Skip to content
OpenAdvisories

Archive

29 June 2022

Vulnerabilities first published on this day (UTC), newest first.

← May 2022 2022 / June /29 July 2022 →
  1. 1113
  2. 293
  3. 351
  4. 44
  5. 53
  6. 6103
  7. 764
  8. 862
  9. 962
  10. 1043
  11. 118
  12. 1211
  13. 13146
  14. 14198
  15. 15256
  16. 16114
  17. 1771
  18. 1820
  19. 1916
  20. 2059
  21. 2163
  22. 22114
  23. 2327
  24. 24135
  25. 259
  26. 264
  27. 27129
  28. 2861
  29. 2951
  30. 30101
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.3
    CVE-2022-31110

    Denial of Service (DoS) vulnerability in RSSHub

    RSSHub is an open source, extensible RSS feed generator. In commits prior to 5c4177441417 passing some special values to the `filter` and `filterout` parameters can cause an abnormally high CPU. This results in an impact on the performance of the servers and …

    DIYgod RSSHub rsshub npm
  • Medium 6.5
    CVE-2022-31063

    Cross site scripting via the title of a document in Tuleap

    Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.111 the title of a document is not properly escaped in the search result of MyDocmanSearch widget and in the administration pag…

    Enalean tuleap
  • Medium 4.3
    CVE-2022-31032

    Resources of private projects can be exposed in Tuleap

    Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.58 authorizations are not properly verified when creating projects or trackers from projects marked as templates. Users can get…

    Enalean tuleap
  • Medium 4.3
    CVE-2017-20120

    TrueConf Server cross-site request forgery

    A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has…

    TrueConf Server
  • Medium 6.1
    CVE-2021-39074

    IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

    IBM Security Guardium
  • Medium 4.3
    CVE-2022-2252

    Open Redirect in microweber/microweber

    Open Redirect in GitHub repository microweber/microweber prior to 1.2.19.

    microweber microweber/microweber microweber/microweber Packagist
  • Medium 4.3
    CVE-2017-20110

    Teleopti WFM Administration Credentials information disclosure

    A vulnerability, which was classified as problematic, has been found in Teleopti WFM up to 7.1.0. Affected by this issue is some unknown functionality of the component Administration. The manipulation as part of JSON leads to information disclosure (Credentia…

    Teleopti WFM
  • Medium 4.3
    CVE-2017-20109

    Teleopti WFM Administration GetOneTenant Credentials information disclosure

    A vulnerability classified as problematic was found in Teleopti WFM up to 7.1.0. Affected by this vulnerability is an unknown functionality of the file /TeleoptiWFM/Administration/GetOneTenant of the component Administration. The manipulation leads to informa…

    Teleopti WFM
  • Medium 5.4
    CVE-2022-28803

    Stored XSS in link tags added via XHR in SilverStripe Framework

    In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest (XHR).

    silverstripe/framework Packagist