Export limit exceeded: 37201 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (37201 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-36688 | 1 Ingredient Stock Management System Project | 1 Ingredient Stock Management System | 2024-11-21 | 8.8 High |
| Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockout&month=. | ||||
| CVE-2022-36687 | 1 Ingredient Stock Management System Project | 1 Ingredient Stock Management System | 2024-11-21 | 6.5 Medium |
| Ingredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=delete_img. | ||||
| CVE-2022-36686 | 1 Ingredient Stock Management System Project | 1 Ingredient Stock Management System | 2024-11-21 | 8.8 High |
| Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /admin/?page=reports/stockin&month=. | ||||
| CVE-2022-36683 | 1 Simple Task Scheduling System Project | 1 Simple Task Scheduling System | 2024-11-21 | 9.8 Critical |
| Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_payment. | ||||
| CVE-2022-36682 | 1 Simple Task Scheduling System Project | 1 Simple Task Scheduling System | 2024-11-21 | 9.8 Critical |
| Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_student. | ||||
| CVE-2022-36681 | 1 Simple Task Scheduling System Project | 1 Simple Task Scheduling System | 2024-11-21 | 9.8 Critical |
| Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_account. | ||||
| CVE-2022-36680 | 1 Simple Task Scheduling System Project | 1 Simple Task Scheduling System | 2024-11-21 | 9.8 Critical |
| Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_schedule. | ||||
| CVE-2022-36679 | 1 Simple Task Scheduling System Project | 1 Simple Task Scheduling System | 2024-11-21 | 9.8 Critical |
| Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user. | ||||
| CVE-2022-36678 | 1 Simple Task Scheduling System Project | 1 Simple Task Scheduling System | 2024-11-21 | 9.8 Critical |
| Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_category. | ||||
| CVE-2022-36676 | 1 Simple Task Scheduling System Project | 1 Simple Task Scheduling System | 2024-11-21 | 7.2 High |
| Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /categories/view_category.php. | ||||
| CVE-2022-36675 | 1 Simple Task Scheduling System Project | 1 Simple Task Scheduling System | 2024-11-21 | 7.2 High |
| Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /schedules/manage_schedule.php. | ||||
| CVE-2022-36674 | 1 Simple Task Scheduling System Project | 1 Simple Task Scheduling System | 2024-11-21 | 7.2 High |
| Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /schedules/view_schedule.php. | ||||
| CVE-2022-36672 | 1 Xxyopen | 1 Novel-plus | 2024-11-21 | 9.8 Critical |
| Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file. This vulnerability allows attackers to create a custom user session. | ||||
| CVE-2022-36671 | 1 Xxyopen | 1 Novel-plus | 2024-11-21 | 7.5 High |
| Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API. | ||||
| CVE-2022-36657 | 1 Library Management System Project | 1 Library Management System | 2024-11-21 | 4.8 Medium |
| Library Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /librarian/edit_book_details.php. | ||||
| CVE-2022-36634 | 1 Zkteco | 1 Zkbiosecurity V5000 | 2024-11-21 | 8.8 High |
| An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily create admin users via a crafted HTTP request. | ||||
| CVE-2022-36622 | 1 Samsung | 1 Mtower | 2024-11-21 | 7.5 High |
| Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_GetObjectInfo1. | ||||
| CVE-2022-36621 | 1 Samsung | 1 Mtower | 2024-11-21 | 7.5 High |
| Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_AllocateTransientObject. | ||||
| CVE-2022-36619 | 1 Dlink | 2 Dir-816, Dir-816 Firmware | 2024-11-21 | 7.5 High |
| In D-link DIR-816 A2_v1.10CNB04.img,the network can be reset without authentication via /goform/setMAC. | ||||
| CVE-2022-36616 | 1 Totolink | 2 A810r, A810r Firmware | 2024-11-21 | 7.8 High |
| TOTOLINK A810R V4.1.2cu.5182_B20201026 and V5.9c.4050_B20190424 was discovered to contain a hardcoded password for root at /etc/shadow.sample. | ||||