Archive
1 March 2022
Vulnerabilities first published on this day (UTC), newest first.
8 results · Clear filters · Feed
-
Unscored —
diag_routes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data ab…
-
Unscored —CVE-2022-25012 Public exploit
Argus Surveillance DVR v4.0 employs weak password encryption.
-
Unscored —
ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure URI handling leads …
-
Critical 9.8
A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to exe…
-
Medium 6.5CVE-2021-35036 Public exploit
A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allo…
-
Unscored —CVE-2022-25022 Public exploit
A cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary web scripts HTML via a …
-
Unscored —CVE-2022-25020 Public exploit
A cross-site scripting (XSS) vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML v…
-
Unscored —CVE-2022-25018 Public exploit
Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static pag…