Skip to content
OpenAdvisories

Archive

7 April 2022

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.3
    CVE-2022-26671 Public exploit

    TAIWAN SECOM CO., LTD., a xDoor Access Control and Personnel Attendance Management system - Hard-coded Credentials

    Taiwan Secom Dr.ID Access Control system’s login page has a hard-coded credential in the source code. An unauthenticated remote attacker can use the hard-coded credential to acquire partial system information and modify system setting to cause partial disrupt…

  • Unscored —
    CVE-2021-46419 Public exploit Scanner template EPSS 71%

    An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system fi…

  • Unscored —
    CVE-2021-46418 Public exploit Scanner template EPSS 24%

    An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.

  • Unscored —
    CVE-2021-46417 Public exploit Scanner template EPSS 60%

    Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileg…

  • Medium 5.4
    CVE-2021-46416 Public exploit

    Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups acc…