28 December 2022

15 results · Clear filters · Feed

• Low 3.1
  CVE-2022-4823

  InSTEDD Nuntium geopoll_controller.rb timing discrepancy

  A vulnerability, which was classified as problematic, was found in InSTEDD Nuntium. Affected is an unknown function of the file app/controllers/geopoll_controller.rb. The manipulation of the argument signature leads to observable timing discrepancy. It is pos…

  InSTEDD Nuntium
  Dec 28, 2022
• Low 2.4
  CVE-2022-4822

  FlatPress Setup main.lib.php cross site scripting

  A vulnerability, which was classified as problematic, has been found in FlatPress. This issue affects some unknown processing of the file setup/lib/main.lib.php of the component Setup. The manipulation leads to cross site scripting. The attack may be initiate…

  Dec 28, 2022
• Low 2.4
  CVE-2022-4821

  FlatPress XML File Handler/MD File admin.uploader.php onupload cross site scripting

  A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scr…

  Dec 28, 2022
• Low 3.5
  CVE-2022-4820

  FlatPress Admin Area admin.entry.list.php cross site scripting

  A vulnerability classified as problematic has been found in FlatPress. This affects an unknown part of the file admin/panels/entry/admin.entry.list.php of the component Admin Area. The manipulation leads to cross site scripting. It is possible to initiate the…

  Dec 28, 2022
• Low 2.4
  CVE-2022-4819

  HotCRP cross site scripting

  A vulnerability was found in HotCRP. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is d4ffdb0ef806453c54ddca7f…

  Dec 28, 2022
• Low 3.1
  CVE-2022-4817

  centic9 jgit-cookbook temp file

  A vulnerability was found in centic9 jgit-cookbook. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to insecure temporary file. The attack can be initiated remotely. The name of the patch is b8cb29b43dc7047…

  centic9 jgit-cookbook
  Dec 28, 2022
• Low 2.6
  CVE-2021-4294

  OpenShift OSIN CheckClientSecret timing discrepancy

  A vulnerability was found in OpenShift OSIN. It has been classified as problematic. This affects the function ClientSecretMatches/CheckClientSecret. The manipulation of the argument secret leads to observable timing discrepancy. The name of the patch is 86126…

  OpenShift OSIN github.com/openshift/osin Go
  Dec 28, 2022
• Low 3.5
  CVE-2018-25056

  yolapi metadata.py render_description cross site scripting

  A vulnerability, which was classified as problematic, was found in yolapi. Affected is the function render_description of the file yolapi/pypi/metadata.py. The manipulation of the argument text leads to cross site scripting. It is possible to launch the attac…

  Dec 28, 2022
• Low 3.5
  CVE-2018-25055

  FarCry Solr Pro Plugin Search solrProSearch.cfc cross site scripting

  A vulnerability was found in FarCry Solr Pro Plugin up to 1.5.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file packages/forms/solrProSearch.cfc of the component Search Handler. The manipulation of …

  Dec 28, 2022
• Low 3.5
  CVE-2018-25054

  shred cilla Search search.jsp cross site scripting

  A vulnerability was found in shred cilla. It has been classified as problematic. Affected is an unknown function of the file cilla-xample/src/main/webapp/WEB-INF/jsp/view/search.jsp of the component Search Handler. The manipulation of the argument details lea…

  shred cilla
  Dec 28, 2022
• Low 3.5
  CVE-2018-25052

  Catalyst-Plugin-Session Session ID Session.pm _load_sessionid cross site scripting

  A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function _load_sessionid of the file lib/Catalyst/Plugin/Session.pm of the component Session ID Handler. The manipulation of the…

  libcatalyst-plugin-session-perl libcatalyst-plugin-session-perl Debian Ubuntu
  Dec 28, 2022
• Low 2.4
  CVE-2018-25051

  JmPotato Pomash editor.html cross site scripting

  A vulnerability, which was classified as problematic, was found in JmPotato Pomash. This affects an unknown part of the file Pomash/theme/clean/templates/editor.html. The manipulation of the argument article.title/content.title/article.tag leads to cross site…

  JmPotato Pomash
  Dec 28, 2022
• Low 3.5
  CVE-2018-25050

  Harvest Chosen abstract-chosen.coffee AbstractChosen cross site scripting

  A vulnerability, which was classified as problematic, has been found in Harvest Chosen up to 1.8.6. Affected by this issue is the function AbstractChosen of the file coffee/lib/abstract-chosen.coffee. The manipulation of the argument group_label leads to cros…

  Harvest Chosen harvesthq/chosen libjs-chosen Ubuntu Packagist
  Dec 28, 2022
• Low 2.4
  CVE-2019-25092

  Nakiami Mellivora Admin Panel user.inc.php print_user_ip_log cross site scripting

  A vulnerability classified as problematic was found in Nakiami Mellivora up to 2.1.x. Affected by this vulnerability is the function print_user_ip_log of the file include/layout/user.inc.php of the component Admin Panel. The manipulation of the argument $entr…

  Nakiami Mellivora
  Dec 28, 2022
• Low 3.5
  CVE-2021-4293

  gnuboard youngcart5 menu_list_update.php cross site scripting

  ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in gnuboard youngcart5 up to 5.4.5.1. Affected is an unknown function of the file adm/menu_list_update.php. The manipulation of the argument me_link leads to cross site s…

  Gnuboard youngcart5
  Dec 28, 2022