Skip to content
OpenAdvisories

Archive

28 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /28 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.6
    CVE-2022-0743

    Cross-site Scripting (XSS) - Stored in getgrav/grav

    Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.

    getgrav getgrav/grav getgrav/grav Packagist
  • Medium 6.4
    CVE-2021-41111

    Authorization Bypass Through User-Controlled Key in Rundeck

    Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to versions 3.4.5 and 3.3.15, an authenticated user with authorization to read webhooks in one project can craft a request to reveal Webhook definitions an…

    rundeck rundeck
  • Medium 6.3
    CVE-2022-24712

    Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4

    CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. A vulnerability in versions prior to 4.1.9 might allow remote attackers to bypass the CodeIgniter4 Cross-Site Request Forgery (CSRF) protection mechanism. Users should upgrade to v…

    codeigniter4 CodeIgniter4 codeigniter4/framework Packagist