Vulnerabilities (CVE)

Total 425620 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-42100 1 Klik Project 1 Klik 2026-06-17 N/A 5.4 MEDIUM
KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form.
CVE-2022-42099 1 Klik Project 1 Klik 2026-06-17 N/A 5.4 MEDIUM
KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location Forum Subject input.
CVE-2022-42098 1 Klik-socialmediawebsite Project 1 Klik-socialmediawebsite 2026-06-17 N/A 8.8 HIGH
KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php.
CVE-2022-42097 1 Backdropcms 1 Backdrop 2026-06-17 N/A 4.8 MEDIUM
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' .
CVE-2022-42096 1 Backdropcms 1 Backdrop Cms 2026-06-17 N/A 4.8 MEDIUM
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via Post content.
CVE-2022-42095 1 Backdropcms 1 Backdrop Cms 2026-06-17 N/A 4.8 MEDIUM
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page content.
CVE-2022-42094 1 Backdropcms 1 Backdrop 2026-06-17 N/A 4.8 MEDIUM
Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' content.
CVE-2022-42092 1 Backdropcms 1 Backdrop Cms 2026-06-17 N/A 7.2 HIGH
Backdrop CMS 1.22.0 has Unrestricted File Upload vulnerability via 'themes' that allows attackers to Remote Code Execution. Note: Third parties dispute this and argue that advanced permissions are required.
CVE-2022-42087 1 Tenda 2 Ax1803, Ax1803 Firmware 2026-06-17 N/A 6.5 MEDIUM
Tenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.
CVE-2022-42086 1 Tenda 2 Ax1803, Ax1803 Firmware 2026-06-17 N/A 6.5 MEDIUM
Tenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request Forgery (CSRF) via function TendaAteMode.
CVE-2022-42081 1 Tenda 2 Ac1206, Ac1206 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via sched_end_time parameter.
CVE-2022-42080 1 Tenda 2 Ac1206, Ac1206 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a heap overflow via sched_start_time parameter.
CVE-2022-42079 1 Tenda 2 Ac1206, Ac1206 Firmware 2026-06-17 N/A 7.5 HIGH
Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via the function formWifiBasicSet.
CVE-2022-42078 1 Tenda 2 Ac1206, Ac1206 Firmware 2026-06-17 N/A 6.5 MEDIUM
Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet.
CVE-2022-42077 1 Tenda 2 Ac1206, Ac1206 Firmware 2026-06-17 N/A 6.5 MEDIUM
Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.
CVE-2022-42075 1 Wedding Planner Project 1 Wedding Planner 2026-06-17 N/A 9.8 CRITICAL
Wedding Planner v1.0 is vulnerable to arbitrary code execution.
CVE-2022-42074 1 Online Diagnostic Lab Management System Project 1 Online Diagnostic Lab Management System 2026-06-17 N/A 7.2 HIGH
Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=.
CVE-2022-42073 1 Online Diagnostic Lab Management System Project 1 Online Diagnostic Lab Management System 2026-06-17 N/A 7.2 HIGH
Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=.
CVE-2022-42071 1 Oretnom23 1 Online Birth Certificate Management System 2026-06-17 N/A 6.1 MEDIUM
Online Birth Certificate Management System version 1.0 suffers from a Cross Site Scripting (XSS) Vulnerability.
CVE-2022-42070 1 Oretnom23 1 Online Birth Certificate Management System 2026-06-17 N/A 8.8 HIGH
Online Birth Certificate Management System version 1.0 is vulnerable to Cross Site Request Forgery (CSRF).