Skip to content
OpenAdvisories

Archive

23 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /23 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low —
    GHSA-8jh9-wqpf-q52c

    sweetalert2 v8.19.1 and above contains hidden functionality

    `sweetalert2` versions 8.19.1 and up until 9.0.0 are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in versi…

    sweetalert2 npm
  • Low —
    GHSA-pg98-6v7f-2xfv

    sweetalert2 v9.17.4 and above contains hidden functionality

    `sweetalert2` versions 9.17.4 and up until 10.0.0 are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in vers…

    sweetalert2 npm
  • Low —
    GHSA-457r-cqc8-9vj9

    sweetalert2 v10.16.10 and above contains hidden functionality

    `sweetalert2` versions 10.16.10 and up until 11.0.0 are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in ve…

    sweetalert2 npm
  • Low —
    GHSA-qq6h-5g6j-q3cm

    sweetalert2 v11.4.9 and above contains hidden functionality

    `sweetalert2` versions 11.4.9 and above are vulnerable to hidden functionality that was introduced by the maintainer. The package outputs audio and/or video messages that do not pertain to the functionality of the package and is not included in versions 11.0.…

    sweetalert2 npm
  • Low 3.1
    CVE-2022-4045

    Authenticated user could send multiple requests containing a parameter which could fetch a large amount of data and can crash a Mattermost server

    A denial-of-service vulnerability in the Mattermost allows an authenticated user to crash the server via multiple requests to one of the API endpoints which could fetch a large amount of data. 

    Mattermost Mattermost github.com/mattermost/mattermost-server Go
  • Low 3.1
    CVE-2020-23587 Public exploit

    A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an…

  • Low 3.8
    CVE-2022-41925

    Tailscale daemon is vulnerable to information disclosure via CSRF

    A vulnerability identified in the Tailscale client allows a malicious website to access the peer API, which can then be used to access Tailscale environment variables. In the Tailscale client, the peer API was vulnerable to DNS rebinding. This allowed an atta…

    tailscale tailscale tailscale.com tailscale Alpine Go