Skip to content
OpenAdvisories

Archive

31 December 2022

Vulnerabilities first published on this day (UTC), newest first.

← November 2022 2022 / December /31 January 2023 →
  1. 147
  2. 294
  3. 311
  4. 412
  5. 5107
  6. 695
  7. 779
  8. 8101
  9. 935
  10. 106
  11. 119
  12. 1288
  13. 13222
  14. 1488
  15. 15109
  16. 16189
  17. 1723
  18. 1836
  19. 19104
  20. 2085
  21. 2189
  22. 22218
  23. 23106
  24. 2414
  25. 2545
  26. 2688
  27. 2781
  28. 2855
  29. 2920
  30. 30102
  31. 3113
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.3
    CVE-2018-25061

    rgb2hex redos

    A vulnerability was found in rgb2hex up to 0.1.5. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Upgrading to version 0.1…

    rgb2hex npm
  • Medium 6.3
    CVE-2017-20160

    flitto express-param fetchParams.js parameter pollution

    A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible to initiate the attac…

    flitto express-param express-param npm
  • Medium 4.3
    CVE-2014-125028

    valtech IDP Test Client main.py cross-site request forgery

    A vulnerability was found in valtech IDP Test Client and classified as problematic. Affected by this issue is some unknown functionality of the file python-flask/main.py. The manipulation leads to cross-site request forgery. The attack may be launched remotel…

    valtech IDP Test Client
  • Medium 5.5
    CVE-2017-20157

    Ariadne Component Library Url.php server-side request forgery

    A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to addre…

    Ariadne Component Library arc/web Packagist
  • Medium 5.5
    CVE-2017-20156

    Exciting Printer Argument prepare_page.rb command injection

    A vulnerability was found in Exciting Printer and classified as critical. This issue affects some unknown processing of the file lib/printer/jobs/prepare_page.rb of the component Argument Handler. The manipulation of the argument URL leads to command injectio…

    Exciting Printer
  • Medium 6.5
    CVE-2022-4868

    Improper Authorization in froxlor/froxlor

    Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.

    froxlor froxlor/froxlor froxlor/froxlor Packagist