Skip to content
OpenAdvisories

Archive

23 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /23 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 3.4
    CVE-2022-40215

    WordPress Tabs plugin <= 3.7.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

    Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in Tabs plugin <= 3.7.1 at WordPress.

    Biplob Adhikari Tabs (WordPress plugin) Web / CMS
  • Low 3.4
    CVE-2022-37328

    WordPress History Timeline plugin <= 1.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (author+) Stored Cross-Site Scripting (XSS) vulnerability in Themes Awesome History Timeline plugin <= 1.0.5 at WordPress.

    Themes Awesome History Timeline (WordPress plugin) Web / CMS
  • Low 3.1
    CVE-2022-3257

    Server-side Denial of Service while processing a specifically crafted GIF file

    Mattermost version 7.1.x and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Den…

    Mattermost Mattermost github.com/mattermost/mattermost-server/v6 Go
  • Low 3.4
    CVE-2022-38703

    WordPress Button Plugin MaxButtons plugin <= 9.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Max Foundry Button Plugin MaxButtons plugin <= 9.2 at WordPress

    Max Foundry WordPress Button Plugin MaxButtons (WordPress plugin) Web / CMS
  • Low 3.7
    CVE-2022-39231

    Parse Server subject to Improper Authentication allowing Auth adapter app ID validation to be circumvented

    Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In versions prior to 4.10.16, or from 5.0.0 to 5.2.6, validation of the authentication adapter app ID for _Facebook_ and _Spotify_ may be circumvented. Con…

    parse-community parse-server parse-server npm
  • Low 3.7
    CVE-2022-35252

    When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when …

    curl curl curl curl Debian Ubuntu Azure Linux Alpine