Skip to content
OpenAdvisories

Archive

17 October 2022

Vulnerabilities first published on this day (UTC), newest first.

← September 2022 2022 / October /17 November 2022 →
  1. 11
  2. 22
  3. 350
  4. 4 
  5. 5 
  6. 669
  7. 7117
  8. 83
  9. 95
  10. 1051
  11. 11269
  12. 1271
  13. 1364
  14. 14186
  15. 154
  16. 167
  17. 17123
  18. 18160
  19. 19128
  20. 2035
  21. 2159
  22. 221
  23. 23 
  24. 2437
  25. 25123
  26. 2656
  27. 2757
  28. 2884
  29. 2910
  30. 303
  31. 3190
All Critical High Medium Low Exploited only Public exploit

47 results · Clear filters · Feed

  • Medium 6.1
    CVE-2022-40605

    MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a diffe…

  • Medium 5.4
    CVE-2022-41542

    devhub 0.102.0 was discovered to contain a broken session control.

  • Medium 5.4
    CVE-2022-41431

    xzs v3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /admin/question/edit. …

  • Medium 5.4
    CVE-2022-41139

    MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execu…

  • Medium 6.5
    CVE-2022-41471

    74cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change the rights and credentia…

  • Medium 5.4
    CVE-2022-41472

    74cmsSE v3.12.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /apiadmin/notice…

  • Medium 6.1
    CVE-2022-42147

    kkFileView 4.0 is vulnerable to Cross Site Scripting (XSS) via controller\ Filecontroller.java.