Skip to content
OpenAdvisories

Archive

11 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /11 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Medium 6.1
    CVE-2022-4414

    Cross-site Scripting (XSS) - DOM in nuxt/framework

    Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13.

    nuxt nuxt/framework
  • Low 3.5
    CVE-2022-4400

    zbl1996 FS-Blog Title cross site scripting

    A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing of the component Title Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identif…

    zbl1996 FS-Blog
  • Low 3.5
    CVE-2022-4401

    pallidlight online-course-selection-system cross site scripting

    A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of th…

    pallidlight online-course-selection-system
  • Medium 6.3
    CVE-2022-4409

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • Medium 6.3
    CVE-2022-4403

    SourceCodester Canteen Management System ajax_represent.php sql injection

    A vulnerability classified as critical was found in SourceCodester Canteen Management System. This vulnerability affects unknown code of the file ajax_represent.php. The manipulation of the argument customer_id leads to sql injection. The attack can be initia…

    SourceCodester Canteen Management System
  • Critical 9.8
    CVE-2022-4407 Public exploit

    Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • Medium 4.7
    CVE-2022-4402

    RainyGao DocSys ZIP File Decompression path traversal

    A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remot…

    RainyGao DocSys
  • Medium 6.1
    CVE-2022-4413

    Cross-site Scripting (XSS) - Reflected in nuxt/framework

    Cross-site Scripting (XSS) - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13.

    nuxt nuxt/framework
  • Medium 4.3
    CVE-2022-4408

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist