Skip to content
OpenAdvisories

Archive

15 March 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.5
    CVE-2022-0778 Public exploit EPSS 73%

    Infinite loop in BN_mod_sqrt() reachable when parsing certificates

    The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…

  • Medium 6.9
    CVE-2022-0967 Public exploit

    Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc

    Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.

  • Unscored —
    CVE-2021-45010 Public exploit EPSS 70%

    A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.…

  • Critical 9.1
    CVE-2022-0944 Public exploit

    Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad

    Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.