Search vulnerabilities

Expected end of text, found ':' (at char 31), (line:1, col:32)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,948

CVE-2022-32128

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company/service/increment/add/im.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
74cms
Products
74cmsse
CVE-2022-32127

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company/view_be_browsed/total.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
74cms
Products
74cmsse
CVE-2022-32126

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
74cms
Products
74cmsse
CVE-2022-32125

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /job.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
74cms
Products
74cmsse
CVE-2022-32124

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /index/jobfairol/show/.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
74cms
Products
74cmsse
CVE-2022-32119

Arox School ERP Pro v1.0 was discovered to contain multiple arbitrary file upload vulnerabilities via the Add Photo function at photogalleries.inc.php and the import staff excel function at 1finance_master.inc.php.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Arox
Products
School Erp Pro
CVE-2022-32118

Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory parameter in backoffice.inc.php.

CVSS 3.1 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Arox
Products
School Erp Pro
CVE-2022-32117

Jerryscript v2.4.0 was discovered to contain a stack buffer overflow via the function jerryx_print_unhandled_exception in /util/print.c.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Jerryscript
Products
Jerryscript
CVE-2022-32115

An issue in the isSVG() function of Known v1.2.2+2020061101 allows attackers to execute arbitrary code via a crafted SVG file.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Withknown
Products
Known
CVE-2022-32101

kkcms v1.3.7 was discovered to contain a SQL injection vulnerability via the cid parameter at /template/wapian/vlist.php.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Kkcms Project
Products
Kkcms
CVE-2022-32096

Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted JWE token.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Rhonabwy Project
Products
Rhonabwy
CVE-2022-32092

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter at __ajax_explorer.sgi.

CVSS 3.1 · 9.8 Critical EPSS 5.8% KEV · Not listed
Vendors
Dlink
Products
Dir-645 Dir-645 Firmware
CVE-2022-32091

mariadb: server crash in JOIN_CACHE::free or in copy_fields

MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Debian Fedoraproject Mariadb and 1 more
Products
Debian Linux Fedora Mariadb and 2 more
CVE-2022-32088

mariadb: segmentation fault in Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Debian Mariadb Redhat
Products
Debian Linux Mariadb Enterprise Linux and 1 more
CVE-2022-32086

mariadb: server crash in Item_field::fix_outer_field for INSERT SELECT

MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Mariadb Redhat
Products
Mariadb Rhel Software Collections