Skip to content
OpenAdvisories

Archive

24 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /24 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 10.0
    CVE-2020-10640

    ICSA-20-140-02 Emerson OpenEnterprise

    Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service.

    Emerson OpenEnterprise SCADA Software
  • Critical 9.8
    CVE-2022-25149 Scanner template EPSS 77%

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IP

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary…

    WP Statistics WP Statistics Web / CMS
  • Critical 9.8
    CVE-2022-0651 Scanner template EPSS 32%

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_type

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to i…

    WP Statistics WP Statistics Web / CMS
  • Critical 9.8
    CVE-2021-35689

    A potential vulnerability in the Oracle Talent Acquisition Cloud - Taleo Enterprise Edition. This high severity potenti…

    Oracle Oracle Talent Acquisition Cloud - Taleo Enterprise Edition
  • Critical 9.8
    CVE-2022-25148 Public exploit Scanner template EPSS 81%

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inj…

    WP Statistics WP Statistics Web / CMS