Skip to content
OpenAdvisories

Archive

2 February 2023

Vulnerabilities first published on this day (UTC), newest first.

50 results · Feed

  • Critical 9.8

    Monnai aaPanel host system v1.5 contains an access control issue which allows attackers to escalate privileges and exec…

  • Medium 5.4

    DedeCMS v5.7.97 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /file_manage_view…

  • Critical 9.8

    Easyone CRM v5.50.02 was discovered to contain a SQL Injection vulnerability via the text parameter at /Services/Misc.a…

  • Critical 9.8

    RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable.

  • Critical 9.8

    A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet servi…

  • Critical 9.8

    Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the par…

  • Medium 5.5

    A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service…

  • High 8.8
    CVE-2022-46604 Public exploit

    An issue in Tecrail Responsive FileManager v9.9.5 and below allows attackers to bypass the file extension check mechani…

  • High 8.8
    CVE-2022-46552 Public exploit EPSS 11%

    D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE) vulnerability via the la…

  • High 8.1

    PrestaShop module, totadministrativemandate before v1.7.1 was discovered to contain a SQL injection vulnerability.