Skip to content
OpenAdvisories

Archive

4 March 2022

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Unscored —
    CVE-2021-44827 Public exploit EPSS 54%

    There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n dev…

  • Unscored —
    CVE-2021-3656 Public exploit

    A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VM…

  • Critical 9.8
    CVE-2022-26318 Exploited Public exploit EPSS 78%

    On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulne…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2021-46381 Public exploit Scanner template EPSS 59%

    Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd…

  • Unscored —
    CVE-2021-46379 Public exploit Scanner template EPSS 16%

    DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrus…

  • Unscored —
    CVE-2021-46378 Public exploit EPSS 32%

    DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote…

  • Medium 6.1
    CVE-2020-18325 Public exploit

    Cross-site Scripting in intelliants/subrion

    Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel.

  • Medium 6.1
    CVE-2020-18324 Public exploit

    Cross-site Scripting in Subrion CMS

    Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q parameter in the Kickstart template.

  • High 8.8
    CVE-2020-18326 Public exploit

    Cross Site Request Forgery in intelliants/subrion

    Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary …

  • Critical 10.0
    CVE-2022-0848 Public exploit EPSS 35%

    OS Command Injection in part-db/part-db

    OS Command Injection in GitHub repository part-db/part-db prior to 0.5.11.