Skip to content
OpenAdvisories

Archive

7 March 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-4045 Public exploit EPSS 72%

    TP-LINK Tapo C200 remote code execution vulnerability

    TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control…

  • Critical 9.3

    ICSA-22-063-01 Improper Protection against Electromagnetic Fault Injection in Trailer Power Line Communications (PLC) J2497

    Power Line Communications PLC4TRUCKS J2497 trailer receivers are susceptible to remote RF induced signals.

  • Critical 9.8

    Command Injection in CasaOS

    CasaOS before v0.2.7 was discovered to contain a command injection vulnerability.

  • Critical 9.1

    Server-Side Request Forgery (SSRF) in janeczku/calibre-web

    Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17.