Skip to content
OpenAdvisories

Archive

20 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /20 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-22930 EPSS 24%

    RCE in Mingsoft MCMS

    A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows attackers to execute arbitrary code via a crafted payload.

    net.mingsoft:ms-mcms Maven
  • Critical 9.8
    CVE-2022-23315

    Arbitrary file upload in Mingsoft MCMS

    MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do.

    net.mingsoft:ms-mcms Maven
  • Critical 9.8
    CVE-2022-22929

    Arbitrary File Upload in Mingsoft MCMS

    MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary code via a crafted ZIP file.

    net.mingsoft:ms-mcms Maven