Skip to content
OpenAdvisories

Archive

19 August 2022

Vulnerabilities first published on this day (UTC), newest first.

50 results · Feed

  • High 8.8

    Incorrect Access Control and Cross Site Scripting in Jellyfin

    In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality.

  • Unscored —

    In Jellyfin before 10.8, stored XSS allows theft of an admin access token.

  • Unscored —
    CVE-2022-29805 EPSS 28%

    A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attacke…

  • Unscored —

    In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build informat…

  • Unscored —

    In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project T…

  • Unscored —

    In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload funct…

  • Unscored —

    In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview.

  • Unscored —

    Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attack…

  • Unscored —

    Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions.

  • High 7.8

    Use After Free in vim/vim

    Use After Free in GitHub repository vim/vim prior to 9.0.0225.