Skip to content
OpenAdvisories

Archive

20 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /20 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2021-39384

    DWSurvey v3.2.0 was discovered to contain an arbitrary file write vulnerability via the component /utils/ToHtmlServlet.…

  • Unscored —
    CVE-2021-42194

    The wechat_return function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's input directly into th…

  • Unscored —
    CVE-2021-39383

    DWSurvey v3.2.0 was discovered to contain a remote command execution (RCE) vulnerability via the component /sysuser/Sys…

  • Unscored —
    CVE-2020-26008

    The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0 contains an arbitrary file u…

  • Unscored —
    CVE-2020-26007

    An arbitrary file upload vulnerability in the upload payment plugin of ShopXO v1.9.0 allows attackers to execute arbitr…

  • Unscored —
    CVE-2022-25462

    Yafu v2.0 contains a segmentation fault via the component /factor/avx-ecm/vecarith52.c. This vulnerability allows attac…

  • Unscored —
    CVE-2022-26555

    A stored cross-site scripting (XSS) vulnerability in the Add a Button function of Eova v1.6.0 allows attackers to execu…

  • Unscored —
    CVE-2022-26247

    TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerabilit…

  • Unscored —
    CVE-2022-26246

    TMS v2.28.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /TMS/admin/setting/ma…

  • Unscored —
    CVE-2022-25464

    A stored cross-site scripting (XSS) vulnerability in the component /admin/contenttemp of DoraCMS v2.1.8 allows attacker…

  • Unscored —
    CVE-2021-44345

    Beijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System 3.0 is vulnerable to SQL Injec…

  • Unscored —
    CVE-2022-24125 Public exploit

    The matchmaking servers of Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allow remote attackers to send a…

  • Medium 4.0
    CVE-2022-25481 Scanner template

    Exposure of Resource to Wrong Sphere in ThinkPHP Framework

    ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an inte…

    topthink/framework Packagist