Vulnerabilities (CVE)

Total 414047 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-22219 1 Flac Project 1 Flac 2026-06-17 N/A 7.8 HIGH
Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.
CVE-2020-22217 2 C-ares, Debian 2 C-ares, Debian Linux 2026-06-17 N/A 5.9 MEDIUM
Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c.
CVE-2020-22212 1 74cms 1 74cms 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php.
CVE-2020-22211 1 74cms 1 74cms 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajax_street.php.
CVE-2020-22210 1 74cms 1 74cms 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL Injection in 74cms 3.2.0 via the x parameter to ajax_officebuilding.php.
CVE-2020-22209 1 74cms 1 74cms 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajax_common.php.
CVE-2020-22208 1 74cms 1 74cms 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajax_street.php.
CVE-2020-22206 1 Shopex 1 Ecshop 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliate_ck.php.
CVE-2020-22205 1 Shopex 1 Ecshop 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL Injection in ECShop 3.0 via the id parameter to admin/shophelp.php.
CVE-2020-22204 1 Shopex 1 Ecshop 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL Injection in ECShop 2.7.6 via the goods_number parameter to flow.php. .
CVE-2020-22203 1 Phpcms 1 Phpcms 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php.
CVE-2020-22201 1 Phpcms 1 Phpcms 2026-06-17 6.5 MEDIUM 8.8 HIGH
phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/product.php.
CVE-2020-22200 1 Phpcms 1 Phpcms 2026-06-17 5.0 MEDIUM 5.3 MEDIUM
Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to public_get_suggest_keyword.
CVE-2020-22199 1 Phpcms 1 Phpcms 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL Injection vulnerability in phpCMS 2007 SP6 build 0805 via the digg_mod parameter to digg_add.php.
CVE-2020-22198 1 Dedecms 1 Dedecms 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajax_membergroup.php.
CVE-2020-22181 1 Samsung 2 Sww-3400rw, Sww-3400rw Firmware 2026-06-17 N/A 6.1 MEDIUM
A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command.cgi
CVE-2020-22176 1 Phpgurukul 1 Hospital Management System 2026-06-17 5.0 MEDIUM 7.5 HIGH
PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas. Remote unauthenticated users can exploit the vulnerability to obtain user sensitive information.
CVE-2020-22175 1 Phpgurukul 1 Hospital Management System 2026-06-17 5.0 MEDIUM 7.5 HIGH
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\admin\betweendates-detailsreports.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
CVE-2020-22174 1 Phpgurukul 1 Hospital Management System 2026-06-17 5.0 MEDIUM 7.5 HIGH
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\book-appointment.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.
CVE-2020-22173 1 Phpgurukul 1 Hospital Management System 2026-06-17 5.0 MEDIUM 7.5 HIGH
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\edit-profile.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive information.