Skip to content
OpenAdvisories

Archive

18 January 2022

Vulnerabilities first published on this day (UTC), newest first.

85 results · Feed

  • Unscored —

    China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives…

  • High 8.8

    Cross-site Scripting in HTML2PDF

    An issue was discovered in Spipu HTML2PDF before 5.2.4. Attackers can trigger deserialization of arbitrary data via the injection of a malicious <link> tag in the converted HTML document.

  • Unscored —
    CVE-2021-44757 EPSS 24%

    Zoho ManageEngine Desktop Central before 10.1.2137.9 and Desktop Central MSP before 10.1.2137.9 allow attackers to bypa…

  • Medium 5.7

    Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

    Cross-Site Request Forgery (CSRF) in GitHub repository livehelperchat/livehelperchat prior to 2.0.

  • Unscored —

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.