Skip to content
OpenAdvisories

Archive

25 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /25 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-20323 Public exploit Scanner template EPSS 37%

    Cross-site Scripting in Keycloak

    A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.

    org.keycloak:keycloak-core Maven
  • Medium 4.1
    CVE-2022-25612

    WordPress Simple Event Planner plugin <= 1.5.4 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

    Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities in Simple Event Planner WordPress plugin <= 1.5.4 allows user with author or higher user rights inject the malicious code via vulnerable parameters: &custom[event_organiser], &custom…

    PressTigers Simple Event Planner (WordPress plugin) Web / CMS
  • Medium 4.1
    CVE-2022-25611

    WordPress Simple Event Planner plugin <= 1.5.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated Stored Cross-Site Scripting (XSS) in Simple Event Planner plugin <= 1.5.4 allows attackers with contributor or higher user roles to inject the malicious script by using vulnerable parameter &custom[add_seg][].

    PressTigers Simple Event Planner (WordPress plugin) Web / CMS
  • Medium 4.8
    CVE-2022-25606

    WordPress WP-DownloadManager plugin <= 1.68.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions <= 1.68.6). Vulnerable parameters &download_path, &download_path_url, &download_page_url, &download_categories.

    Lester 'GaMerZ' Chan WP-DownloadManager (WordPress) Web / CMS
  • Medium 6.1
    CVE-2021-44768

    Delta Electronics CNCSoft Out-of-bounds Read

    Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information.

    Delta Electronics CNCSoft ICS / OT
  • Medium 4.3
    CVE-2021-44751

    F-Secure SAFE Browser vulnerable to USSD attacks

    A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website attached with USSD code in JavaScript or iFrame can trigger dialer application from F-Secure browser which can be exploited by an attacker to send unwanted USSD mess…

    F-Secure F-Secure SAFE Browser for Android Version 18.5 & below Android