Archive
19 August 2022
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
High 8.8
Incorrect Access Control and Cross Site Scripting in Jellyfin
In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality.
-
Unscored —
In Jellyfin before 10.8, stored XSS allows theft of an admin access token.
-
Unscored —CVE-2022-29805 EPSS 28%
A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attacke…
-
Unscored —
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build informat…
-
Unscored —
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project T…
-
Unscored —
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload funct…
-
Unscored —
In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview.
-
Unscored —
Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attack…
-
Unscored —
Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions.
-
High 7.8
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 9.0.0225.