Skip to content
OpenAdvisories

Archive

20 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /20 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.9
    CVE-2021-29785

    IBM Security SOAR V42 and V43could allow a remote attacker to obtain sensitive information, caused by the failure to pr…

    IBM Security SOAR
  • Medium 5.5
    CVE-2022-0219 Public exploit

    Improper Restriction of XML External Entity Reference in skylot/jadx

    Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2.

    skylot skylot/jadx io.github.skylot:jadx-core Maven
  • Medium 6.6
    CVE-2022-0285

    Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.9.

    pimcore pimcore/pimcore pimcore/pimcore Packagist
  • Medium 5.5
    CVE-2021-32039

    MongoDB Extension for VS Code may unexpectedly store credentials locally in clear text

    Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all…

    MongoDB MongoDB for VS Code
  • Medium 5.5
    CVE-2021-34600 Public exploit

    Telenot complex: Insecure AES Key Generation

    Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used in the NFC tags used for local authorization of users. This may lead to total loss of trustworthiness of the installation.

    Telenot Electronic CompasX
  • Medium 4.3
    CVE-2022-0282

    Cross-site Scripting in microweber/microweber

    Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11.

    microweber microweber/microweber microweber/microweber Packagist
  • Medium 6.8
    CVE-2021-3866

    Cross-site Scripting (XSS) - Stored in zulip/zulip

    Cross-site Scripting (XSS) - Stored in GitHub repository zulip/zulip more than and including 44f935695d452cc3fb16845a0c6af710438b153d and prior to 3eb2791c3e9695f7d37ffe84e0c2184fae665cb6.

    zulip zulip/zulip
  • Medium 6.5
    CVE-2021-45230

    Apache Airflow: Creating DagRuns didn't respect Dag-level permissions in the Webserver

    In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "can_create" permissions on DAG Runs can create Dag Runs for dags that they don't have "edit" permissions for.

    Apache Software Foundation Apache Airflow apache-airflow PyPI
  • Medium 6.5
    CVE-2022-0277

    Incorrect Permission Assignment for Critical Resource in microweber/microweber

    Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11.

    microweber microweber/microweber microweber/microweber Packagist