Total
425512 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2022-40934 | 1 Online Pet Shop Web Application Project | 1 Online Pet Shop Web Application | 2026-06-17 | N/A | 7.2 HIGH |
| Online Pet Shop We App v1.0 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_sub_category,id | |||||
| CVE-2022-40933 | 1 Online Pet Shop Web Application Project | 1 Online Pet Shop Web Application | 2026-06-17 | N/A | 7.2 HIGH |
| Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_order,id. | |||||
| CVE-2022-40932 | 1 Phpgurukul | 1 Zoo Management System | 2026-06-17 | N/A | 7.2 HIGH |
| In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system. | |||||
| CVE-2022-40931 | 1 Dutchcoders | 1 Transfer.sh | 2026-06-17 | N/A | 6.1 MEDIUM |
| dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting (XSS). | |||||
| CVE-2022-40929 | 1 Xuxueli | 1 Xxl-job | 2026-06-17 | N/A | 9.8 CRITICAL |
| XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case (running arbitrary Bash scripts on behalf of users). | |||||
| CVE-2022-40928 | 1 Online Leave Management System Project | 1 Online Leave Management System | 2026-06-17 | N/A | 7.2 HIGH |
| Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_application. | |||||
| CVE-2022-40927 | 1 Online Leave Management System Project | 1 Online Leave Management System | 2026-06-17 | N/A | 7.2 HIGH |
| Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_designation. | |||||
| CVE-2022-40926 | 1 Online Leave Management System Project | 1 Online Leave Management System | 2026-06-17 | N/A | 7.2 HIGH |
| Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_leave_type. | |||||
| CVE-2022-40925 | 1 Phpgurukul | 1 Zoo Management System | 2026-06-17 | N/A | 7.2 HIGH |
| Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_event" file of the "Events" module in the background management system. | |||||
| CVE-2022-40924 | 1 Phpgurukul | 1 Zoo Management System | 2026-06-17 | N/A | 7.2 HIGH |
| Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_animal" file of the "Animals" module in the background management system. | |||||
| CVE-2022-40923 | 1 Lief-project | 1 Lief | 2026-06-17 | N/A | 6.5 MEDIUM |
| A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file. | |||||
| CVE-2022-40922 | 1 Lief-project | 1 Lief | 2026-06-17 | N/A | 6.5 MEDIUM |
| A vulnerability in the LIEF::MachO::BinaryParser::init_and_parse function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file. | |||||
| CVE-2022-40921 | 1 Dedecms | 1 Dedecms | 2026-06-17 | N/A | 7.2 HIGH |
| DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/file_manage_control.php. | |||||
| CVE-2022-40918 | 1 Force1rc | 2 Discovery Wifi U818a Hd\+ Fpv, Discovery Wifi U818a Hd\+ Fpv Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| Buffer overflow in firmware lewei_cam binary version 2.0.10 in Force 1 Discovery Wifi U818A HD+ FPV Drone allows attacker to gain remote code execution as root user via a specially crafted UDP packet. Please update the Reference section to these links > http://thiscomputer.com/ > https://www.bostoncyber.org/ > https://medium.com/@meekworth/exploiting-the-lw9621-drone-camera-module-773f00081368 | |||||
| CVE-2022-40916 | 1 Prasathmani | 1 Tiny File Manager | 2026-06-17 | N/A | 9.8 CRITICAL |
| Tiny File Manager v2.4.7 and below is vulnerable to session fixation. | |||||
| CVE-2022-40912 | 1 Etaplighting | 1 Etap Safety Manager | 2026-06-17 | N/A | 6.1 MEDIUM |
| ETAP Lighting International NV ETAP Safety Manager 1.0.0.32 is vulnerable to Cross Site Scripting (XSS). Input passed to the GET parameter 'action' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML/JS code in a user's browser session in context of an affected site. | |||||
| CVE-2022-40903 | 1 Aiphone | 8 Gt-db-vn, Gt-db-vn Firmware, Gt-dmb and 5 more | 2026-06-17 | N/A | 6.5 MEDIUM |
| Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access attempts, which allows an attacker to gain administrative privileges. | |||||
| CVE-2022-40899 | 1 Pythoncharmers | 1 Python-future | 2026-06-17 | N/A | 7.5 HIGH |
| An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server. | |||||
| CVE-2022-40898 | 1 Wheel Project | 1 Wheel | 2026-06-17 | N/A | 7.5 HIGH |
| An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli. | |||||
| CVE-2022-40897 | 1 Python | 1 Setuptools | 2026-06-17 | N/A | 5.9 MEDIUM |
| Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. | |||||