Vulnerabilities (CVE)

Total 425693 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-44317 1 Picoc Project 1 Picoc 2026-06-17 N/A 5.5 MEDIUM
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioOutPutc function in cstdlib/stdio.c when called from ExpressionParseFunctionCall.
CVE-2022-44316 1 Picoc Project 1 Picoc 2026-06-17 N/A 5.5 MEDIUM
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when called from LexScanGetToken.
CVE-2022-44315 1 Picoc Project 1 Picoc 2026-06-17 N/A 5.5 MEDIUM
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c when called from ExpressionParseFunctionCall.
CVE-2022-44314 1 Picoc Project 1 Picoc 2026-06-17 N/A 5.5 MEDIUM
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c when called from ExpressionParseFunctionCall.
CVE-2022-44313 1 Picoc Project 1 Picoc 2026-06-17 N/A 5.5 MEDIUM
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceUnsignedInteger function in expression.c when called from ExpressionParseFunctionCall.
CVE-2022-44312 1 Picoc Project 1 Picoc 2026-06-17 N/A 5.5 MEDIUM
PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOperator.
CVE-2022-44311 1 Html2xhtml Project 1 Html2xhtml 2026-06-17 N/A 8.1 HIGH
html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo) at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service (DoS) via a crafted html file.
CVE-2022-44310 1 Ecdh Project 1 Ecdh 2026-06-17 N/A 7.5 HIGH
In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obtain the derived shared secret.
CVE-2022-44299 1 Sscms 1 Siteserver Cms 2026-06-17 N/A 4.9 MEDIUM
SiteServerCMS 7.1.3 sscms has a file read vulnerability.
CVE-2022-44298 1 Sscms 1 Siteserver Cms 2026-06-17 N/A 9.8 CRITICAL
SiteServer CMS 7.1.3 is vulnerable to SQL Injection.
CVE-2022-44297 1 Sscms 1 Siteserver Cms 2026-06-17 N/A 9.8 CRITICAL
SiteServer CMS 7.1.3 has a SQL injection vulnerability the background.
CVE-2022-44296 1 Sanitization Management System Project 1 Sanitization Management System 2026-06-17 N/A 7.2 HIGH
Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manage_remark.php?id=.
CVE-2022-44295 1 Sanitization Management System Project 1 Sanitization Management System 2026-06-17 N/A 7.2 HIGH
Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assign_team.php?id=.
CVE-2022-44294 1 Sanitization Management System Project 1 Sanitization Management System 2026-06-17 N/A 7.2 HIGH
Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manage_service&id=.
CVE-2022-44289 1 Thinkphp 1 Thinkphp 2026-06-17 N/A 8.8 HIGH
Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell.
CVE-2022-44284 1 Dinstar 2 Dag2000-16o, Dag2000-16o Firmware 2026-06-17 N/A 5.4 MEDIUM
Dinstar FXO Analog VoIP Gateway DAG2000-16O is vulnerable to Cross Site Scripting (XSS).
CVE-2022-44283 1 Avs4you 1 Avs Audio Converter 2026-06-17 N/A 9.8 CRITICAL
AVS Audio Converter 10.3 is vulnerable to Buffer Overflow.
CVE-2022-44280 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2026-06-17 N/A 6.5 MEDIUM
Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete_img.
CVE-2022-44279 1 Garage Management System Project 1 Garage Management System 2026-06-17 N/A 6.1 MEDIUM
Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.php.
CVE-2022-44278 1 Sanitization Management System Project 1 Sanitization Management System 2026-06-17 N/A 7.2 HIGH
Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=user/manage_user&id=.