Skip to content
OpenAdvisories

Archive

1 March 2022

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Unscored —
    CVE-2021-41282 Public exploit Scanner template EPSS 87%

    diag_routes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data ab…

  • Unscored —
    CVE-2022-25012 Public exploit

    Argus Surveillance DVR v4.0 employs weak password encryption.

  • Unscored —
    CVE-2021-46387 Public exploit Scanner template EPSS 21%

    ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure URI handling leads …

  • Critical 9.8
    CVE-2021-4039 Public exploit EPSS 71%

    A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to exe…

  • Medium 6.5
    CVE-2021-35036 Public exploit

    A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allo…

  • Unscored —
    CVE-2022-25022 Public exploit

    A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary web scripts HTML via a …

  • Unscored —
    CVE-2022-25020 Public exploit

    A cross-site scripting (XSS) vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML v…

  • Unscored —
    CVE-2022-25018 Public exploit

    Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static pag…