Skip to content
OpenAdvisories

Archive

February 2022

Vulnerabilities first published in this month (UTC), newest first.

← January 2022 2022 / February March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-25313 Public exploit

    In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth…

    thunderbird firefox insighttoolkit4 expat Debian Ubuntu Alpine
  • Medium 5.1
    CVE-2022-23636 Public exploit

    Invalid drop of partially-initialized instances in wasmtime

    Wasmtime is an open source runtime for WebAssembly & WASI. Prior to versions 0.34.1 and 0.33.1, there exists a bug in the pooling instance allocator in Wasmtime's runtime where a failure to instantiate an instance for a module that defines an `externref` glob…

    bytecodealliance wasmtime wasmtime cranelift-codegen crates.io
  • Medium 6.1
    CVE-2022-24227 Public exploit

    A cross-site scripting (XSS) vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scrip…

  • Medium 6.8
    CVE-2022-0020 Public exploit

    Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface

    A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on…

    Palo Alto Networks Cortex XSOAR Network devices
  • Medium —
    CVE-2022-22931 Public exploit

    Path traversal in Apache James 3.6.1

    Fix of CVE-2021-40525 do not prepend delimiters upon valid directory validations. Affected implementations include: - maildir mailbox store - Sieve file repository This enables a user to access other users data stores (limited to user names being prefixed by …

    Apache Software Foundation Apache James org.apache.james:james-server Maven
  • Medium 5.8
    CVE-2021-4043 Public exploit

    NULL Pointer Dereference in gpac/gpac

    NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.

    gpac gpac/gpac gpac Debian
  • Medium 6.1
    CVE-2022-22818 Public exploit

    Cross-site Scripting in Django

    The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Medium 6.1
    CVE-2021-43062 Public exploit EPSS 13%

    A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.…

    Fortinet Fortinet FortiMail Network devices
  • Medium —
    CVE-2021-45416 Public exploit

    RosarioSIS XSS Vulnerability

    Reflected Cross-site scripting (XSS) vulnerability in RosarioSIS 8.2.1 allows attackers to inject arbitrary HTML via the search_term parameter in the modules/Scheduling/Courses.php script.

    francoisjacquet/rosariosis Packagist