Search vulnerabilities

Expected end of text, found '‑' (at char 7), (line:1, col:8)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,471

CVE-2022-38279

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38278

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.

CVSS 3.1 · 7.2 High EPSS 1.2% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38277

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38276

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38273

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Jflyfox
Products
Jfinal Cms
CVE-2022-38258

A local file inclusion (LFI) vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service (DoS) or access sensitive server information via manipulation of the getpage parameter in a crafted web request.

CVSS 3.1 · 8.1 High EPSS 1.5% KEV · Not listed
Vendors
Dlink
Products
Dir-819 Dir-819 Firmware
CVE-2022-38256

TastyIgniter v3.5.0 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Tastyigniter
Products
Tastyigniter
CVE-2022-38254

Nagios XI before v5.8.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the ajax.php script in CCM 3.1.5.

CVSS 3.1 · 6.1 Medium EPSS 2.1% KEV · Not listed
Vendors
Nagios
Products
Nagios Xi
CVE-2022-38251

nagios: cross-site scripting (XSS) vulnerability via the System Performance Settings page under the Admin panel

Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the System Performance Settings page under the Admin panel.

CVSS 3.1 · 4.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Nagios
Products
Nagios Xi
CVE-2022-38250

nagios: SQL injection vulnerability via the mib_name parameter at the Manage MIBs page

Nagios XI v5.8.6 was discovered to contain a SQL injection vulnerability via the mib_name parameter at the Manage MIBs page.

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Nagios
Products
Nagios Xi
CVE-2022-38249

nagios: cross-site scripting (XSS) vulnerability via the MTR component

Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the MTR component in version 1.0.4.

CVSS 3.1 · 6.1 Medium EPSS 2.1% KEV · Not listed
Vendors
Nagios
Products
Nagios Xi