Skip to content
OpenAdvisories

Archive

9 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /9 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-42854

    Directory Traversal Read/Write/Delete at PluginServlet

    It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) PluginServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/plugin/pmx" API. The affected endpoint does not have any input validation of the user's inp…

    Aternity SteelCentral AppInternals Dynamic Sampling Agent
  • Critical 9.4
    CVE-2021-42787

    Directory Traversal Write/Delete/Partial Read at AgentConfigurationServlet

    It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentConfigurationServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/configuration" API. The affected endpoint does not have any input validat…

    Aternity SteelCentral AppInternals Dynamic Sampling Agent
  • Critical 9.8
    CVE-2021-42786

    Remote Code Execution at AgentControllerServlet

    It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) has Remote Code Execution vulnerabilities in multiple instances of the API requests. The affected endpoints do not have any input validation of the user's input that allowed a m…

    Aternity SteelCentral AppInternals Dynamic Sampling Agent
  • Critical 9.1
    CVE-2021-42853

    Directory Traversal Delete/Read at AgentDiagnosticServlet

    It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDiagnosticServlet has directory traversal vulnerability at the "/api/appInternals/1.0/agent/diagnostic/logs" API. The affected endpoint does not have any input validation…

    Aternity SteelCentral AppInternals Dynamic Sampling Agent
  • Critical 9.8
    CVE-2022-26143 Exploited Scanner template EPSS 87%

    The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allow…

    KEV Mar 25, 2022
  • Critical 9.1
    CVE-2022-0482 Public exploit Scanner template EPSS 44%

    Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments

    Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3.

    Alex Tselegidis alextselegidis/easyappointments alextselegidis/easyappointments Packagist