Total
424926 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2022-35164 | 1 Gnu | 1 Libredwg | 2026-06-17 | N/A | 9.8 CRITICAL |
| LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain. | |||||
| CVE-2022-35163 | 1 Complete Online Job Search System Project | 1 Complete Online Job Search System | 2026-06-17 | N/A | 4.8 MEDIUM |
| Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the U_NAME parameter at /category/controller.php?action=edit. | |||||
| CVE-2022-35162 | 1 Complete Online Job Search System Project | 1 Complete Online Job Search System | 2026-06-17 | N/A | 4.8 MEDIUM |
| Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the CATEGORY parameter at /category/controller.php?action=edit. | |||||
| CVE-2022-35161 | 1 Generalized Electric Vehicle Reverse Engineering Tool Project | 1 Generalized Electric Vehicle Reverse Engineering Tool | 2026-06-17 | N/A | 9.8 CRITICAL |
| GVRET Stable Release as of Aug 15, 2015 was discovered to contain a buffer overflow via the handleConfigCmd function at SerialConsole.cpp. | |||||
| CVE-2022-35158 | 1 Tencent | 1 Tscancode | 2026-06-17 | N/A | 7.5 HIGH |
| A vulnerability in the lua parser of TscanCode tsclua v2.15.01 allows attackers to cause a Denial of Service (DoS) via a crafted lua script. | |||||
| CVE-2022-35154 | 1 Shopro | 1 Mall System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter. | |||||
| CVE-2022-35153 | 1 Fusionpbx | 1 Fusionpbx | 2026-06-17 | N/A | 9.8 CRITICAL |
| FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php. | |||||
| CVE-2022-35151 | 1 Keking | 1 Kkfileview | 2026-06-17 | N/A | 6.1 MEDIUM |
| kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /controller/OnlinePreviewController.java. | |||||
| CVE-2022-35150 | 1 Baijiacms Project | 1 Baijiacms | 2026-06-17 | N/A | 9.8 CRITICAL |
| Baijicms v4 was discovered to contain an arbitrary file upload vulnerability. | |||||
| CVE-2022-35148 | 1 Maccms | 1 Maccms | 2026-06-17 | N/A | 6.5 MEDIUM |
| maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html. | |||||
| CVE-2022-35147 | 1 Html-js | 1 Doracms | 2026-06-17 | N/A | 9.8 CRITICAL |
| DoraCMS v2.18 and earlier allows attackers to bypass login authentication via a crafted HTTP request. | |||||
| CVE-2022-35144 | 1 Raneto Project | 1 Raneto | 2026-06-17 | N/A | 4.8 MEDIUM |
| Renato v0.17.0 was discovered to contain a cross-site scripting (XSS) vulnerability. | |||||
| CVE-2022-35143 | 1 Raneto Project | 1 Raneto | 2026-06-17 | N/A | 9.8 CRITICAL |
| Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force attacks. | |||||
| CVE-2022-35142 | 1 Raneto Project | 1 Raneto | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter. | |||||
| CVE-2022-35137 | 1 Dgiotcloud | 1 Dgiot | 2026-06-17 | N/A | 5.4 MEDIUM |
| DGIOT Lightweight industrial IoT v4.5.4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities. | |||||
| CVE-2022-35136 | 1 Boodskap | 1 Iot Platform | 2026-06-17 | N/A | 6.5 MEDIUM |
| Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests. | |||||
| CVE-2022-35135 | 1 Boodskap | 1 Iot Platform | 2026-06-17 | N/A | 8.8 HIGH |
| Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/<uuid>. | |||||
| CVE-2022-35134 | 1 Boodskap | 1 Iot Platform | 2026-06-17 | N/A | 5.4 MEDIUM |
| Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability. | |||||
| CVE-2022-35133 | 1 Cherrytree Project | 1 Cherrytree | 2026-06-17 | N/A | 6.1 MEDIUM |
| A cross-site scripting (XSS) vulnerability in CherryTree v0.99.30 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name text field when creating a node. | |||||
| CVE-2022-35132 | 1 Webmin | 1 Usermin | 2026-06-17 | N/A | 8.8 HIGH |
| Usermin through 1.850 allows a remote authenticated user to execute OS commands via command injection in a filename for the GPG module. | |||||