Skip to content
OpenAdvisories

Archive

19 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /19 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Low 3.7
    CVE-2022-4064

    Dalli Meta Protocol request_formatter.rb self.meta_set injection

    A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.meta_set of the file lib/dalli/protocol/meta/request_formatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas…

    dalli ruby-dalli Ubuntu RubyGems
  • Low 3.5
    CVE-2022-4066

    davidmoreno onion Log response.c onion_response_flush allocation of resources

    A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onion_response_flush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The…

    davidmoreno onion firefox Wolfi
  • Medium 5.5
    CVE-2022-4065 Public exploit

    cbeust testng XML File Parser JarFileUtils.java testngXmlExistsInJar path traversal

    A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML F…

    cbeust testng org.testng:testng testng Ubuntu Maven
  • Medium 6.1
    CVE-2022-41939

    Credential exposure when running third-party builders in knative/func

    knative.dev/func is is a client library and CLI enabling the development and deployment of Kubernetes functions. Developers using a malicious or compromised third-party buildpack could expose their registry credentials or local docker socket to a malicious `l…

    knative func
  • Critical 9.0
    CVE-2022-41938

    Cross site scripting vulnerability with discussion titles in flarum

    Flarum is an open source discussion platform. Flarum's page title system allowed for page titles to be converted into HTML DOM nodes when pages were rendered. The change was made after `v1.5` and was not noticed. This allowed an attacker to inject malicious H…

    flarum framework flarum/core Packagist