Skip to content
OpenAdvisories

Archive

12 December 2022

Vulnerabilities first published on this day (UTC), newest first.

45 results · Clear filters · Feed

  • Medium 5.4

    Alist Cross-site Scripting vulnerability

    Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board.

  • Medium 6.1

    Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization…

  • Medium 6.1

    Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization…

  • Medium 5.3

    HAProxyMessageDecoder Stack Exhaustion DoS

    Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.F…

  • Medium 6.1

    Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action -> Create a new Contextualize Ac…