Skip to content
OpenAdvisories

Archive

20 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /20 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

51 results · Feed

  • Medium 6.1
    CVE-2021-32854

    textAngular text editor vulnerable to Cross-site Scripting

    textAngular is a text editor for Angular.js. Version 1.5.16 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. There are no k…

    npm textangular textangular npm
  • Medium 6.1
    CVE-2021-32856

    Microweber vulnerable to Cross-site Scripting

    Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload int…

    microweber microweber microweber/microweber Packagist
  • Medium 6.1
    CVE-2021-32850

    jQuery MiniColors vulnerable to Cross-site Scripting

    jQuery MiniColors is a color picker built on jQuery. Prior to version 2.3.6, jQuery MiniColors is prone to cross-site scripting when handling untrusted color names. This issue is patched in version 2.3.6.

    npm @claviska/jquery-minicolors @claviska/jquery-minicolors jquery-minicolors Debian Ubuntu npm
  • Medium 6.1
    CVE-2021-32851

    jQuery MiniColors vulnerable to Cross-site Scripting

    Mind-elixir is a free, open source mind map core. Prior to version 0.18.1, mind-elixir is prone to cross-site scripting when handling untrusted menus. This issue is patched in version 0.18.1

    npm mind-elixir mind-elixir npm
  • Medium 6.1
    CVE-2021-32858

    esdoc-publish-html-plugin vulnerable to Cross-site Scripting

    esdoc-publish-html-plugin is a plugin for the document maintenance software ESDoc. TheHTML sanitizer in esdoc-publish-html-plugin 1.1.2 and prior can be bypassed which may lead to cross-site scripting (XSS) issues. There are no known patches for this issue.

    esdoc esdoc-publish-html-plugin
  • High 7.1
    CVE-2021-32847

    Moby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_tx

    HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior, a malicious guest can trigger a vulnerability in the host by abusing the disk driver that may lead to the disclosure of the host memory into the v…

    moby hyperkit
  • Medium 6.1
    CVE-2021-32857

    Cockpit vulnerable to Cross-site Scripting

    Cockpit is a content management system that allows addition of content management functionality to any site. In versions 0.12.2 and prior, bad HTML sanitization in `htmleditor.js` may lead to cross-site scripting (XSS) issues. There are no known patches for t…

    microweber microweber
  • Medium 6.1
    CVE-2021-32853 Scanner template

    Erxes vulnerable to Cross-site Scripting

    Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in versions 0.22.3 and prior. This results in client-side code execution. The victim must follow a malicious link or be redirected there from malicious we…

    npm erxes erxes npm
  • High 7.5
    CVE-2021-32848

    Octobox ReDoS vulnerability

    Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807.

    octobox octobox
  • Medium 6.1
    CVE-2021-32855

    vditor vulnerable to Cross-site Scripting

    Vditor is a browser-side Markdown editor. Versions prior to 3.8.7 are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. Version 3.8.7 cont…

    npm vditor vditor npm
  • Medium 6.1
    CVE-2021-32860

    iziModal vulnerable to Cross-site Scripting

    iziModal is a modal plugin with jQuery. Versions prior to 1.6.1 are vulnerable to cross-site scripting (XSS) when handling untrusted modal titles. An attacker who is able to influence the field `title` when creating a `iziModal` instance is able to supply arb…

    npm iziModal izimodal npm