Skip to main content
CVE-2022-4584 Dec 17, 13:15 HIGH POC This Week

A vulnerability was found in Axiomatic Bento4 up to 1.6.0-639. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Heap Overflow Bento4 Axiosys
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
1.0%
CVE-2022-4583 Dec 17, 13:15 HIGH POC PATCH This Week

A vulnerability was found in jLEMS. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Java Path Traversal Jlems
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
0.8%
CVE-2022-4567 Dec 17, 06:15 HIGH POC PATCH This Week

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.0.2. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Openemr Open Emr
NVD GitHub
CVSS 3.1
8.1
EPSS
0.6%
CVE-2022-23531 Dec 17, 00:15 HIGH PATCH This Week

GuardDog is a CLI tool to identify malicious PyPI packages. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Path Traversal Guarddog Datadoghq
NVD GitHub
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-23488 Dec 17, 01:15 HIGH PATCH This Week

BigBlueButton is an open source web conferencing system. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Bigbluebutton
NVD GitHub
CVSS 3.1
7.5
EPSS
0.6%
CVE-2022-4572 Dec 17, 02:15 HIGH PATCH This Week

A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Ubi Reader
NVD GitHub VulDB
CVSS 3.1
7.1
EPSS
0.5%
CVE-2022-4591 Dec 17, 19:15 MEDIUM PATCH This Month

A vulnerability was found in mschaef toto up to 1.4.20. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Toto
NVD GitHub VulDB
CVSS 3.1
6.1
EPSS
0.5%
CVE-2022-4590 Dec 17, 19:15 MEDIUM PATCH This Month

A vulnerability was found in mschaef toto up to 1.4.20. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Toto
NVD GitHub VulDB
CVSS 3.1
6.1
EPSS
0.5%
CVE-2022-4589 Dec 17, 13:15 MEDIUM PATCH This Month

A vulnerability has been found in cyface Terms and Conditions Module up to 2.0.9 and classified as problematic. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Open Redirect vulnerability could allow attackers to redirect users to malicious websites via URL manipulation.

Open Redirect Django Terms And Conditions
NVD GitHub VulDB
CVSS 3.1
6.1
EPSS
0.5%
CVE-2022-4588 Dec 17, 13:15 MEDIUM PATCH This Month

A vulnerability, which was classified as problematic, was found in Boston Sleep slice up to 84.1.x. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Slice
NVD GitHub VulDB
CVSS 3.1
6.1
EPSS
0.5%
CVE-2022-4586 Dec 17, 13:15 MEDIUM PATCH This Month

A vulnerability classified as problematic was found in Opencaching Deutschland oc-server3. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Oc Server3 Oc Server3 Project
NVD GitHub VulDB
CVSS 3.1
6.1
EPSS
0.5%
CVE-2022-4585 Dec 17, 13:15 MEDIUM PATCH This Month

A vulnerability classified as problematic has been found in Opencaching Deutschland oc-server3. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Oc Server3 Oc Server3 Project
NVD GitHub VulDB
CVSS 3.1
6.1
EPSS
0.5%
CVE-2022-4582 Dec 17, 13:15 MEDIUM PATCH This Month

A vulnerability was found in starter-public-edition-4 up to 4.6.10. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Starter Public Edition 4
NVD GitHub VulDB
CVSS 3.1
6.1
EPSS
0.5%
CVE-2022-4581 Dec 17, 13:15 MEDIUM PATCH This Month

A vulnerability was found in 1j01 mind-map and classified as problematic.coffee. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Mind Map
NVD GitHub VulDB
CVSS 3.1
6.1
EPSS
0.4%
CVE-2022-4587 Dec 17, 13:15 MEDIUM PATCH This Month

A vulnerability, which was classified as problematic, has been found in Opencaching Deutschland oc-server3.tpl of the component Login Page. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

XSS Oc Server3 Oc Server3 Project
NVD GitHub VulDB
CVSS 3.1
5.4
EPSS
0.5%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy