Skip to content
OpenAdvisories

Archive

18 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /18 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.7
    CVE-2022-21694

    OTF-006: Broken Website Hardening Control: The CSP can be turned on or off but not configured for the specific needs of the website

    OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. The website mode of the onionshare allows to use a hardened CSP, which will block any scripts and external resour…

    onionshare onionshare onionshare onionshare-cli Debian Ubuntu PyPI
  • Low 3.5
    CVE-2022-21683

    Comment reply notifications sent to incorrect users in wagtail

    Wagtail is a Django based content management system focused on flexibility and user experience. When notifications for new replies in comment threads are sent, they are sent to all users who have replied or commented anywhere on the site, rather than only in …

    wagtail wagtail wagtail PyPI
  • Low 2.6
    CVE-2021-37864

    Users can view the contents of an archived channel when access is explicitly denied by the system admin

    Mattermost 6.1 and earlier fails to sufficiently validate permissions while viewing archived channels, which allows authenticated users to view contents of archived channels even when this is denied by system administrators by directly accessing the APIs.

    Mattermost Mattermost
  • Low 3.5
    CVE-2022-0093

    An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 a…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 3.5
    CVE-2021-39927

    Server side request forgery protections in GitLab CE/EE versions between 8.4 and 14.4.4, between 14.5.0 and 14.5.2, and…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 2.0
    CVE-2021-41808

    In M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.

    In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log wrote sensitive information to log. Mitigating factors are logging is disabled by default.

    M-Files M-Files Server
  • Low 3.5
    CVE-2021-41809

    SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server.

    SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.

    M-Files M-Files Server