Skip to content
OpenAdvisories

Archive

23 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /23 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-24708

    Stored XSS vulnerability in anuko/timetracker

    Anuko Time Tracker is an open source, web-based time tracking application written in PHP. ttUser.class.php in Time Tracker versions prior to 1.20.0.5646 was not escaping primary group name for display. Because of that, it was possible for a logged in user to …

    anuko timetracker
  • Medium 4.8
    CVE-2022-23655

    Missing server signature validation in OctoberCMS

    Octobercms is a self-hosted CMS platform based on the Laravel PHP Framework. Affected versions of OctoberCMS did not validate gateway server signatures. As a result non-authoritative gateway servers may be used to exfiltrate user private keys. Users are advis…

    October CMS october october/system Packagist
  • Medium 4.7
    CVE-2022-23653

    B2 Command Line Tool TOCTOU application key disclosure

    B2 Command Line Tool is the official command line tool for the backblaze cloud storage service. Linux and Mac releases of the B2 command-line tool version 3.2.0 and below contain a key disclosure vulnerability that, in certain conditions, can be exploited by …

    Backblaze B2_Command_Line_Tool b2 PyPI
  • Medium 4.7
    CVE-2022-23651

    b2-sdk-python TOCTOU application key disclosure

    b2-sdk-python is a python library to access cloud storage provided by backblaze. Linux and Mac releases of the SDK version 1.14.0 and below contain a key disclosure vulnerability that, in certain conditions, can be exploited by local attackers through a time-…

    Backblaze b2-sdk-python b2sdk PyPI
  • Medium 5.9
    CVE-2022-24409

    Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious user…

    Dell Dell BSAFE SSL-J
  • Medium 5.9
    CVE-2021-4070

    Off-by-one Error in v2fly/v2ray-core

    Off-by-one Error in GitHub repository v2fly/v2ray-core prior to 4.44.0.

    v2fly v2fly/v2ray-core github.com/v2fly/v2ray-core golang-v2ray-core Debian Ubuntu Go
  • Medium 6.5
    CVE-2022-22333

    IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable …

    IBM Sterling Secure Proxy
  • Medium 5.4
    CVE-2022-0731

    Improper Access Control (IDOR) in dolibarr/dolibarr

    Improper Access Control (IDOR) in GitHub repository dolibarr/dolibarr prior to 16.0.

    Dolibarr dolibarr/dolibarr dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Medium 4.3
    CVE-2022-20625

    Cisco FXOS and NX-OS Software Cisco Discovery Protocol Service Denial of Service Vulnerability

    A vulnerability in the Cisco Discovery Protocol service of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in a denial of service (DoS) condition. This vulnerability is …

    Cisco Cisco NX-OS Software Network devices
  • Medium 5.4
    CVE-2022-0727

    Improper Access Control in chocobozzz/peertube

    Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0.

    Chocobozzz chocobozzz/peertube
  • Medium 6.8
    CVE-2022-0717

    Out-of-bounds Read in mruby/mruby

    Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2.

    mruby mruby/mruby mruby Ubuntu
  • Medium 5.4
    CVE-2022-0726

    Missing Authorization in chocobozzz/peertube

    Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0.

    Chocobozzz chocobozzz/peertube