2022 CVEs (page 200)
Page 200 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-31980 | High | 7.2 | 2022-06-02 | Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=teams/manage_team&id=. |
CVE-2022-31978 | Critical | 9.8 | 2022-06-02 | Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_inquiry. |
CVE-2022-31977 | Critical | 9.8 | 2022-06-02 | Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_team. |
CVE-2022-31976 | Critical | 9.8 | 2022-06-02 | Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_request. |
CVE-2022-31975 | High | 7.2 | 2022-06-02 | Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manage_user&id=. |
CVE-2022-31974 | High | 7.2 | 2022-06-02 | Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=reports&date=. |
CVE-2022-31973 | Medium | 6.5 | 2022-06-02 | Online Fire Reporting System v1.0 is vulnerable to Delete any file via /ofrs/classes/Master.php?f=delete_img. |
CVE-2022-31971 | High | 7.2 | 2022-06-02 | ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simple_chat_bot/admin/?page=responses/view_response&id=. |
CVE-2022-31970 | High | 7.2 | 2022-06-02 | ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simple_chat_bot/admin/?page=responses/manage_response&id=. |
CVE-2022-31969 | Critical | 9.8 | 2022-06-02 | ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simple_chat_bot/admin/?page=user/manage_user&id=. |
CVE-2022-31966 | Medium | 6.5 | 2022-06-02 | ChatBot App with Suggestion v1.0 is vulnerable to Delete any file via /simple_chat_bot/classes/Master.php?f=delete_img. |
CVE-2022-31965 | Critical | 9.8 | 2022-06-02 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/respondent_types/manage_respondent_type.php?id=. |
CVE-2022-31964 | Critical | 9.8 | 2022-06-02 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/respondent_types/view_respondent_type.php?id=. |
CVE-2022-31962 | Critical | 9.8 | 2022-06-02 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/view_incident.php?id=. |
CVE-2022-31961 | Critical | 9.8 | 2022-06-02 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incidents/manage_incident.php?id=. |
CVE-2022-31959 | Critical | 9.8 | 2022-06-02 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/teams/manage_team.php?id=. |
CVE-2022-31957 | Critical | 9.8 | 2022-06-02 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via rdms/admin/teams/view_team.php?id=. |
CVE-2022-31956 | Critical | 9.8 | 2022-06-02 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/manage_report.php?id=. |
CVE-2022-31953 | Critical | 9.8 | 2022-06-02 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/admin/incident_reports/view_report.php?id=. |
CVE-2022-31952 | Critical | 9.8 | 2022-06-02 | Rescue Dispatch Management System v1.0 is vulnerable to SQL injection via /rdms/classes/Master.php?f=delete_incident. |
CVE-2022-31951 | Critical | 9.8 | 2022-06-02 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_respondent_type. |
CVE-2022-31948 | Critical | 9.8 | 2022-06-02 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_report. |
CVE-2022-31946 | Critical | 9.8 | 2022-06-02 | Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via /rdms/classes/Master.php?f=delete_team. |
CVE-2022-31945 | Critical | 9.1 | 2022-06-02 | Rescue Dispatch Management System v1.0 is vulnerable to Delete any file via /rdms/classes/Master.php?f=delete_img. |
CVE-2022-31799 | Critical | 9.8 | 2022-06-02 | Bottle before 0.12.20 mishandles errors during early request binding. |
CVE-2022-31796 | Medium | 6.5 | 2022-06-02 | libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be diffe… |
CVE-2022-31783 | Medium | 5.5 | 2022-06-02 | Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace. |
CVE-2022-31782 | High | 7.8 | 2022-06-02 | ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow. |
CVE-2022-31500 | High | 7.8 | 2022-06-02 | In KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions. |
CVE-2022-31354 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=get_vehicle_service. |
CVE-2022-31353 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/view_service.php?id=. |
CVE-2022-31352 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manage_service.php?id=. |
CVE-2022-31351 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 by oretnom23 has SQL injection via /ocwbs/admin/services/manage_price.php?id=. |
CVE-2022-31350 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/vehicles/manage_vehicle.php?id=. |
CVE-2022-31348 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/update_status.php?id=. |
CVE-2022-31347 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle. |
CVE-2022-31346 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_service. |
CVE-2022-31345 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manage_user&id=. |
CVE-2022-31344 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_booking. |
CVE-2022-31343 | Critical | 9.8 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=bookings/view_details&id=. |
CVE-2022-31342 | Medium | 6.5 | 2022-06-02 | Online Car Wash Booking System v1.0 is vulnerable to Delete any file via /ocwbs/classes/Master.php?f=delete_img. |
CVE-2022-31340 | Critical | 9.8 | 2022-06-02 | Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php. |
CVE-2022-31339 | High | 7.2 | 2022-06-02 | Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php. |
CVE-2022-31338 | Critical | 9.8 | 2022-06-02 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php?view=edit&id=. |
CVE-2022-31337 | Critical | 9.8 | 2022-06-02 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index.php?view=edit&id=. |
CVE-2022-31336 | Critical | 9.8 | 2022-06-02 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata.php. |
CVE-2022-31335 | Critical | 9.8 | 2022-06-02 | Online Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php?view=edit&id=. |
CVE-2022-31329 | Critical | 9.8 | 2022-06-02 | Online Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders/loaddata.php. |
CVE-2022-31328 | Critical | 9.8 | 2022-06-02 | Online Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php?view=edit&id=. |
CVE-2022-31327 | Critical | 9.8 | 2022-06-02 | Online Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q=products&id=. |
CVE-2022-31004 | High | 7.5 | 2022-06-02 | CVEProject/cve-services is an open source project used to operate the CVE services API. A conditional in 'data.js' has potential for production secrets to be w… |
CVE-2022-30999 | High | 8.7 | 2022-06-02 | FriendsofFlarum (FoF) Upload is an extension that handles file uploads intelligently for your forum. If FoF Upload prior to version 1.2.3 is configured to allo… |
CVE-2022-30836 | High | 7.2 | 2022-06-02 | Wedding Management System v1.0 is vulnerable to SQL Injection. via Wedding-Management/admin/select.php. |
CVE-2022-30835 | High | 7.2 | 2022-06-02 | Wedding Management System v1.0 is vulnerable to SQL Injection. via /Wedding-Management/admin/budget.php?booking_id=. |
CVE-2022-30834 | High | 7.2 | 2022-06-02 | Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/client_manage_account_details.php?booking_id=31&user_id= |
CVE-2022-30833 | High | 7.2 | 2022-06-02 | Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/client_edit.php?booking=31&user_id=. |
CVE-2022-30832 | High | 7.2 | 2022-06-02 | Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/client_assign.php?booking=31&user_id=. |
CVE-2022-30831 | High | 7.2 | 2022-06-02 | Wedding Management System v1.0 is vulnerable to SQL Injection via Wedding-Management/wedding_details.php. |
CVE-2022-30830 | High | 7.2 | 2022-06-02 | Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\feature_edit.php. |
CVE-2022-30829 | High | 7.2 | 2022-06-02 | Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\users_edit.php. |
CVE-2022-30828 | High | 7.2 | 2022-06-02 | Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\photos_edit.php. |
CVE-2022-30827 | High | 7.2 | 2022-06-02 | Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\package_edit.php. |
CVE-2022-30826 | High | 7.2 | 2022-06-02 | Wedding Management System v1.0 is vulnerable to SQL Injection via admin\client_assign.php. |
CVE-2022-30825 | High | 7.2 | 2022-06-02 | Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\client_edit.php. |
CVE-2022-30823 | High | 7.2 | 2022-06-02 | Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\blog_events_edit.php. |
CVE-2022-30822 | High | 8.8 | 2022-06-02 | In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_profile.php" file. |
CVE-2022-30821 | High | 8.8 | 2022-06-02 | In Wedding Management System v1.0, the editing function of the "Services" module in the background management system has an arbitrary file upload vulnerability… |
