Archive
24 June 2022
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Unscored —CVE-2021-39409 Public exploit
A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without …
-
Unscored —CVE-2021-39408 Public exploit
Cross Site Scripting (XSS) vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.p…
-
Unscored —CVE-2021-42056 Public exploit
Thales Safenet Authentication Client (SAC) for Linux and Windows through 10.7.7 creates insecure temporary hid and lock…
-
Medium 6.5
Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability
A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER mo…
-
Critical 9.1CVE-2022-20829 Public exploit
Cisco Adaptive Security Device Manager and Adaptive Security Appliance Software Client-side Arbitrary Code Execution Vulnerability
A vulnerability in the packaging of Cisco Adaptive Security Device Manager (ASDM) images and the validation of those images by Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker with administrative privileges to upl…
-
Unscored —CVE-2013-1891 Public exploit
In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed.
-
Unscored —
In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to up…