Total
424128 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2022-25488 | 1 Thedigitalcraft | 1 Atomcms | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php. | |||||
| CVE-2022-25487 | 1 Thedigitalcraft | 1 Atomcms | 2026-06-17 | 7.5 HIGH | 9.8 CRITICAL |
| Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php. | |||||
| CVE-2022-25486 | 1 Cuppacms | 1 Cuppacms | 2026-06-17 | 6.8 MEDIUM | 7.8 HIGH |
| CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php. | |||||
| CVE-2022-25485 | 1 Cuppacms | 1 Cuppacms | 2026-06-17 | 6.8 MEDIUM | 7.8 HIGH |
| CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php. | |||||
| CVE-2022-25484 | 1 Broadcom | 1 Tcpreplay | 2026-06-17 | 4.3 MEDIUM | 5.5 MEDIUM |
| tcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in tcpprep v4.4.1. | |||||
| CVE-2022-25481 | 1 Thinkphp | 1 Thinkphp | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an intended feature of the debugging mode. | |||||
| CVE-2022-25471 | 1 Open-emr | 1 Openemr | 2026-06-17 | 5.5 MEDIUM | 8.1 HIGH |
| An Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zend_modules/public/Installer/register. | |||||
| CVE-2022-25465 | 1 Espruino | 1 Espruino | 2026-06-17 | 6.8 MEDIUM | 7.8 HIGH |
| Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling. | |||||
| CVE-2022-25464 | 1 Html-js | 1 Doracms | 2026-06-17 | 3.5 LOW | 4.8 MEDIUM |
| A stored cross-site scripting (XSS) vulnerability in the component /admin/contenttemp of DoraCMS v2.1.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | |||||
| CVE-2022-25462 | 1 Yafu Project | 1 Yafu | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| Yafu v2.0 contains a segmentation fault via the component /factor/avx-ecm/vecarith52.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors. | |||||
| CVE-2022-25461 | 1 Tenda | 2 Ac6, Ac6 Firmware | 2026-06-17 | 10.0 HIGH | 9.8 CRITICAL |
| Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the startip parameter in the SetPptpServerCfg function. | |||||
| CVE-2022-25460 | 1 Tenda | 2 Ac6, Ac6 Firmware | 2026-06-17 | 10.0 HIGH | 9.8 CRITICAL |
| Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the endip parameter in the SetPptpServerCfg function. | |||||
| CVE-2022-25459 | 1 Tenda | 2 Ac6, Ac6 Firmware | 2026-06-17 | 10.0 HIGH | 9.8 CRITICAL |
| Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the S1 parameter in the SetSysTimeCfg function. | |||||
| CVE-2022-25458 | 1 Tenda | 2 Ac6, Ac6 Firmware | 2026-06-17 | 10.0 HIGH | 9.8 CRITICAL |
| Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the cmdinput parameter in the exeCommand function. | |||||
| CVE-2022-25457 | 1 Tenda | 2 Ac6, Ac6 Firmware | 2026-06-17 | 10.0 HIGH | 9.8 CRITICAL |
| Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ntpserver parameter in the SetSysTimeCfg function. | |||||
| CVE-2022-25456 | 1 Tenda | 2 Ac6, Ac6 Firmware | 2026-06-17 | 10.0 HIGH | 9.8 CRITICAL |
| Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the security_5g parameter in the WifiBasicSet function. | |||||
| CVE-2022-25455 | 1 Tenda | 2 Ac6, Ac6 Firmware | 2026-06-17 | 10.0 HIGH | 9.8 CRITICAL |
| Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetIpMacBind function. | |||||
| CVE-2022-25454 | 1 Tenda | 2 Ac6, Ac6 Firmware | 2026-06-17 | 10.0 HIGH | 9.8 CRITICAL |
| Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the loginpwd parameter in the SetFirewallCfg function. | |||||
| CVE-2022-25453 | 1 Tenda | 2 Ac6, Ac6 Firmware | 2026-06-17 | 10.0 HIGH | 9.8 CRITICAL |
| Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in the saveParentControlInfo function. | |||||
| CVE-2022-25452 | 1 Tenda | 2 Ac6, Ac6 Firmware | 2026-06-17 | 10.0 HIGH | 9.8 CRITICAL |
| Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the URLs parameter in the saveParentControlInfo function. | |||||