Skip to content
OpenAdvisories

Archive

29 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /29 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.3
    CVE-2022-3364

    No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

    Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • Medium 6.5
    CVE-2022-39232

    Discourse vulnerable to incomplete quote causing a topic to crash in the browser

    Discourse is an open source discussion platform. Starting with version 2.9.0.beta5 and prior to version 2.9.0.beta10, an incomplete quote can generate a JavaScript error which will crash the current page in the browser in some cases. Version 2.9.0.beta10 adde…

    Discourse Discourse
  • Medium 4.3
    CVE-2022-39226

    Discourse user profile location and website fields were not sufficiently length-limited

    Discourse is an open source discussion platform. In versions prior to 2.8.9 on the `stable` branch and prior to 2.9.0.beta10 on the `beta` and `tests-passed` branches, a malicious actor can add large payloads of text into the Location and Website fields of a …

    Discourse Discourse
  • Medium 5.4
    CVE-2022-35137

    DGIOT Lightweight industrial IoT v4.5.4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.

  • Medium 6.1
    CVE-2022-40879 Scanner template

    kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.'

  • Medium 4.6
    CVE-2022-39168

    IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. IBM X-Force I…

    IBM Robotic Process Automation
  • Medium 6.1
    CVE-2022-40931

    Dutchoders transfer.sh contains an XSS vulnerability via malicious file upload

    dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting (XSS).

    github.com/dutchcoders/transfer.sh Go
  • Medium 5.4
    CVE-2022-40408

    FeehiCMS vulnerable to Cross-Site scripting via crafted payload

    FeehiCMS v2.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted payload injected into the Comment box under the Single Page module.

    feehi/feehicms Packagist
  • Medium 5.5
    CVE-2022-40363 Public exploit

    A buffer overflow in the component nfc_device_load_mifare_ul_data of Flipper Devices Inc., Flipper Zero before v0.65.2 …

  • Medium 6.5
    CVE-2022-35888

    Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channe…