Skip to content
OpenAdvisories

Archive

1 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /1 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 2.6
    CVE-2022-41970

    Nextcloud Server's disabled download shares still allow download through preview images

    Nextcloud Server is an open source personal cloud server. Prior to versions 24.0.7 and 25.0.1, disabled download shares still allow download through preview images. Images could be downloaded and previews of documents (first page) can be downloaded without be…

    Nextcloud security-advisories
  • Low 2.4
    CVE-2022-41969

    Nextcloud Server has no password length limit when creating a user as an administrator

    Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.11, 24.0.7, and 25.0.0, there is no password length limit when creating a user as an administrator. An administrator can cause a limited DoS attack against their own server. Vers…

    Nextcloud security-advisories
  • Low 3.5
    CVE-2022-41968

    Nextcloud Server's calendar name length not validated before writing to database

    Nextcloud Server is an open source personal cloud server. Prior to versions 23.0.10 and 24.0.5, calendar name lengths are not validated before writing to a database. As a result, an attacker can send unnecessary amounts of data against the database. Version 2…

    Nextcloud security-advisories
  • Low 3.5
    CVE-2022-4250

    Movie Ticket Booking System booking.php cross site scripting

    A vulnerability has been found in Movie Ticket Booking System and classified as problematic. Affected by this vulnerability is an unknown functionality of the file booking.php. The manipulation of the argument id leads to cross site scripting. The attack can …

  • Low 3.5
    CVE-2022-4253

    SourceCodester Canteen Management System customer.php builtin_echo cross site scripting

    A vulnerability was found in SourceCodester Canteen Management System. It has been declared as problematic. This vulnerability affects the function builtin_echo of the file customer.php. The manipulation leads to cross site scripting. The attack can be initia…

    SourceCodester Canteen Management System
  • Low 3.5
    CVE-2022-4249

    Movie Ticket Booking System POST Request cross site scripting

    A vulnerability, which was classified as problematic, was found in Movie Ticket Booking System. Affected is an unknown function of the component POST Request Handler. The manipulation of the argument ORDER_ID leads to cross site scripting. It is possible to l…

  • Low 3.5
    CVE-2022-4252

    SourceCodester Canteen Management System categories.php builtin_echo cross site scripting

    A vulnerability was found in SourceCodester Canteen Management System. It has been classified as problematic. This affects the function builtin_echo of the file categories.php. The manipulation leads to cross site scripting. It is possible to initiate the att…

    SourceCodester Canteen Management System
  • Low 2.4
    CVE-2022-4251

    Movie Ticket Booking System editBooking.php cross site scripting

    A vulnerability was found in Movie Ticket Booking System and classified as problematic. Affected by this issue is some unknown functionality of the file editBooking.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The …

  • Low 2.7
    CVE-2022-3710

    A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database conte…

    Sophos Sophos Firewall Network devices