Skip to content
OpenAdvisories

Archive

2 November 2022

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Low 3.5

    Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting

    A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file admin_organizer.js of the component Error Log Module. The manipulation leads to cross site scr…

  • Low 2.2

    An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiClient for Mac versions 7…

  • Low 3.7

    An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS SSL-VPN versions 7.2.0…

  • Low 3.1
    CVE-2022-39379 EPSS 45%

    Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)

    Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. A remote code execution (RCE) vulnerability in non-default configurations of Fluentd allows unauthenticated attackers to execute arbitrary …

  • Low 3.5

    Webmin index.cgi cross site scripting

    A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to vers…

  • Low 2.4

    phpipam Import Preview import-load-data.php cross site scripting

    A vulnerability has been found in phpipam and classified as problematic. Affected by this vulnerability is an unknown functionality of the file app/admin/import-export/import-load-data.php of the component Import Preview Handler. The manipulation leads to cro…

  • Low 3.9

    A key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and bel…