CVE-2022-30820 | High | 8.8 | 2022-06-02 | In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_edit.php" file. |
CVE-2022-30819 | High | 8.8 | 2022-06-02 | In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "photos_edit.php" file. |
CVE-2022-30818 | High | 7.2 | 2022-06-02 | Wedding Management System v1.0 is vulnerable to SQL injection via /Wedding-Management/admin/blog_events_edit.php?id=31. |
CVE-2022-30817 | Critical | 9.8 | 2022-06-02 | Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php. |
CVE-2022-30816 | Critical | 9.8 | 2022-06-02 | elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php. |
CVE-2022-30815 | Critical | 9.8 | 2022-06-02 | elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar= |
CVE-2022-30814 | Critical | 9.8 | 2022-06-02 | elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php. |
CVE-2022-30813 | Critical | 9.8 | 2022-06-02 | elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php. |
CVE-2022-30810 | Critical | 9.8 | 2022-06-02 | elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php. |
CVE-2022-30809 | Critical | 9.8 | 2022-06-02 | elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=. |
CVE-2022-30808 | Critical | 9.8 | 2022-06-02 | elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php. |
CVE-2022-30804 | Medium | 6.5 | 2022-06-02 | elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=. |
CVE-2022-30799 | High | 7.2 | 2022-06-02 | Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php. |
CVE-2022-30798 | High | 7.2 | 2022-06-02 | Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php. |
CVE-2022-30797 | Critical | 9.8 | 2022-06-02 | Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php. |
CVE-2022-30795 | High | 7.2 | 2022-06-02 | Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php. |
CVE-2022-30794 | High | 7.2 | 2022-06-02 | Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php. |
CVE-2022-30540 | High | 7.8 | 2022-06-02 | The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code |
CVE-2022-30521 | Critical | 9.8 | 2022-06-02 | The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09.bin and… |
CVE-2022-30514 | Medium | 6.1 | 2022-06-02 | School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:126. |
CVE-2022-30513 | Medium | 6.1 | 2022-06-02 | School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:125 |
CVE-2022-30512 | Critical | 9.8 | 2022-06-02 | School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/payment_history.php:31. |
CVE-2022-30511 | Critical | 9.8 | 2022-06-02 | School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/view_details.php:4. |
CVE-2022-30510 | Critical | 9.8 | 2022-06-02 | School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/daily_collection_report.php:59. |
CVE-2022-30506 | Critical | 9.8 | 2022-06-02 | An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file. |
CVE-2022-30503 | Medium | 5.5 | 2022-06-02 | Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_set_number at src/njs_value.h. |
CVE-2022-30496 | High | 7.5 | 2022-06-02 | SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to acc… |
CVE-2022-30490 | Critical | 9.8 | 2022-06-02 | Badminton Center Management System V1.0 is vulnerable to SQL Injection via parameter 'id' in /bcms/admin/court_rentals/update_status.php. |
CVE-2022-30482 | Medium | 4.8 | 2022-06-02 | Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting (XSS) in \admin\add_cata.php via the ctg_name parameters. |
CVE-2022-30481 | Critical | 9.8 | 2022-06-02 | Food-order-and-table-reservation-system- 1.0 is vulnerable to SQL Injection in categorywise-menu.php via the catid parameters. |
CVE-2022-30478 | Critical | 9.8 | 2022-06-02 | Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \search_product.php via the keyword parameters. |
CVE-2022-30470 | Critical | 9.8 | 2022-06-02 | In Afian Filerun 20220202 Changing the "search_tika_path" variable to a custom (and previously uploaded) jar file results in remote code execution in the conte… |
CVE-2022-30425 | High | 8.8 | 2022-06-02 | Tenda Technology Co.,Ltd HG6 3.3.0-210926 was discovered to contain a command injection vulnerability via the pingAddr and traceAddr parameters. This vulnerabi… |