Skip to content
OpenAdvisories

Archive

26 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /26 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.6
    CVE-2021-4281 Public exploit

    Brave UX for-the-badge combine-prs.yml os command injection

    A vulnerability was found in Brave UX for-the-badge and classified as critical. Affected by this issue is some unknown functionality of the file .github/workflows/combine-prs.yml. The manipulation leads to os command injection. The name of the patch is 55b5a2…

    Brave UX for-the-badge
  • Critical 9.8
    CVE-2022-4047 Public exploit

    Return Refund and Exchange For WooCommerce < 4.0.9 - Unauthenticated Arbitrary File Upload

    The Return Refund and Exchange For WooCommerce WordPress plugin before 4.0.9 does not validate attachment files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files such as PHP and lead to RCE

    Web / CMS
  • Medium 6.1
    CVE-2022-36664 Public exploit

    Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultUR…

  • Medium 5.3
    CVE-2019-19030 Public exploit

    Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030)

    Cloud Native Computing Foundation Harbor before 1.10.3 and 2.x before 2.0.1 allows resource enumeration because unauthenticated API calls reveal (via the HTTP status code) whether a resource exists.

    github.com/goharbor/harbor Go