Archive
16 June 2022
Vulnerabilities first published on this day (UTC), newest first.
9 results · Clear filters · Feed
-
Unscored —
Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form.
-
Unscored —CVE-2022-31295 Public exploit
An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitraril…
-
Unscored —
In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrar…
-
Unscored —CVE-2022-31294 Public exploit
An issue in the save_users() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily…
-
Unscored —CVE-2022-31301 Public exploit
Haraj v3.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Post Ads component.
-
Unscored —CVE-2022-31298 Public exploit
A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web…
-
Unscored —
Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.
-
Unscored —CVE-2022-31300 Public exploit
A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary we…
-
High 7.5
mysqlnd/pdo password buffer overflow
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigg…