Skip to content
OpenAdvisories

Archive

18 March 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-26265 Public exploit EPSS 30%

    Remote Code Execution in Contao Managed Edition

    Contao Managed Edition v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the component php_cli parameter.

  • Critical 9.8
    CVE-2022-24637 Public exploit Scanner template EPSS 99%

    Improper Privilege Management in Open Web Analytics

    Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '<?php (instead of the intend…