Skip to content
OpenAdvisories

Archive

11 December 2022

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 6.1

    Cross-site Scripting (XSS) - DOM in nuxt/framework

    Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13.

  • Medium 6.3

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

  • Medium 6.3

    SourceCodester Canteen Management System ajax_represent.php sql injection

    A vulnerability classified as critical was found in SourceCodester Canteen Management System. This vulnerability affects unknown code of the file ajax_represent.php. The manipulation of the argument customer_id leads to sql injection. The attack can be initia…

  • Medium 4.7

    RainyGao DocSys ZIP File Decompression path traversal

    A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remot…

  • Medium 6.1

    Cross-site Scripting (XSS) - Reflected in nuxt/framework

    Cross-site Scripting (XSS) - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13.

  • Medium 4.3

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9.