Vulnerabilities (CVE)

Total 424655 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-30473 1 Tenda 2 Ac18, Ac18 Firmware 2026-06-17 5.0 MEDIUM 7.5 HIGH
Tenda AC Series Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function form_fast_setting_wifi_set
CVE-2022-30472 1 Tenda 2 Ac18, Ac18 Firmware 2026-06-17 7.5 HIGH 9.8 CRITICAL
Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat
CVE-2022-30470 1 Afian 1 Filerun 2026-06-17 7.5 HIGH 9.8 CRITICAL
In Afian Filerun 20220202 Changing the "search_tika_path" variable to a custom (and previously uploaded) jar file results in remote code execution in the context of the webserver user.
CVE-2022-30469 1 Afian 1 Filerun 2026-06-17 6.5 MEDIUM 8.8 HIGH
In Afian Filerun 20220202, lack of sanitization of the POST parameter "metadata[]" in `/?module=fileman&section=get&page=grid` leads to SQL injection.
CVE-2022-30467 1 Joyebike 2 Wolf 2022, Wolf 2022 Firmware 2026-06-17 4.3 MEDIUM 6.8 MEDIUM
Joy ebike Wolf Manufacturing year 2022 is vulnerable to Denial of service, which allows remote attackers to jam the key fob request via RF.
CVE-2022-30466 1 Joybike 2 Wolf, Wolf Firmware 2026-06-17 3.3 LOW 6.5 MEDIUM
joyebike Joy ebike Wolf Manufacturing year 2022 is vulnerable to Authentication Bypass by Capture-replay.
CVE-2022-30464 1 Chatbot App With Suggestion Project 1 Chatbot App With Suggestion 2026-06-17 3.5 LOW 5.4 MEDIUM
ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting (XSS) via /simple_chat_bot/classes/Master.php?f=save_response.
CVE-2022-30463 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2026-06-17 6.5 MEDIUM 8.8 HIGH
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_product.
CVE-2022-30462 1 Water Billing System Project 1 Water Billing System 2026-06-17 3.5 LOW 5.4 MEDIUM
Water-billing-management-system v1.0 is affected by: Cross Site Scripting (XSS) via /wbms/classes/Users.php?f=save, firstname.
CVE-2022-30461 1 Water Billing System Project 1 Water Billing System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Water-billing-management-system v1.0 is vulnerable to SQL Injection via /wbms/classes/Master.php?f=delete_client, id
CVE-2022-30460 1 Simple Social Networking Site Project 1 Simple Social Networking Site 2026-06-17 3.5 LOW 5.4 MEDIUM
Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /sns/classes/Users.php?f=save, firstname.
CVE-2022-30459 1 Chatbot App With Suggestion Project 1 Chatbot App With Suggestion 2026-06-17 6.5 MEDIUM 8.8 HIGH
ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simple_chat_bot/classes/Master.php?f=delete_response, id.
CVE-2022-30458 1 Automotive Shop Management System Project 1 Automotive Shop Management System 2026-06-17 3.5 LOW 5.4 MEDIUM
Automotive Shop Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /asms/classes/Master.php?f=save_product, name.
CVE-2022-30456 1 Badminton Center Management System Project 1 Badminton Center Management System 2026-06-17 3.5 LOW 5.4 MEDIUM
Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /bcms/classes/Master.php?f=save_court_rental.
CVE-2022-30455 1 Badminton Center Management System Project 1 Badminton Center Management System 2026-06-17 7.5 HIGH 9.8 CRITICAL
Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete_court_rental, id.
CVE-2022-30454 1 Merchandise Online Store Project 1 Merchandise Online Store 2026-06-17 7.5 HIGH 9.8 CRITICAL
Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_product.
CVE-2022-30453 1 Shopwind 1 Shopwind 2026-06-17 7.5 HIGH 9.8 CRITICAL
ShopWind <= 3.4.2 has a RCE vulnerability in Database.php
CVE-2022-30452 1 Shopwind 1 Shopwind 2026-06-17 6.5 MEDIUM 7.2 HIGH
ShopWind <= v3.4.2 has a Sql injection vulnerability in Database.php
CVE-2022-30451 1 Waimairencms Project 1 Waimairencms 2026-06-17 6.5 MEDIUM 8.8 HIGH
An authenticated user could execute code via a SQLi vulnerability in waimairenCMS before version 9.1.
CVE-2022-30450 1 Waimairencms Project 1 Waimairencms 2026-06-17 7.5 HIGH 9.8 CRITICAL
A Remote Code Execution (RCE) vulnerability exists in waimairen 9.1 via wx.php