CRITICAL Severity CVEs

RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable.

A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet servic

Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the para

Easyone CRM v5.50.02 was discovered to contain a SQL Injection vulnerability via the text parameter at /Services/Misc.as

Monnai aaPanel host system v1.5 contains an access control issue which allows attackers to escalate privileges and execu

OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules.

An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacke

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache In

Last Yard 22.09.8-1 does not enforce HSTS headers

A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a

A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authenticatio

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution w

A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionali

A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to d

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length heade

Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection.

An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to u

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/l

Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing `<image

Netcad KEOS 1.0 is vulnerable to XML External Entity (XXE) resulting in SSRF with XXE (remote).

EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter.

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php.

COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incor

COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerab

An issue was discovered in LIVEBOX Collaboration vDesk before v018. Broken Access Control can occur under the /api/v1/re

A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server

SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator tem

Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readOb

SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter.

Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary

On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sen

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker

Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vu

ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote

Rukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the component /rukovoditel/i

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to gain control of the device when

A CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker to gain control of the device wh

An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP fil

The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthe

The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries

An OS command injection vulnerability exists in the httpd logs/view.cgi functionality of FreshTomato 2022.5. A specially

The PdfBook extension through 2.0.5 before b07b6a64 for MediaWiki allows command injection via an option.