Skip to content
OpenAdvisories

Archive

2 February 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2022-2546 Public exploit Scanner template

    All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS

    The All-in-One WP Migration WordPress plugin before 7.63 uses the wrong content type, and does not properly escape the response from the ai1wm_export AJAX action, allowing an attacker to craft a request that when submitted by any visitor will inject arbitrary…

  • High 8.8
    CVE-2022-46604 Public exploit

    An issue in Tecrail Responsive FileManager v9.9.5 and below allows attackers to bypass the file extension check mechani…

  • High 8.8
    CVE-2022-46552 Public exploit EPSS 11%

    D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE) vulnerability via the la…