Skip to content
OpenAdvisories

Archive

6 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /6 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • High 8.0
    CVE-2022-21661 Public exploit Scanner template EPSS 98%

    SQL injection in WordPress

    WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain wa…

    WordPress wordpress-develop wordpress wordpress Web / CMS Debian Ubuntu
  • Unscored —
    CVE-2021-46079 Public exploit

    An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote atta…

  • Unscored —
    CVE-2021-46078 Public exploit

    An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote atta…

  • Unscored —
    CVE-2021-46068 Public exploit Scanner template

    A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the My Account Se…

  • Unscored —
    CVE-2021-46067 Public exploit

    In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.

  • Unscored —
    CVE-2021-45745 Public exploit

    A Stored Cross Site Scripting (XSS) vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel.

  • Unscored —
    CVE-2021-45744 Public exploit

    A Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in login panel.

  • Unscored —
    CVE-2021-46069 Public exploit Scanner template

    A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List…

  • Unscored —
    CVE-2021-46070 Public exploit

    A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service Reque…

  • Unscored —
    CVE-2021-46071 Public exploit Scanner template

    A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Category List…

  • Unscored —
    CVE-2021-46072 Public exploit Scanner template

    A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service List …

  • Unscored —
    CVE-2021-46073 Public exploit Scanner template

    A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via th…

  • Unscored —
    CVE-2021-46074 Public exploit

    A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via th…

  • Unscored —
    CVE-2021-46075 Public exploit

    A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account user…

  • Unscored —
    CVE-2021-46076 Public exploit

    Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious p…

  • Unscored —
    CVE-2021-46080 Public exploit

    A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF a…

  • High 8.1
    CVE-2021-46143 Public exploit

    In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

    firefox insighttoolkit4 qtwebengine-opensource-src expat Debian Ubuntu Azure Linux Alpine