Skip to content
OpenAdvisories

Archive

7 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /7 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-4045 Public exploit EPSS 72%

    TP-LINK Tapo C200 remote code execution vulnerability

    TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control…

    TP-Link Systems Tapo C200 Network devices
  • Unscored —
    CVE-2022-24644 Public exploit

    ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated …

  • Unscored —
    CVE-2022-23940 Public exploit EPSS 54%

    SuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution. Authenticated users with access to the Sche…

  • Unscored —
    CVE-2022-26488 Public exploit

    In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. Th…

  • Unscored —
    CVE-2022-0725 Public exploit

    A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads t…

    keepass2 Ubuntu
  • Unscored —
    CVE-2022-0448 Public exploit

    CP Blocks < 1.0.15 - Admin+ Stored Cross-Site Scripting

    The CP Blocks WordPress plugin before 1.0.15 does not sanitise and escape its "License ID" settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.

    Web / CMS
  • Unscored —
    CVE-2022-0441 Public exploit Scanner template EPSS 85%

    MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation

    The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to register as an admin

    Web / CMS
  • Unscored —
    CVE-2022-0439 Public exploit Scanner template

    Email Subscribers & Newsletters < 5.3.2 - Subscriber+ Blind SQL injection

    The Email Subscribers & Newsletters WordPress plugin before 5.3.2 does not correctly escape the `order` and `orderby` parameters to the `ajax_fetch_report_list` action, making it vulnerable to blind SQL injection attacks by users with roles as low as Subscrib…

    Web / CMS
  • High 7.8
    CVE-2022-0847 Exploited Public exploit EPSS 93%

    A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
    KEV Apr 25, 2022
  • Unscored —
    CVE-2022-26521 Public exploit

    Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executabl…