Total
424441 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2022-28464 | 1 Apifox | 1 Apifox | 2026-06-17 | 6.0 MEDIUM | 9.0 CRITICAL |
| Apifox through 2.1.6 is vulnerable to Cross Site Scripting (XSS) which can lead to remote code execution. | |||||
| CVE-2022-28463 | 2 Debian, Imagemagick | 2 Debian Linux, Imagemagick | 2026-06-17 | 6.8 MEDIUM | 7.8 HIGH |
| ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow. | |||||
| CVE-2022-28462 | 1 Xxyopen | 1 Novel-plus | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability. | |||||
| CVE-2022-28461 | 1 Mingyuefusu Project | 1 Mingyuefusu | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| mingyuefusu Library Management System all versions as of 03-27-2022 is vulnerable to SQL Injection. | |||||
| CVE-2022-28454 | 1 Limbas | 1 Limbas | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| Limbas 4.3.36.1319 is vulnerable to Cross Site Scripting (XSS). | |||||
| CVE-2022-28452 | 1 Redplanetcomputers | 1 Laundry Management System | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Red Planet Laundry Management System 1.0 is vulnerable to SQL Injection. | |||||
| CVE-2022-28451 | 1 Nopcommerce | 1 Nopcommerce | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature. | |||||
| CVE-2022-28450 | 1 Nopcommerce | 1 Nopcommerce | 2026-06-17 | 3.5 LOW | 5.4 MEDIUM |
| nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS) via the "Text" parameter (forums) when creating a new post, which allows a remote attacker to execute arbitrary JavaScript code at client browser. | |||||
| CVE-2022-28449 | 1 Nopcommerce | 1 Nopcommerce | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account feature, an attacker can upload an arbitrary file to the system. | |||||
| CVE-2022-28448 | 1 Nopcommerce | 1 Nopcommerce | 2026-06-17 | 3.5 LOW | 5.4 MEDIUM |
| nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). An attacker (role customer) can inject javascript code to First name or Last name at Customer Info. | |||||
| CVE-2022-28445 | 1 Kitesky | 1 Kitecms | 2026-06-17 | 4.0 MEDIUM | 6.5 MEDIUM |
| KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module. | |||||
| CVE-2022-28444 | 1 Ucms Project | 1 Ucms | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| UCMS v1.6 was discovered to contain an arbitrary file read vulnerability. | |||||
| CVE-2022-28443 | 1 Ucms Project | 1 Ucms | 2026-06-17 | 6.4 MEDIUM | 9.1 CRITICAL |
| UCMS v1.6 was discovered to contain an arbitrary file deletion vulnerability. | |||||
| CVE-2022-28440 | 1 Ucms Project | 1 Ucms | 2026-06-17 | 6.5 MEDIUM | 8.8 HIGH |
| An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file. | |||||
| CVE-2022-28439 | 1 Janobe | 1 Baby Care System | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&&action=delete&userid=4. | |||||
| CVE-2022-28438 | 1 Janobe | 1 Baby Care System | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=User&userid=. | |||||
| CVE-2022-28437 | 1 Janobe | 1 Baby Care System | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=type&userrole=Admin&userid=3. | |||||
| CVE-2022-28436 | 1 Janobe | 1 Baby Care System | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=. | |||||
| CVE-2022-28435 | 1 Janobe | 1 Baby Care System | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1. | |||||
| CVE-2022-28434 | 1 Janobe | 1 Baby Care System | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2. | |||||