Skip to content
OpenAdvisories

Archive

16 April 2023

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • High 7.5
    CVE-2022-34127 Public exploit

    The Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.…

  • High 7.5
    CVE-2022-38840 Public exploit Scanner template

    cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity (XXE) issue via XML file upl…

  • High 8.8
    CVE-2022-38841 Public exploit EPSS 11%

    Linksys AX3200 1.1.00 is vulnerable to OS command injection by authenticated users via shell metacharacters to the diag…

  • High 7.5
    CVE-2022-40946 Public exploit

    On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via …

  • High 7.5
    CVE-2022-37255 Public exploit

    TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL0755264…

  • High 7.5
    CVE-2021-36520 Public exploit

    A SQL injection vulnerability in I-Tech Trainsmart r1044 exists via a evaluation/assign-evaluation?id= URI.