Skip to content
OpenAdvisories

Archive

21 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /21 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

49 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-41224

    Jenkins vulnerable to stored cross site scripting in the I:helpIcon component

    Jenkins 2.367 through 2.369 (both inclusive) does not escape tooltips of the l:helpIcon UI component used for some help icons on the Jenkins web UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control toolti…

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 5.4
    CVE-2022-37246

    Craft CMS Cross-site Scripting vulnerability

    Craft CMS 4.2.0.1 is affected by Cross Site Scripting (XSS) in the file src/web/assets/cp/src/js/BaseElementSelectInput.js and in specific on the line label: elementInfo.label.

    craftcms/cms Packagist
  • Medium 6.8
    CVE-2022-3255

    Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

    If an attacker can control a script that is executed in the victim's browser, then they can typically fully compromise that user. Amongst other things, the attacker can: Perform any action within the application that the user can perform. View any information…

    pimcore pimcore/pimcore pimcore/pimcore Packagist
  • Medium 5.3
    CVE-2022-3068

    Improper Privilege Management in octoprint/octoprint

    Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3.

    OctoPrint octoprint/octoprint octoprint PyPI
  • Medium 4.4
    CVE-2022-2888

    Insufficient Session Expiration in octoprint/octoprint

    If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists.

    OctoPrint octoprint/octoprint octoprint PyPI
  • Medium 5.5
    CVE-2022-2881

    Buffer overread in statistics channel code

    The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process.

    ISC BIND9 bind9 bind9 Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2022-2795

    Processing large delegations may severely degrade resolver performance

    By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.

    ISC BIND9 bind9 bind9 Debian Ubuntu Azure Linux Alpine
  • Medium 6.1
    CVE-2022-40754

    Open Redirect

    In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.

    Apache Software Foundation Apache Airflow apache-airflow PyPI
  • Medium 5.5
    CVE-2022-41218 Public exploit

    In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount ra…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux