Export limit exceeded: 419215 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 108443 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (108443 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-38278 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list. | ||||
| CVE-2022-38277 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list. | ||||
| CVE-2022-38276 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list. | ||||
| CVE-2022-38275 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list. | ||||
| CVE-2022-38274 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list. | ||||
| CVE-2022-38273 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve. | ||||
| CVE-2022-38272 | 1 Jflyfox | 1 Jfinal Cms | 2024-11-21 | 7.2 High |
| JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list. | ||||
| CVE-2022-38269 | 1 School Activity Updates With Sms Notification Project | 1 School Activity Updates With Sms Notification | 2024-11-21 | 7.2 High |
| School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/modstudent/index.php?view=edit&id=. | ||||
| CVE-2022-38268 | 1 School Activity Updates With Sms Notification Project | 1 School Activity Updates With Sms Notification | 2024-11-21 | 7.2 High |
| School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/autonumber/index.php?view=edit&id=. | ||||
| CVE-2022-38267 | 1 School Activity Updates With Sms Notification Project | 1 School Activity Updates With Sms Notification | 2024-11-21 | 7.2 High |
| School Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the component /modules/user/index.php?view=edit&id=. | ||||
| CVE-2022-38265 | 1 Apartment Visitor Management System Project | 1 Apartment Visitor Management System | 2024-11-21 | 7.2 High |
| Apartment Visitor Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /avms/edit-apartment.php. | ||||
| CVE-2022-38258 | 1 Dlink | 2 Dir-819, Dir-819 Firmware | 2024-11-21 | 8.1 High |
| A local file inclusion (LFI) vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service (DoS) or access sensitive server information via manipulation of the getpage parameter in a crafted web request. | ||||
| CVE-2022-38238 | 1 Xpdf Project | 1 Xpdf | 2024-11-21 | 7.8 High |
| XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc. | ||||
| CVE-2022-38237 | 1 Xpdf Project | 1 Xpdf | 2024-11-21 | 7.8 High |
| XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc. | ||||
| CVE-2022-38236 | 1 Xpdf Project | 1 Xpdf | 2024-11-21 | 7.8 High |
| XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObj(Object*) at /xpdf/Lexer.cc. | ||||
| CVE-2022-38231 | 1 Xpdf Project | 1 Xpdf | 2024-11-21 | 7.8 High |
| XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc. | ||||
| CVE-2022-38229 | 1 Xpdf Project | 1 Xpdf | 2024-11-21 | 7.8 High |
| XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc. | ||||
| CVE-2022-38228 | 1 Xpdf Project | 1 Xpdf | 2024-11-21 | 7.8 High |
| XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc. | ||||
| CVE-2022-38227 | 1 Xpdf Project | 1 Xpdf | 2024-11-21 | 7.8 High |
| XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp. | ||||
| CVE-2022-38222 | 1 Xpdfreader | 1 Xpdf | 2024-11-21 | 7.8 High |
| There is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact. | ||||