Archive

26 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /26 March 2022 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 8.0

CVE-2022-0723

Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 26, 2022
High 7.5

CVE-2022-23308

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

qt5-qtwebengine libxml2 libxml2 libxml2 Debian Ubuntu Azure Linux Alpine

Feb 26, 2022
High 7.2

CVE-2022-26149 Public exploit

Unrestricted Upload of File with Dangerous Type in MODX Revolution

MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting can be changed by an administrator.

modx/revolution Packagist

Feb 26, 2022