Archive
24 February 2022
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
Unscored —CVE-2021-44665 Public exploit
A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file vi…
-
Unscored —
An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileup…
-
Unscored —CVE-2022-25640 Public exploit
In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can…
-
Critical 9.8
WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inj…