Skip to content
OpenAdvisories

Archive

10 February 2022

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Medium 6.8
    CVE-2022-0020 Public exploit

    Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface

    A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on…

  • Critical 10.0
    CVE-2022-20699 Exploited Public exploit EPSS 72%

    Cisco Small Business RV Series Routers Vulnerabilities

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization pro…

    KEV Mar 3, 2022
  • Critical 10.0
    CVE-2022-20705 Public exploit EPSS 80%

    Cisco Small Business RV Series Routers Vulnerabilities

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization pro…

  • Critical 10.0
    CVE-2022-20707 Public exploit EPSS 75%

    Cisco Small Business RV Series Routers Vulnerabilities

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization pro…

  • Unscored —
    CVE-2021-45901 Public exploit EPSS 14%

    The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending…