Skip to content
OpenAdvisories

Archive

3 May 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-1292 Public exploit EPSS 83%

    The c_rehash script allows command injection

    The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitra…

  • Critical 9.8
    CVE-2022-28118 Public exploit

    RCE in SiteServer CMS

    SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.