Skip to content
OpenAdvisories

Archive

January 2022

Vulnerabilities first published in this month (UTC), newest first.

← December 2021 2022 / January February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

94 results · Clear filters · Feed

  • Unscored —
    CVE-2021-46071 Public exploit Scanner template

    A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Category List…

  • Unscored —
    CVE-2021-46072 Public exploit Scanner template

    A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service List …

  • Unscored —
    CVE-2021-46073 Public exploit Scanner template

    A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via th…

  • Unscored —
    CVE-2021-46074 Public exploit

    A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via th…

  • Unscored —
    CVE-2021-46075 Public exploit

    A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account user…

  • Unscored —
    CVE-2021-46076 Public exploit

    Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious p…

  • Unscored —
    CVE-2021-46080 Public exploit

    A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF a…

  • High 8.1
    CVE-2021-46143 Public exploit

    In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

    firefox insighttoolkit4 qtwebengine-opensource-src expat Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2021-31589 Public exploit Scanner template EPSS 26%

    A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base So…

  • Low 3.3
    CVE-2021-44168 Exploited Public exploit

    A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0…

    Fortinet Fortinet FortiOS Network devices
    KEV Dec 10, 2021
  • Unscored —
    CVE-2021-45428 Public exploit Scanner template EPSS 57%

    TLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled so an attacker can uplo…

  • High 7.2
    CVE-2021-24786 Public exploit Scanner template EPSS 17%

    Download Monitor < 4.4.5 - Admin+ SQL Injection

    The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the "orderby" GET parameter before using it in a SQL statement when viewing the logs, leading to an SQL Injection issue

    Web / CMS
  • High 8.8
    CVE-2021-45960 Public exploit

    In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can l…

    firefox insighttoolkit4 expat matanza Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2021-44852 Public exploit

    An issue was discovered in BS_RCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the d…