Skip to content
OpenAdvisories

Archive

21 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /21 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

89 results · Feed

  • Medium 4.3
    CVE-2021-4275

    katlings pyambic-pentameter cross-site request forgery

    A vulnerability, which was classified as problematic, was found in katlings pyambic-pentameter. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The name of the patch is 974f2…

    katlings pyambic-pentameter
  • Medium 6.3
    CVE-2021-4264

    LinkedIn dustjs prototype pollution

    A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). Th…

    LinkedIn dustjs dustjs-linkedin npm
  • Low 3.5
    CVE-2021-4266

    Webdetails cpf DependenciesPackage.java cross site scripting

    A vulnerability classified as problematic has been found in Webdetails cpf up to 9.5.0.0-80. Affected is an unknown function of the file core/src/main/java/pt/webdetails/cpf/packager/DependenciesPackage.java. The manipulation of the argument baseUrl leads to …

    Webdetails cpf
  • Medium 4.3
    CVE-2021-4268

    phpRedisAdmin cross-site request forgery

    A vulnerability, which was classified as problematic, was found in phpRedisAdmin up to 1.17.3. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. Upgrading to version 1.18.0 is a…

  • Low 3.5
    CVE-2021-4269

    SimpleRisk common.js checkAndSetValidation cross site scripting

    A vulnerability has been found in SimpleRisk and classified as problematic. This vulnerability affects the function checkAndSetValidation of the file simplerisk/js/common.js. The manipulation of the argument title leads to cross site scripting. The attack can…

  • Low 3.5
    CVE-2021-4272

    studygolang topics.js cross site scripting

    A vulnerability classified as problematic has been found in studygolang. This affects an unknown part of the file static/js/topics.js. The manipulation of the argument contentHtml leads to cross site scripting. It is possible to initiate the attack remotely. …

    github.com/studygolang/studygolang Go
  • Low 3.5
    CVE-2021-4270

    Imprint CMS ViewHelpers.cs SearchForm cross site scripting

    A vulnerability was found in Imprint CMS. It has been classified as problematic. Affected is the function SearchForm of the file ImprintCMS/Models/ViewHelpers.cs. The manipulation of the argument query leads to cross site scripting. It is possible to launch t…

  • Medium 4.3
    CVE-2021-4273

    studygolang search.go Search cross site scripting

    A vulnerability classified as problematic was found in studygolang. This vulnerability affects the function Search of the file http/controller/search.go. The manipulation of the argument q leads to cross site scripting. The attack can be initiated remotely. T…

  • Low 3.5
    CVE-2021-4265

    siwapp-ror cross site scripting

    A vulnerability was found in siwapp-ror. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 924d16008cfcc09356c87db01848e…