Skip to content
OpenAdvisories

Archive

9 September 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Unscored —
    CVE-2022-40317 Public exploit

    OpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.

  • High 7.3
    CVE-2022-25765 Public exploit EPSS 43%

    Command Injection

    The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.