Skip to content
OpenAdvisories

Archive

22 August 2022

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Critical 9.6
    CVE-2022-32772 Scanner template

    A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master…

  • Critical 9.6
    CVE-2022-32771 Scanner template

    A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master…

  • Critical 9.6
    CVE-2022-32770 Scanner template

    A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master…

  • Critical 9.9
    CVE-2022-32572 EPSS 25%

    An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master…

  • Critical 9.6
    CVE-2022-30690 EPSS 84%

    A cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master comm…

  • Critical 9.9
    CVE-2022-30547 EPSS 65%

    A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commi…

  • Critical 9.9
    CVE-2022-30534 EPSS 76%

    An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev m…

  • Critical 9.0

    A cross-site scripting (xss) vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master c…

  • Critical 9.6

    A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11…

  • Critical 9.8

    WordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability

    Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin <= 3.0.4 at WordPress.

  • Critical 9.8

    WordPress OAuth 2.0 client for SSO plugin <= 1.11.3 - Authentication Bypass vulnerability

    Authentication Bypass vulnerability in miniOrange OAuth 2.0 client for SSO plugin <= 1.11.3 at WordPress.

  • Critical 9.0

    Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

    Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

  • Critical 9.8

    Cross-site Scripting (XSS) - Reflected in bustle/mobiledoc-kit

    Cross-site Scripting (XSS) - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2.