Skip to content
OpenAdvisories

Archive

5 April 2022

Vulnerabilities first published on this day (UTC), newest first.

← March 2022 2022 / April /5 May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Unscored —
    CVE-2022-28219 Public exploit Scanner template EPSS 97%

    Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that leads to Remot…

  • High 8.8
    CVE-2022-24780 Public exploit

    Code Injection in Combodo iTop

    Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.6 and 3.0.0, users of the iTop user portal can send TWIG code to the server by forging specific http queries, and execute arbitrary code on the server using http server user priv…

    Combodo iTop
  • Unscored —
    CVE-2020-23349 Public exploit

    An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 (com.sina.weibo.sdk.share.WbShareTransActivi…

  • Unscored —
    CVE-2022-23909 Public exploit

    There is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2.20328.2050. This migh…

  • High 7.5
    CVE-2021-43008 Public exploit EPSS 14%

    Files or Directories Accessible to External Parties in Adminer

    Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.

    adminer adminer vrana/adminer Debian Ubuntu Packagist
  • Unscored —
    CVE-2022-25584 Public exploit

    Seyeon Tech Co., Ltd FlexWATCH FW3170-PS-E Network Video System 4.23-3000_GY allows attackers to access sensitive infor…

  • Unscored —
    CVE-2022-26982 Public exploit

    SimpleMachinesForum 2.1.1 and earlier allows remote authenticated administrators to execute arbitrary code by inserting…

  • High 7.2
    CVE-2022-26986 Public exploit

    SQL injection in ImpressCMS

    SQL Injection in ImpressCMS 1.4.3 and earlier allows remote attackers to inject into the code in unintended way, this allows an attacker to read and modify the sensitive information from the database used by the application. If misconfigured, an attacker can …

    impresscms/impresscms Packagist