Skip to content
OpenAdvisories

Archive

8 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /8 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Low 3.5
    CVE-2022-23469

    Authorization header displayed in the debug logs

    Traefik is an open source HTTP reverse proxy and load balancer. Versions prior to 2.9.6 are subject to a potential vulnerability in Traefik displaying the Authorization header in its debug logs. In certain cases, if the log level is set to DEBUG, credentials …

    traefik traefik github.com/traefik/traefik github.com/traefik/traefik/v2 Alpine Go
  • Low 3.9
    CVE-2022-46827

    In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was p…

    JetBrains IntelliJ IDEA
  • Low 2.4
    CVE-2020-36609

    annyshow DuxCMS Article edit cross site scripting

    A vulnerability was found in annyshow DuxCMS 2.1. It has been classified as problematic. This affects an unknown part of the file admin.php&r=article/AdminContent/edit of the component Article Handler. The manipulation of the argument content leads to cross s…

    annyshow DuxCMS
  • Low 3.9
    CVE-2022-39910

    Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data…

    Samsung Mobile Samsung Pass
  • Low 2.3
    CVE-2022-39906

    Improper access control vulnerability in SecTelephonyProvider prior to SMR Dec-2022 Release 1 allows attackers to acces…

    Samsung Mobile Samsung Mobile Devices
  • Low 3.3
    CVE-2022-39904

    Exposure of Sensitive Information vulnerability in Samsung Settings prior to SMR Dec-2022 Release 1 allows local attack…

    Samsung Mobile Samsung Mobile Devices
  • Low 3.3
    CVE-2022-39915

    Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android…

    Samsung Mobile Samsung Calendar
  • Low 3.3
    CVE-2022-4123

    Buildah (as part of Podman) vulnerable to Path Traversal

    A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality.

    podman github.com/containers/podman/v4 golang-github-containers-buildah golang-github-containers-buildah Debian Ubuntu Azure Linux Go
  • Low 3.5
    CVE-2022-4347

    xiandafu beetl-bbs WebUtils.java cross site scripting

    A vulnerability was found in xiandafu beetl-bbs. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file WebUtils.java. The manipulation of the argument user leads to cross site scripting. The attack can be …

    xiandafu beetl-bbs
  • Low 3.5
    CVE-2022-4350

    Mingsoft MCMS search.do cross site scripting

    A vulnerability, which was classified as problematic, was found in Mingsoft MCMS 5.2.8. Affected is an unknown function of the file search.do. The manipulation of the argument content_title leads to cross site scripting. It is possible to launch the attack re…

    MingSoft MCMS net.mingsoft:ms-mcms Maven
  • Low 3.5
    CVE-2022-4348

    y_project RuoYi-Cloud JSON cross site scripting

    A vulnerability was found in y_project RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The …

    y_project RuoYi-Cloud com.ruoyi:ruoyi-common Maven
  • Low 3.5
    CVE-2022-4353

    LinZhaoguan pb-cms IpUtil.getIpAddr cross site scripting

    A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. Affected by this vulnerability is the function IpUtil.getIpAddr. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been …

    LinZhaoguan pb-cms