Skip to content
OpenAdvisories

Archive

31 January 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2022-24263 Public exploit

    Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-…

  • High 7.2
    CVE-2021-44255 Public exploit

    Unrestricted Upload of File with Dangerous Type in motionEye

    Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious python pickle file which will execute arbitrary code on the server.

  • Unscored —
    CVE-2022-23409 Public exploit EPSS 14%

    The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in…