Skip to content
OpenAdvisories

Archive

25 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /25 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 3.5
    CVE-2022-4740

    kkFileView picturesPreview setWatermarkAttribute cross site scripting

    A vulnerability, which was classified as problematic, has been found in kkFileView. Affected by this issue is the function setWatermarkAttribute of the file /picturesPreview. The manipulation leads to cross site scripting. The attack may be launched remotely.…

  • Low 3.5
    CVE-2022-4736

    Venganzas del Pasado cross site scripting

    A vulnerability was found in Venganzas del Pasado and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument the_title leads to cross site scripting. The attack may be launched remotely. The name of t…

  • Low 3.5
    CVE-2019-25084

    Hide Files on GitHub options.js addEventListener cross site scripting

    A vulnerability, which was classified as problematic, has been found in Hide Files on GitHub up to 2.x. This issue affects the function addEventListener of the file extension/options.js. The manipulation leads to cross site scripting. The attack may be initia…

  • Low 3.5
    CVE-2022-4735

    asrashley dash-live DOM Node media.js ready cross site scripting

    A vulnerability classified as problematic was found in asrashley dash-live. This vulnerability affects the function ready of the file static/js/media.js of the component DOM Node Handler. The manipulation leads to cross site scripting. The attack can be initi…

    asrashley dash-live
  • Low 2.4
    CVE-2022-4731

    myapnea Title cross site scripting

    A vulnerability, which was classified as problematic, was found in myapnea up to 29.0.x. Affected is an unknown function of the component Title Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to…

  • Low 2.6
    CVE-2021-4277

    fredsmith utils Filename screenshot_sync predictable state

    A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown processing of the file screenshot_sync of the component Filename Handler. The manipulation leads to predictable from observable state. The…

    fredsmith utils