Total
425596 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2022-48118 | 1 Jorani | 1 Jorani | 2026-06-17 | N/A | 6.1 MEDIUM |
| Jorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Acronym parameter. | |||||
| CVE-2022-48116 | 1 Ayacms Project | 1 Ayacms | 2026-06-17 | N/A | 7.2 HIGH |
| AyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/tpl_edit.inc.php. | |||||
| CVE-2022-48115 | 1 Jspreadsheet | 1 Jspreadsheet | 2026-06-17 | N/A | 6.1 MEDIUM |
| The dropdown menu in jspreadsheet before v4.6.0 was discovered to be vulnerable to cross-site scripting (XSS). | |||||
| CVE-2022-48114 | 1 Ruoyi | 1 Ruoyi | 2026-06-17 | N/A | 9.8 CRITICAL |
| RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable. | |||||
| CVE-2022-48113 | 1 Totolink | 2 N200re-v5, N200re-v5 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet service via a crafted POST request. Attackers are also able to leverage this vulnerability to login as root via hardcoded credentials. | |||||
| CVE-2022-48110 | 1 Ckeditor | 1 Ckeditor | 2026-06-17 | N/A | 6.1 MEDIUM |
| CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Full Featured CKEditor5 widget. NOTE: the vendor's position is that this is not a vulnerability. The CKEditor 5 documentation discusses that it is the responsibility of an integrator (who is adding CKEditor 5 functionality to a website) to choose the correct security settings for their use case. Also, safe default values are established (e.g., config.htmlEmbed.showPreviews is false). | |||||
| CVE-2022-48108 | 1 Dlink | 2 Dir 878, Dir 878 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask. This vulnerability allows attackers to escalate privileges to root via a crafted payload. | |||||
| CVE-2022-48107 | 1 Dlink | 2 Dir 878, Dir 878 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /setnetworksettings/IPAddress. This vulnerability allows attackers to escalate privileges to root via a crafted payload. | |||||
| CVE-2022-48094 | 1 Lmxcms | 1 Lmxcms | 2026-06-17 | N/A | 4.9 MEDIUM |
| lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php. | |||||
| CVE-2022-48093 | 1 Seacms | 1 Seacms | 2026-06-17 | N/A | 7.2 HIGH |
| Seacms v12.7 was discovered to contain a remote code execution (RCE) vulnerability via the ip parameter at admin_ ip.php. | |||||
| CVE-2022-48091 | 1 Hotel Management System Project | 1 Hotel Management System | 2026-06-17 | N/A | 5.4 MEDIUM |
| Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to Cross Site Scripting (XSS) via process_update_profile.php. | |||||
| CVE-2022-48090 | 1 Hotel Management System Project | 1 Hotel Management System | 2026-06-17 | N/A | 6.5 MEDIUM |
| Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to SQL Injection via /app/dao/CustomerDAO.php. | |||||
| CVE-2022-48082 | 1 Easyone | 1 Easyone Crm | 2026-06-17 | N/A | 9.8 CRITICAL |
| Easyone CRM v5.50.02 was discovered to contain a SQL Injection vulnerability via the text parameter at /Services/Misc.asmx/SearchTag. | |||||
| CVE-2022-48079 | 1 Mengnai | 1 Aapanel Host System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Monnai aaPanel host system v1.5 contains an access control issue which allows attackers to escalate privileges and execute arbitrary code via uploading a crafted PHP file to the virtual host directory of the system. | |||||
| CVE-2022-48078 | 1 Pycdc Project | 1 Pycdc | 2026-06-17 | N/A | 9.8 CRITICAL |
| pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component ASTree.cpp:BuildFromCode. | |||||
| CVE-2022-48077 | 1 Genymotion | 1 Genymotion Desktop | 2026-06-17 | N/A | 7.8 HIGH |
| Genymotion Desktop v3.3.2 was discovered to contain a DLL hijacking vulnerability that allows attackers to escalate privileges and execute arbitrary code via a crafted DLL. | |||||
| CVE-2022-48074 | 1 Nomachine | 1 Nomachine | 2026-06-17 | N/A | 5.3 MEDIUM |
| An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file. | |||||
| CVE-2022-48073 | 1 Phicomm | 2 K2, K2 Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| Phicomm K2G v22.6.3.20 was discovered to store the root and admin passwords in plaintext. | |||||
| CVE-2022-48072 | 1 Phicomm | 2 K2, K2 Firmware | 2026-06-17 | N/A | 7.8 HIGH |
| Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function. | |||||
| CVE-2022-48071 | 1 Phicomm | 2 K2, K2 Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext. | |||||