Skip to content
OpenAdvisories

Archive

15 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /15 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2022-36074

    Authentication headers exposed on by Nextcloud Server

    Nextcloud server is an open source personal cloud product. Affected versions of this package are vulnerable to Information Exposure which fails to strip the Authorization header on HTTP downgrade. This can lead to account access exposure and compromise. It is…

    Nextcloud security-advisories
  • Medium 5.8
    CVE-2022-3211

    Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.6.

    pimcore pimcore/pimcore pimcore/pimcore Packagist
  • Medium 6.1
    GHSA-gqqf-g5r7-84vf

    TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection

    > ### Meta > * CVSS: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C` (5.7) ### Problem Due to a parsing issue in upstream package [`masterminds/html5`](https://packagist.org/packages/masterminds/html5), malicious markup used in a sequence with sp…

    typo3/cms-core Packagist
  • Medium 5.3
    CVE-2022-3222

    Uncontrolled Recursion in gpac/gpac

    Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV.

    gpac gpac/gpac gpac gpac Debian Ubuntu