VYPR

CVEs

414,178 total · page 4842 of 8,284

AllCriticalHighKEV
  • CVE-2022-23598MedJan 28, 2022
    laminas
    laminas-form
    risk 0.33cvss 6.1epss 0.01

    laminas-form is a package for validating and displaying simple and complex forms. When rendering validation error messages via the `formElementErrors()` view helper shipped with laminas-form, many messages will contain the submitted value. However, in laminas-form prior to…

  • CVE-2022-21721MedJan 28, 2022
    Vercel
    Next.js
    risk 0.39cvss 5.9epss 0.02

    Next.js is a React framework. Starting with version 12.0.0 and prior to version 12.0.9, vulnerable code could allow a bad actor to trigger a denial of service attack for anyone using i18n functionality. In order to be affected by this CVE, one must use next start or a custom…

  • CVE-2022-0395MedJan 28, 2022
    Livehelperchat
    Livehelperchat
    risk 0.28cvss 5.4epss 0.01

    Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

  • CVE-2022-0393HigJan 28, 2022
    Vim
    Vim
    risk 0.46cvss 7.1epss 0.01

    Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

  • CVE-2022-0392HigJan 28, 2022
    Vim
    Vim
    risk 0.51cvss 7.8epss 0.02

    Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.

  • CVE-2022-0352MedJan 28, 2022
    Janeczku
    Calibre Web
    risk 0.33cvss 6.1epss 0.01

    Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16.

  • CVE-2021-4160MedJan 28, 2022
    OpenSSL Project
    OpenSSL
    risk 0.39cvss 5.9epss 0.04

    There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing…

  • CVE-2021-46448CriJan 28, 2022
    Hhg Multistore
    Multistore
    risk 0.64cvss 9.8epss 0.01

    H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/customers.php?page=1&cID.

  • CVE-2021-46447MedJan 28, 2022
    Hhg Multistore
    Multistore
    risk 0.35cvss 5.4epss 0.01

    A cross-site scripting (XSS) vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module.

  • CVE-2021-46446CriJan 28, 2022
    Hhg Multistore
    Multistore
    risk 0.64cvss 9.8epss 0.01

    H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_access_group_edit&aagID.

  • CVE-2021-46445CriJan 28, 2022
    Hhg Multistore
    Multistore
    risk 0.64cvss 9.8epss 0.01

    H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/categories.php?box_group_id.

  • CVE-2021-46444CriJan 28, 2022
    Hhg Multistore
    Multistore
    risk 0.64cvss 9.8epss 0.01

    H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_group_edit&agID.

  • CVE-2021-44419HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetMdAlarm param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44418HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetMdState param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44417HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetAlarm param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44416HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. Disconnect param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44415HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. ModifyUser param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44414HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. DelUser param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44413HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. AddUser param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44412HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetRec param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44411HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. Search param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44410HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. UpgradePrepare param is not object. An attacker can send an HTTP request to trigger…

  • CVE-2021-44409HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. TestWifi param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44408HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. TestFtp param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44407HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. TestEmail param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44406HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetAutoFocus param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44405HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. StartZoomFocus param is not object. An attacker can send an HTTP request to trigger…

  • CVE-2021-44404HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetZoomFocus param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44403HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetPtzTattern param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44402HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetPtzSerial param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44401HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. PtzCtrl param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44400HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetPtzPatrol param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44399HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetPtzPreset param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44398HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. rtmp=stop param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44397HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. rtmp=start param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44396HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. Preview param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44395HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetMask param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44393HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetIsp param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44392HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetImage param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44391HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetEnc param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44390HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. Format param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44389HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetAbility param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44388HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. Login param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44387HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetPtzPreset param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44386HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetPtzPatrol param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44385HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetPtzSerial param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44384HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetPtzTattern param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44383HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetAutoUpgrade param is not object. An attacker can send an HTTP request to trigger…

  • CVE-2021-44382HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot.SetIrLights param is not object. An attacker can send an HTTP request to trigger this…

  • CVE-2021-44381HigJan 28, 2022
    Reolink
    RLC-410W
    risk 0.50cvss 7.7epss 0.01

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetPowerLed param is not object. An attacker can send an HTTP request to trigger this…