Skip to content
OpenAdvisories

Archive

24 June 2022

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Unscored —
    CVE-2021-39409 Public exploit

    A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without …

  • Unscored —
    CVE-2021-39408 Public exploit

    Cross Site Scripting (XSS) vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.p…

  • Unscored —
    CVE-2021-42056 Public exploit

    Thales Safenet Authentication Client (SAC) for Linux and Windows through 10.7.7 creates insecure temporary hid and lock…

  • Medium 6.5
    CVE-2022-20828 Public exploit EPSS 49%

    Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability

    A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER mo…

  • Critical 9.1
    CVE-2022-20829 Public exploit

    Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability

    A vulnerability in the packaging of Cisco Adaptive Security Device Manager (ASDM) images and the validation of those images by Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker with administrative privileges to upl…

  • Unscored —
    CVE-2013-1891 Public exploit

    In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed.

  • Unscored —
    CVE-2013-1916 Public exploit EPSS 13%

    In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to up…