Skip to content
OpenAdvisories

Archive

10 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /10 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.0
    CVE-2022-22115

    Teedy - Stored Cross-Site Scripting (XSS) in Tag Name

    In Teedy, versions v1.5 through v1.9 are vulnerable to Stored Cross-Site Scripting (XSS) in the name of a created Tag. Since the Tag name is not being sanitized properly in the edit tag page, a low privileged attacker can store malicious scripts in the name o…

    Sismics docs
  • Critical 9.6
    CVE-2022-22114

    Teedy - Reflected Cross-Site Scripting (XSS) in the Search Functionality

    In Teedy, versions v1.5 through v1.9 are vulnerable to Reflected Cross-Site Scripting (XSS). The “search term" search functionality is not sufficiently sanitized while displaying the results of the search, which can be leveraged to inject arbitrary scripts. T…

    Sismics docs
  • Critical 9.8
    CVE-2021-43297 Public exploit EPSS 17%

    Dubbo Hessian cause RCE when parse error

    A deserialization vulnerability existed in dubbo hessian-lite 3.2.11 and its earlier versions, which could lead to malicious code execution. Most Dubbo users use Hessian2 as the default serialization/deserialization protocol, during Hessian catch unexpected e…

    Apache Software Foundation Apache Dubbo org.apache.dubbo:dubbo Maven