Search Results (96378 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-40512 1 Openpetra 1 Openpetra 2025-04-23 7.3 High
Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMReporting.asmx function.
CVE-2024-40506 1 Openpetra 1 Openpetra 2025-04-23 7.3 High
Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMHospitality.asmx function.
CVE-2025-3679 1 Pcman 1 Ftp Server 2025-04-23 7.3 High
A vulnerability, which was classified as critical, was found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component HOST Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2022-3591 1 Vim 1 Vim 2025-04-23 7.8 High
Use After Free in GitHub repository vim/vim prior to 9.0.0789.
CVE-2022-38754 1 Microfocus 2 Operations Bridge, Operations Bridge Manager 2025-04-23 8 High
A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious authenticated OBM (Operations Bridge Manager) user to run Java Scripts in the browser context of another OBM user. Please note: The vulnerability is only applicable if the Operations Bridge Manager capability is deployed. A potential vulnerability has been identified in Micro Focus Operations Bridge Manager (OBM). The vulnerability could be exploited by a malicious authenticated OBM user to run Java Scripts in the browser context of another OBM user. This issue affects: Micro Focus Micro Focus Operations Bridge Manager versions prior to 2022.11. Micro Focus Micro Focus Operations Bridge- Containerized versions prior to 2022.11.
CVE-2022-39909 1 Samsung 1 Gear Iconx Pc Manager 2025-04-23 7.1 High
Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link.
CVE-2022-46792 1 Hasura 1 Graphql Engine 2025-04-23 8.8 High
Hasura GraphQL Engine before 2.15.2 mishandles row-level authorization in the Update Many API for Postgres backends. The fixed versions are 2.10.2, 2.11.3, 2.12.1, 2.13.2, 2.14.1, and 2.15.2. (Versions before 2.10.0 are unaffected.)
CVE-2022-45548 1 Ayacms Project 1 Ayacms 2025-04-23 8.8 High
AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability.
CVE-2022-45525 1 Tenda 2 W30e, W30e Firmware 2025-04-23 7.5 High
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the downaction parameter at /goform/CertListInfo.
CVE-2022-45524 1 Tenda 2 W30e, W30e Firmware 2025-04-23 7.5 High
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave.
CVE-2022-45523 1 Tenda 2 W30e, W30e Firmware 2025-04-23 7.5 High
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/L7Im.
CVE-2022-45522 1 Tenda 2 W30e, W30e Firmware 2025-04-23 7.5 High
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeClientFilter.
CVE-2022-45521 1 Tenda 2 W30e, W30e Firmware 2025-04-23 7.5 High
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SafeUrlFilter.
CVE-2022-45520 1 Tenda 2 W30e, W30e Firmware 2025-04-23 7.5 High
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/qossetting.
CVE-2022-45519 1 Tenda 2 W30e, W30e Firmware 2025-04-23 7.5 High
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the Go parameter at /goform/SafeMacFilter.
CVE-2022-45518 1 Tenda 2 W30e, W30e Firmware 2025-04-23 7.5 High
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/SetIpBind.
CVE-2022-45517 1 Tenda 2 W30e, W30e Firmware 2025-04-23 7.5 High
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/VirtualSer.
CVE-2022-45516 1 Tenda 2 W30e, W30e Firmware 2025-04-23 7.5 High
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/NatStaticSetting.
CVE-2022-45515 1 Tenda 2 W30e, W30e Firmware 2025-04-23 7.5 High
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the entries parameter at /goform/addressNat.
CVE-2022-45514 1 Tenda 2 W30e, W30e Firmware 2025-04-23 7.5 High
Tenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the page parameter at /goform/webExcptypemanFilter.