Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,852

CVE-2022-37122

Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the 'file' GET parameter through the 'logdownload.cgi' Bash script is not properly verified before being used to download log files. This can be exploited to disclose the contents of arbitrary and sensitive files via directory traversal attacks.

CVSS 3.1 · 7.5 High EPSS 23.5% KEV · Not listed
Vendors
Carel
Products
Applica Pcoweb Card Pcoweb Card Firmware and 1 more
CVE-2022-37108

An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingesters" permission to execute arbitrary code on remote ingesters by appending arbitrary text to text files that are executed by the system, such as users' crontab files. The patch for this was present in SNYPR version 6.4 Jun 2022 R3_[06170871], but may have been introduced sooner.

CVSS 3.1 · 8.7 High EPSS 1.2% KEV · Not listed
Vendors
Securonix
Products
Snypr
CVE-2022-37100

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateMacClone.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
H3c
Products
H200 H200 Firmware
CVE-2022-37099

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateSnat.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
H3c
Products
H200 H200 Firmware
CVE-2022-37098

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateIpv6Params.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
H3c
Products
H200 H200 Firmware
CVE-2022-37097

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPInfoById.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
H3c
Products
H200 H200 Firmware
CVE-2022-37096

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EnableIpv6.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
H3c
Products
H200 H200 Firmware
CVE-2022-37095

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateWanParams.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
H3c
Products
H200 H200 Firmware
CVE-2022-37094

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
H3c
Products
H200 H200 Firmware
CVE-2022-37093

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function AddMacList.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
H3c
Products
H200 H200 Firmware
CVE-2022-37092

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
H3c
Products
H200 H200 Firmware
CVE-2022-37091

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditWlanMacList.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
H3c
Products
H200 H200 Firmware
CVE-2022-37090

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
H3c
Products
H200 H200 Firmware
CVE-2022-37089

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EditMacList.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
H3c
Products
H200 H200 Firmware
CVE-2022-37088

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAP5GWifiById.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
H3c
Products
H200 H200 Firmware