Skip to content
OpenAdvisories

Archive

5 April 2022

Vulnerabilities first published on this day (UTC), newest first.

← March 2022 2022 / April /5 May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 4.3
    CVE-2022-24523

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • Medium 5.4
    CVE-2022-24811

    Cross-site Scripting in Combodo iTop

    Combodi iTop is a web based IT Service Management tool. Prior to versions 2.7.6 and 3.0.0, cross-site scripting is possible for scripts outside of script tags when displaying HTML attachments. This issue is fixed in versions 2.7.6 and 3.0.0. There are current…

    Combodo iTop
  • Medium 4.6
    CVE-2022-28649

    In JetBrains YouTrack before 2022.1.43563 it was possible to include an iframe from a third-party domain in the issue d…

    JetBrains YouTrack
  • Medium 5.7
    CVE-2022-28648

    In JetBrains YouTrack before 2022.1.43563 HTML code from the issue description was being rendered

    JetBrains YouTrack
  • Medium 5.3
    CVE-2022-22356

    IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due to an observable discr…

    IBM MQ Appliance
  • Medium 5.3
    CVE-2022-22355

    IBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component of the application whi…

    IBM MQ Appliance
  • Medium 6.1
    CVE-2022-27463

    Open redirect in wwbn/avideo

    Open redirect vulnerability in objects/login.json.php in WWBN AVideo through 11.6, allows attackers to arbitrarily redirect users from a crafted url to the login page.

    wwbn/avideo Packagist
  • Medium 5.4
    CVE-2020-28847

    Cross site scripting in valine

    Cross Site Scripting (XSS) vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment.

    valine npm
  • Medium 6.5
    CVE-2021-41245

    Possible Cross-Site Request Forgery in Combodo iTop

    Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.6 and 3.0.0, CSRF tokens generated by `privUITransactionFile` aren't properly checked. Versions 2.7.6 and 3.0.0 contain a patch for this issue. As a workaround, use the session i…

    Combodo iTop
  • Medium 4.3
    CVE-2022-1236

    Weak Password Requirements in weseek/growi

    Weak Password Requirements in GitHub repository weseek/growi prior to v5.0.0.

    WESEEK weseek/growi
  • Medium 5.3
    CVE-2022-25356 Scanner template

    Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection.

  • Medium 5.9
    CVE-2022-24795

    Buffer Overflow and Integer Overflow in yajl-ruby

    yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads to subsequent heap memory corruption when dealing with large (~2GB) inputs. The reallocation logic at…

    brianmario yajl-ruby icinga2 php-mongodb Debian Ubuntu Azure Linux RubyGems