Skip to content
OpenAdvisories

Archive

21 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /21 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

20 results · Clear filters · Feed

  • Low 3.5
    CVE-2022-44488

    AEM URL Redirection to Untrusted Site Security feature bypass

    Adobe Experience Manager version 6.5.14 (and earlier) is affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploit…

    Adobe Experience Manager
  • Low 3.5
    CVE-2020-36620

    Brondahl EnumStringValues EnumExtensions.cs GetStringValuesWithPreferences_Uncache resource consumption

    A vulnerability was found in Brondahl EnumStringValues up to 4.0.0. It has been declared as problematic. This vulnerability affects the function GetStringValuesWithPreferences_Uncache of the file EnumStringValues/EnumExtensions.cs. The manipulation leads to r…

    Brondahl EnumStringValues EnumStringValues NuGet
  • Low 3.5
    CVE-2020-36621

    chedabob whatismyudid mobileconfig.js exports.enrollment cross site scripting

    A vulnerability, which was classified as problematic, has been found in chedabob whatismyudid. Affected by this issue is the function exports.enrollment of the file routes/mobileconfig.js. The manipulation leads to cross site scripting. The attack may be laun…

    chedabob whatismyudid
  • Low 3.5
    CVE-2022-4637

    ep3-bs cross site scripting

    A vulnerability classified as problematic has been found in ep3-bs up to 1.7.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.8.0 is able to address this is…

  • Low 2.7
    CVE-2022-4617

    Cross-site Scripting (XSS) - Reflected in microweber/microweber

    Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.2.

    microweber microweber/microweber microweber/microweber Packagist
  • Low 3.5
    CVE-2022-4638

    collective.contact.widget widgets.py title cross site scripting

    A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The manipulation leads to cross site scripting. The attack can be …

    collective-contact-widget PyPI
  • Low 3.5
    CVE-2022-4632

    Auto Upload Images cross site scripting

    A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to versi…

  • Low 2.5
    CVE-2022-4641

    pig-vector LogisticRegression.java LogisticRegression temp file

    A vulnerability was found in pig-vector and classified as problematic. Affected by this issue is the function LogisticRegression of the file src/main/java/org/apache/mahout/pig/LogisticRegression.java. The manipulation leads to insecure temporary file. The at…

  • Low 3.5
    CVE-2022-4640

    Mingsoft MCMS Article save cross site scripting

    A vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The…

    MingSoft MCMS net.mingsoft:ms-mcms Maven
  • Low 3.5
    CVE-2022-4631

    WP-Ban ban-options.php cross site scripting

    A vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file ban-options.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 22b9…

  • Low 3.5
    CVE-2022-4642

    tatoeba2 Profile Name cross site scripting

    A vulnerability was found in tatoeba2. It has been classified as problematic. This affects an unknown part of the component Profile Name Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has b…

  • Low 3.5
    CVE-2021-4267

    tad_discuss cross site scripting

    A vulnerability classified as problematic was found in tad_discuss. Affected by this vulnerability is an unknown functionality. The manipulation of the argument DiscussTitle leads to cross site scripting. The attack can be launched remotely. The name of the p…

  • Low 3.5
    CVE-2021-4274

    sileht bird-lg layout.html cross site scripting

    A vulnerability, which was classified as problematic, has been found in sileht bird-lg. This issue affects some unknown processing of the file templates/layout.html. The manipulation of the argument request_args leads to cross site scripting. The attack may b…

    sileht bird-lg
  • Low 3.5
    CVE-2021-4271

    panicsteve w2wiki Markdown index.php toHTML cross site scripting

    A vulnerability was found in panicsteve w2wiki. It has been rated as problematic. Affected by this issue is the function toHTML of the file index.php of the component Markdown Handler. The manipulation leads to cross site scripting. The attack may be launched…

    panicsteve w2wiki
  • Low 3.5
    CVE-2021-4263

    leanote history.js define cross site scripting

    A vulnerability, which was classified as problematic, has been found in leanote 2.6.1. This issue affects the function define of the file public/js/plugins/history.js. The manipulation of the argument content leads to cross site scripting. The attack may be i…

    github.com/leanote/leanote Go
  • Low 3.5
    CVE-2021-4266

    Webdetails cpf DependenciesPackage.java cross site scripting

    A vulnerability classified as problematic has been found in Webdetails cpf up to 9.5.0.0-80. Affected is an unknown function of the file core/src/main/java/pt/webdetails/cpf/packager/DependenciesPackage.java. The manipulation of the argument baseUrl leads to …

    Webdetails cpf
  • Low 3.5
    CVE-2021-4269

    SimpleRisk common.js checkAndSetValidation cross site scripting

    A vulnerability has been found in SimpleRisk and classified as problematic. This vulnerability affects the function checkAndSetValidation of the file simplerisk/js/common.js. The manipulation of the argument title leads to cross site scripting. The attack can…

  • Low 3.5
    CVE-2021-4272

    studygolang topics.js cross site scripting

    A vulnerability classified as problematic has been found in studygolang. This affects an unknown part of the file static/js/topics.js. The manipulation of the argument contentHtml leads to cross site scripting. It is possible to initiate the attack remotely. …

    github.com/studygolang/studygolang Go
  • Low 3.5
    CVE-2021-4270

    Imprint CMS ViewHelpers.cs SearchForm cross site scripting

    A vulnerability was found in Imprint CMS. It has been classified as problematic. Affected is the function SearchForm of the file ImprintCMS/Models/ViewHelpers.cs. The manipulation of the argument query leads to cross site scripting. It is possible to launch t…

  • Low 3.5
    CVE-2021-4265

    siwapp-ror cross site scripting

    A vulnerability was found in siwapp-ror. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 924d16008cfcc09356c87db01848e…