Total
424170 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2022-26273 | 1 Eyoucms | 1 Eyoucms | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities. | |||||
| CVE-2022-26272 | 1 Ionizecms | 1 Ionize | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute arbitrary code via a crafted string written to the file application/config/config.php. | |||||
| CVE-2022-26271 | 1 74cms | 1 74cms | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| 74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php. | |||||
| CVE-2022-26269 | 1 Globalsuzuki | 1 Suzuki Connect | 2026-06-17 | 2.1 LOW | 4.6 MEDIUM |
| Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages. | |||||
| CVE-2022-26268 | 1 Xiaohuanxiong Project | 1 Xiaohuanxiong | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /app/controller/Books.php. | |||||
| CVE-2022-26267 | 1 Piwigo | 1 Piwigo | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenance_actions.php. | |||||
| CVE-2022-26266 | 1 Piwigo | 1 Piwigo | 2026-06-17 | 6.5 MEDIUM | 8.8 HIGH |
| Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php. | |||||
| CVE-2022-26265 | 1 Contao | 1 Contao | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Contao Managed Edition v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the component php_cli parameter. | |||||
| CVE-2022-26260 | 1 Simple-plist Project | 1 Simple-plist | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse(). | |||||
| CVE-2022-26259 | 1 Xiongmaitech | 20 Ahb80n16t-gs, Ahb80n16t-gs Firmware, Ahb80n32f4-lme and 17 more | 2026-06-17 | 4.6 MEDIUM | 7.8 HIGH |
| A buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD80X09S-KL, NBD80X08S-KL, NBD80X09RA-KL, AHB80X04R-MH, AHB80X04R-MH-V2, AHB80X04-R-MH-V3, AHB80N16T-GS, AHB80N32F4-LME, and NBD90S0VT-QW allows attackers to cause a Denial of Service (DoS) via a crafted RSTP request. | |||||
| CVE-2022-26255 | 1 Clash Project | 1 Clash | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Clash for Windows v0.19.8 was discovered to allow arbitrary code execution via a crafted payload injected into the Proxies name column. | |||||
| CVE-2022-26254 | 1 Wowonder | 1 Wowonder | 2026-06-17 | 5.0 MEDIUM | 5.3 MEDIUM |
| WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitrarily change group ID names. | |||||
| CVE-2022-26252 | 1 Aapanel | 1 Aapanel | 2026-06-17 | 4.0 MEDIUM | 6.5 MEDIUM |
| aaPanel v6.8.21 was discovered to be vulnerable to directory traversal. This vulnerability allows attackers to obtain the root user private SSH key(id_rsa). | |||||
| CVE-2022-26249 | 1 Surveyking Project | 1 Surveyking | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a CSV injection attack. | |||||
| CVE-2022-26247 | 1 Teamwork Management System Project | 1 Teamwork Management System | 2026-06-17 | 4.3 MEDIUM | 5.9 MEDIUM |
| TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password. | |||||
| CVE-2022-26246 | 1 Tms Project | 1 Tms | 2026-06-17 | 4.3 MEDIUM | 6.1 MEDIUM |
| TMS v2.28.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /TMS/admin/setting/mail/createorupdate. | |||||
| CVE-2022-26245 | 1 Open-falcon | 1 Falcon-plus | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go. | |||||
| CVE-2022-26243 | 1 Tendacn | 2 Ac10, Ac10 Firmware | 2026-06-17 | 7.8 HIGH | 7.5 HIGH |
| Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow in the setSmartPowerManagement function. | |||||
| CVE-2022-26240 | 2 Beckmancoulter, Microsoft | 2 Remisol Advance, Windows | 2026-06-17 | N/A | 6.5 MEDIUM |
| The default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data. | |||||
| CVE-2022-26239 | 2 Beckmancoulter, Microsoft | 2 Remisol Advance, Windows | 2026-06-17 | N/A | 5.5 MEDIUM |
| The default privileges for the running service Normand License Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows unprivileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data. | |||||