Skip to content
OpenAdvisories

Archive

24 February 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2021-44665 Public exploit

    A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file vi…

  • Unscored —
    CVE-2021-44664 Public exploit EPSS 13%

    An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileup…

  • Unscored —
    CVE-2022-25640 Public exploit

    In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication. A client can…

  • Critical 9.8
    CVE-2022-25148 Public exploit Scanner template EPSS 81%

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inj…