Skip to content
OpenAdvisories

Archive

3 May 2022

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2022-27413 Public exploit

    Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in …

  • Critical 9.8
    CVE-2022-1292 Public exploit EPSS 83%

    The c_rehash script allows command injection

    The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitra…

  • Unscored —
    CVE-2022-28590 Public exploit EPSS 24%

    A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme.

  • Unscored —
    CVE-2021-42165 Public exploit EPSS 14%

    MitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain root access by executing …

  • Critical 9.8
    CVE-2022-28118 Public exploit

    RCE in SiteServer CMS

    SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.