Skip to content
OpenAdvisories

Archive

16 April 2023

Vulnerabilities first published on this day (UTC), newest first.

← March 2023 2023 / April /16 May 2023 →
  1. 119
  2. 211
  3. 346
  4. 4165
  5. 5139
  6. 6111
  7. 799
  8. 820
  9. 915
  10. 1078
  11. 11239
  12. 12105
  13. 1342
  14. 14111
  15. 1565
  16. 1638
  17. 1786
  18. 18191
  19. 1994
  20. 2054
  21. 2161
  22. 2231
  23. 2326
  24. 24114
  25. 2599
  26. 2659
  27. 2772
  28. 28111
  29. 2913
  30. 303
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-34125 Public exploit

    front/icon.send.php in the CMDB plugin before 3.0.3 for GLPI allows attackers to gain read access to sensitive informat…

  • High 7.5
    CVE-2022-34127 Public exploit

    The Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.…

  • Critical 9.8
    CVE-2022-34128 Public exploit

    The Cartography (aka positions) plugin before 6.0.1 for GLPI allows remote code execution via PHP code in the POST data…

  • High 7.5
    CVE-2022-38840 Public exploit Scanner template

    cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity (XXE) issue via XML file upl…

  • High 8.8
    CVE-2022-38841 Public exploit EPSS 11%

    Linksys AX3200 1.1.00 is vulnerable to OS command injection by authenticated users via shell metacharacters to the diag…

  • Medium 5.3
    CVE-2022-30076 Public exploit

    ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student username…

  • High 7.5
    CVE-2022-40946 Public exploit

    On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via …

  • High 7.5
    CVE-2022-37255 Public exploit

    TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL0755264…

  • Medium 6.7
    CVE-2022-37704 Public exploit

    Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/r…

    amanda amanda Debian Ubuntu
  • Unscored —
    CVE-2022-37705 Public exploit

    A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnera…

    amanda amanda Debian Ubuntu
  • Critical 9.8
    CVE-2021-33990 Public exploit EPSS 12%

    Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: Th…

  • High 7.5
    CVE-2021-36520 Public exploit

    A SQL injection vulnerability in I-Tech Trainsmart r1044 exists via a evaluation/assign-evaluation?id= URI.