Skip to content
OpenAdvisories

Archive

21 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /21 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

48 results · Clear filters · Feed

  • Medium 6.1
    CVE-2022-46096

    A Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on Vaccination System v1.0 allow…

  • Medium 6.1
    CVE-2022-40841

    A cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitra…

  • Medium 6.1
    CVE-2022-44449

    Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attack…

    Zenphoto Zenphoto
  • Medium 5.4
    CVE-2022-43543

    KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handli…

    KDDI CORPORATION, NTT DOCOMO, INC., and SoftBank KDDI +Message App for Android and for iOS, NTT DOCOMO +Message App for Android and for iOS, and SoftBank +Message App for Android and for iOS Android iOS
  • Medium 4.3
    CVE-2021-4275

    katlings pyambic-pentameter cross-site request forgery

    A vulnerability, which was classified as problematic, was found in katlings pyambic-pentameter. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The name of the patch is 974f2…

    katlings pyambic-pentameter
  • Medium 6.3
    CVE-2021-4264

    LinkedIn dustjs prototype pollution

    A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). Th…

    LinkedIn dustjs dustjs-linkedin npm
  • Medium 4.3
    CVE-2021-4268

    phpRedisAdmin cross-site request forgery

    A vulnerability, which was classified as problematic, was found in phpRedisAdmin up to 1.17.3. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 1.18.0 is a…

  • Medium 4.3
    CVE-2021-4273

    studygolang search.go Search cross site scripting

    A vulnerability classified as problematic was found in studygolang. This vulnerability affects the function Search of the file http/controller/search.go. The manipulation of the argument q leads to cross site scripting. The attack can be initiated remotely. T…