Archive
12 December 2022
Vulnerabilities first published on this day (UTC), newest first.
45 results · Clear filters · Feed
-
Medium 5.4
Alist Cross-site Scripting vulnerability
Alist v3.5.1 is vulnerable to Cross Site Scripting (XSS) via the bulletin board.
-
Medium 6.1
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization…
-
Medium 6.1
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization…
-
Medium 5.3
HAProxyMessageDecoder Stack Exhaustion DoS
Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.F…
-
Medium 6.1
Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action -> Create a new Contextualize Ac…