Skip to content
OpenAdvisories

Archive

24 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /24 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2022-23464

    Potential Server Side Request Forgery (SSRF) in Nepxion Discovery

    Nepxion Discovery is a solution for Spring Cloud. Discovery is vulnerable to a potential Server-Side Request Forgery (SSRF). RouterResourceImpl uses RestTemplate’s getForEntity to retrieve the contents of a URL containing user-controlled input, potentially re…

    Nepxion Discovery com.nepxion:discovery Maven
  • Medium 5.4
    CVE-2022-23461

    Cross-Site Scripting (XSS) in Jodit Editor

    Jodit Editor is a WYSIWYG editor written in pure TypeScript without the use of additional libraries. Jodit Editor is vulnerable to XSS attacks when pasting specially constructed input. This issue has not been fully patched. There are no known workarounds.

    xdan Jodit Editor jodit npm
  • Medium 5.4
    CVE-2022-39240

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in MyGraph

    MyGraph is a permission management system. Versions prior to 1.0.4 are vulnerable to a storage XSS vulnerability leading to Remote Code Execution. This issue is patched in version 1.0.4. There is no known workaround.

    renlm MyGraph
  • Medium 5.3
    CVE-2022-39242

    Incorrect Calculation in Frontier leads to inflated Ethereum chain gas prices

    Frontier is an Ethereum compatibility layer for Substrate. Prior to commit d3beddc6911a559a3ecc9b3f08e153dbe37a8658, the worst case weight was always accounted as the block weight for all cases. In case of large EVM gas refunds, this can lead to block spammin…

    paritytech frontier pallet-ethereum crates.io