Skip to content
OpenAdvisories

Archive

15 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /15 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Low 3.3
    CVE-2022-41814

    Potential XSS in history view

    Cross-site Scripting (XSS) vulnerability in BlueSpiceFoundation extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the history view of a wikipage.

    Hallo Welt! BlueSpice
  • Low 3.3
    CVE-2022-41789

    Potential XSS on default page header

    Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows logged in user with edit permissions to inject arbitrary HTML into the default page header of a wikipage.

    Hallo Welt! BlueSpice
  • Low 3.3
    CVE-2022-42001

    Potential XSS in book navigation

    Cross-site Scripting (XSS) vulnerability in BlueSpiceBookshelf extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the book navigation.

    Hallo Welt! BlueSpice
  • Low 3.3
    CVE-2022-42000

    Potential XSS in comment section

    Cross-site Scripting (XSS) vulnerability in BlueSpiceSocialProfile extension of BlueSpice allows user with comment permissions to inject arbitrary HTML into the comment section of a wikipage.

    Hallo Welt! BlueSpice
  • Low 3.3
    CVE-2022-3958

    Potential XSS on personal menu navigation

    Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permissions to inject arbitrary HTML into the personal menu navigation of their own and other users. This allows for targeted att…

    Hallo Welt! BlueSpice
  • Low 2.3
    CVE-2022-41611

    Potential XSS on sidebar navigation

    Cross-site Scripting (XSS) vulnerability in BlueSpiceDiscovery skin of BlueSpice allows user with admin privileges to inject arbitrary HTML into the main navigation of the application.

    Hallo Welt! BlueSpice
  • Low 2.3
    CVE-2022-3893

    Potential XSS on custom menu navigation

    Cross-site Scripting (XSS) vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application.

    Hallo Welt! BlueSpice
  • Low 3.7
    CVE-2022-4006

    WBCE CMS Header class.login.php increase_attempts excessive authentication

    A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function increase_attempts of the file wbce/framework/class.login.php of the component Header Handler. The manipulation of the argument X-Forwarded…

    WBCE CMS
  • Low 3.5
    CVE-2022-45393

    Cross-Site Request Forgery in Jenkins Delete log Plugin

    A cross-site request forgery (CSRF) vulnerability in Jenkins Delete log Plugin 1.0 and earlier allows attackers to delete build logs.

    Jenkins Project Jenkins Delete log Plugin org.jenkins-ci.plugins:delete-log-plugin Web / CMS Maven
  • Low 2.6
    CVE-2021-4241

    phpservermon User.php setUserLoggedIn predictable algorithm in random number generator

    A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has …

    phpservermon/phpservermon Packagist
  • Low 2.6
    CVE-2021-4240

    phpservermon User.php generatePasswordResetToken predictable algorithm in random number generator

    A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The …

    phpservermon/phpservermon Packagist