Skip to content
OpenAdvisories

Archive

18 January 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2021-46005 Public exploit Scanner template

    Sourcecodester Car Rental Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via vehicalorcview paramete…

  • High 7.5
    CVE-2022-0236 Public exploit

    WP Import Export (Lite) <= 3.9.15 Unauthenticated Sensitive Data Disclosure

    The WP Import Export WordPress plugin (both free and premium versions) is vulnerable to unauthenticated sensitive data disclosure due to a missing capability check on the download function wpie_process_file_download found in the ~/includes/classes/class-wpie-…

  • Critical 9.8
    CVE-2022-23305 Public exploit EPSS 67%

    SQL injection in JDBC Appender in Apache Log4j V1

    By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate…

  • Medium 6.1
    CVE-2021-44217 Public exploit

    Cross-site Scripting in Ericsson CodeChecker

    In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API.