Skip to content
OpenAdvisories

Archive

16 June 2022

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Unscored —
    CVE-2022-31299 Public exploit Scanner template

    Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form.

  • Unscored —
    CVE-2022-31295 Public exploit

    An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitraril…

  • Unscored —
    CVE-2022-24562 Public exploit EPSS 54%

    In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrar…

  • Unscored —
    CVE-2022-31294 Public exploit

    An issue in the save_users() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily…

  • Unscored —
    CVE-2022-31301 Public exploit

    Haraj v3.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Post Ads component.

  • Unscored —
    CVE-2022-31298 Public exploit

    A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web…

  • Unscored —
    CVE-2022-30023 Public exploit EPSS 39%

    Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.

  • Unscored —
    CVE-2022-31300 Public exploit

    A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary we…

  • High 7.5
    CVE-2022-31626 Public exploit EPSS 58%

    mysqlnd/pdo password buffer overflow

    In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigg…