Skip to content
OpenAdvisories

Archive

1 August 2023

Vulnerabilities first published on this day (UTC), newest first.

84 results · Feed

  • Unscored —

    TP-Link Archer AX21(US)_V3_1.1.4 Build 20230219 and AX21(US)_V3.6_1.1.4 Build 20230219 are vulnerable to Buffer Overflo…

  • Unscored —
    CVE-2023-37772 Public exploit

    Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at …

  • High 8.8
    CVE-2022-39987 EPSS 37%

    RaspAP Command Injection vulnerability

    A Command injection vulnerability in RaspAP 2.8.0 thru 2.9.2 allows an authenticated attacker to execute arbitrary OS commands as root via the "entity" POST parameters in /ajax/networking/get_wgkey.php.

  • Critical 9.8
    CVE-2022-39986 Public exploit Scanner template EPSS 99%

    RaspAP Command Injection vulnerability

    A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfg_id parameter in /ajax/openvpn/activate_ovpncfg.php and /ajax/openvpn/del_ovpncfg.php.