10686 matches found
CVE-2022-36412
In Zoho ManageEngine SupportCenter Plus before 11023, V3 API requests are vulnerable to authentication bypass. An API request may, in effect, be executed with the credentials of a user who authenticated in the past...
CVE-2022-35405
Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. This also affects ManageEngine Access Manager Plus before 4303 with authentication...
CVE-2022-36502
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateWanParams...
CVE-2022-36505
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EDitusergroup...
CVE-2022-36503
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateMacClone...
CVE-2022-36489
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EnableIpv6...
CVE-2022-36493
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById...
CVE-2022-36506
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetMacAccessMode...
CVE-2022-36498
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AspSetTimingtimeWifiAndLed...
CVE-2022-36492
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddMacList...
CVE-2022-36494
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function edditactionlist...
CVE-2022-36497
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditBasicSSID5G...
CVE-2022-36504
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditBasicSSID...
CVE-2022-36495
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function addactionlist...
CVE-2022-37025
An improper privilege management vulnerability in McAfee Security Scan Plus MSS+ before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin Living off the land attack. This could result in the user gaining elevated permissions and being able to execute arbitrary...
CVE-2022-34284
A vulnerability has been identified in PADS Standard/Plus Viewer All versions. The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted PCB files. This could allow an attacker to execute code in the context of the current...
CVE-2022-3154
The Woo Billingo Plus WordPress plugin before 4.4.5.4, Integration for Billingo & Gravity Forms WordPress plugin before 1.0.4, Integration for Szamlazz.hu & Gravity Forms WordPress plugin before 1.2.7 are lacking CSRF checks in various AJAX actions, which could allow attackers to make logged in...
CVE-2022-28462
novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability...