Skip to content
OpenAdvisories

Archive

20 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /20 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2022-23054

    Openmct XSS via the “Summary Widget”

    Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and la…

    nasa openmct
  • Medium 6.1
    CVE-2022-23053

    Openmct XSS via the “Condition Widget”

    Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Condition Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and …

    nasa openmct
  • Medium 6.1
    CVE-2022-22126

    Openmct XSS via the “Web Page” element

    Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later ve…

    nasa openmct
  • Medium 6.5
    CVE-2022-0686

    Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

    Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.

    unshiftio unshiftio/url-parse url-parse node-url-parse Debian Ubuntu npm