Skip to content
OpenAdvisories

Archive

19 February 2022

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.8

    Cross-site Scripting (XSS) - Reflected in microweber/microweber

    Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.

  • High 7.1

    Out-of-bounds Read in mruby/mruby

    Out-of-bounds Read in Homebrew mruby prior to 3.2.

  • High 7.2

    Unrestricted Upload of File with Dangerous Type in star7th/showdoc

    Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2.

  • High 7.5

    SSRF in Kitodo.Presentation

    An issue was discovered in the Kitodo.Presentation (aka dif) extension before 2.3.2, 3.x before 3.2.3, and 3.3.x before 3.3.4 for TYPO3. A missing access check in an eID script allows an unauthenticated user to submit arbitrary URLs to this component. This re…

  • High 7.8
    CVE-2022-25365 Public exploit

    Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an …