Skip to content
OpenAdvisories

Archive

1 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /1 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Unscored —
    CVE-2022-24223 Public exploit Scanner template EPSS 62%

    AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.

  • Unscored —
    CVE-2021-38560 Public exploit

    Ivanti Service Manager 2021.1 allows reflected XSS via the appName parameter associated with ConfigDB calls, such as in…

  • Medium —
    CVE-2021-45416 Public exploit

    RosarioSIS XSS Vulnerability

    Reflected Cross-site scripting (XSS) vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the search_term parameter in the modules/Scheduling/Courses.php script.

    francoisjacquet/rosariosis Packagist
  • Unscored —
    CVE-2021-24926 Public exploit Scanner template EPSS 13%

    Domain Check < 1.0.17 - Reflected Cross-Site Scripting

    The Domain Check WordPress plugin before 1.0.17 does not sanitise and escape the domain parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue

    Web / CMS
  • Unscored —
    CVE-2021-24762 Public exploit Scanner template EPSS 87%

    Perfect Survey < 1.5.2 - Unauthenticated SQL Injection

    The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter before using it in a SQL statement in the get_question AJAX action, allowing unauthenticated users to perform SQL injection.

    Web / CMS
  • High 7.4
    CVE-2021-43848 Public exploit

    Unititialized memory access in h2o

    h2o is an open source http server. In code prior to the `8c0eca3` commit h2o may attempt to access uninitialized memory. When receiving QUIC frames in certain order, HTTP/3 server-side implementation of h2o can be misguided to treat uninitialized memory as HT…

    h2o h2o h2o Ubuntu