Skip to content
OpenAdvisories

Archive

25 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /25 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 3.5
    CVE-2022-39346

    Missing length validation of user displayname in nextcloud server

    Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit user display names which could allow a malicious users to overload the backing database and cause a denial of service. It is recommended tha…

    Nextcloud security-advisories
  • Low 3.5
    CVE-2022-39338

    Stored cross site scripting (XSS) vulnerability via Authorization Endpoint in user_oidc

    user_oidc is an OpenID Connect user backend for Nextcloud. Versions prior to 1.2.1 did not properly validate discovery urls which may lead to a stored cross site scripting attack vector. The impact is limited due to the restrictive CSP that is applied on this…

    Nextcloud security-advisories
  • Low 3.9
    CVE-2022-39334

    nextcloudcmd incorrectly trusts bad TLS certificates

    Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers. Versions of nextcloudcmd prior to 3.6.1 would incorrectly trust invalid TLS certificates, which may enable a Man-in-the-middle attack …

    Nextcloud security-advisories nextcloud-desktop nextcloud-desktop Debian Ubuntu
  • Low 3.5
    CVE-2022-4091

    SourceCodester Canteen Management System food.php query cross site scripting

    A vulnerability was found in SourceCodester Canteen Management System. It has been classified as problematic. This affects the function query of the file food.php. The manipulation of the argument product_name leads to cross site scripting. It is possible to …

    SourceCodester Canteen Management System
  • Low 3.3
    CVE-2022-41926

    Nextcloud Talk Android broadcast incorrect permission handling

    Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the receiver is not protected by broadcastPermission allowing malicious apps to monitor communication. It is recommended that the Nextcloud Talk An…

    Nextcloud security-advisories
  • Low 3.3
    CVE-2022-41954

    Temporary File Information Disclosure Vulnerability

    MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems (not Windows or macos), MPXJ's use of `File.createTempFile(..)` results in temporary files being created with the permi…

    joniles mpxj net.sf.mpxj:mpxj net.sf.mpxj-for-csharp Maven PyPI NuGet