Skip to content
OpenAdvisories

Archive

25 February 2022

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Unscored —
    CVE-2022-24442 Public exploit

    JetBrains YouTrack before 2021.4.40426 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.

  • Unscored —
    CVE-2022-25260 Public exploit

    JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).

  • Unscored —
    CVE-2022-25262 Public exploit

    In JetBrains Hub before 2022.1.14434, SAML request takeover was possible.

  • Unscored —
    CVE-2022-25061 Public exploit Scanner template EPSS 59%

    TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_se…

  • Unscored —
    CVE-2022-25064 Public exploit EPSS 36%

    TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE) vulnerability via the functi…

  • Unscored —
    CVE-2022-25062 Public exploit

    TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function dm_checkString. This …

  • Unscored —
    CVE-2022-25060 Public exploit EPSS 40%

    TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability via the component oal_st…

  • Unscored —
    CVE-2021-44132 Public exploit

    A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13_X139 allows attackers …

  • Unscored —
    CVE-2022-24342 Public exploit

    In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.