Skip to content
OpenAdvisories

Archive

26 August 2022

Vulnerabilities first published on this day (UTC), newest first.

← July 2022 2022 / August /26 September 2022 →
  1. 1111
  2. 253
  3. 344
  4. 459
  5. 5169
  6. 612
  7. 73
  8. 844
  9. 9206
  10. 1054
  11. 11211
  12. 1254
  13. 134
  14. 146
  15. 1556
  16. 16166
  17. 1744
  18. 18130
  19. 1950
  20. 202
  21. 214
  22. 22115
  23. 2390
  24. 2466
  25. 25232
  26. 2659
  27. 279
  28. 2836
  29. 29102
  30. 3054
  31. 3188
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-0225

    Stored Cross-Site Scripting (XSS) in Keycloak via groups dropdown

    A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name while creating a new group from the admin console, leading to a stored Cross-site scripting (XSS) attack.

    org.keycloak:keycloak-core Maven
  • Medium 5.4
    CVE-2022-35714

    IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit…

    IBM Maximo Asset Management
  • Medium 4.3
    CVE-2021-3856

    Keycloak has Files or Directories Accessible to External Parties

    ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of ra…

    org.keycloak:keycloak-core Maven
  • Medium 6.1
    CVE-2021-3427

    Deluge Web-UI vulnerable to XSS through a crafted torrent file

    The Deluge Web-UI is vulnerable to XSS through a crafted torrent file. The the data from torrent files is not properly sanitised as it's interpreted directly as HTML. Someone who supplies the user with a malicious torrent file can execute arbitrary Javascript…

    deluge deluge deluge Debian Ubuntu PyPI