Archive
9 September 2022
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Unscored —CVE-2022-40317 Public exploit
OpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.
-
High 7.3
Command Injection
The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.