plugin options-general.php cross site scriptingCVE-2017-201083.5 Low
- simplessusSimplessus path traversalCVE-2017-201055.4 Medium
- simplessusSimplessus Cookie Time sql injectionCVE-2017-201047.3 High
- unspecified kama click counter plugin, wp-kama kama click counter +1 moreKama Click Counter Plugin admin.php Blind sql injectionCVE-2017-201036.3 Medium
- unspecified admin custom login plugin, weblizar admin custom login +1 moreAdmin Custom Login Plugin Persistent cross site scriptingCVE-2017-200983.5 Low
- analytics stats counter statistics project stats counter statistics, unspecified analytics stats counter statistics plugin +1 moreAnalytics Stats Counter Statistics Plugin code injectionCVE-2017-200997.3 High
- album lock project lock, unspecified album lock +1 moreAlbum Lock getImage path traversalCVE-2017-201024.4 Medium
- Show moreLoading…