Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU79967 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-40577	CWE-79	Low	No	No	-	25.08.2023	SB2023082505 SB2024012403 SB2024021614 and 5 more
#VU69691 - Use of Password Hash Instead of Password for Authentication CVE-2022-46146	CWE-836	Low	No	No	-	29.11.2022	SB2022112926 SB2022113012 SB2023022044 and 33 more
#VU68390 - Resource exhaustion CVE-2022-41715	CWE-400	Medium	No	No	-	18.10.2022	SB2022101833 SB2022101834 SB2022102005 and 113 more
#VU65355 - Incorrect Regular Expression CVE-2020-7753	CWE-185	Medium	No	No	-	15.07.2022	SB2020102724 SB2022071510 SB2023062230 and 12 more
#VU64404 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-43815	CWE-22	Low	No	No	-	15.06.2022	SB2021121022 SB2022062026 SB2022102094 and 8 more
#VU64034 - Improper Control of Generation of Code ('Code Injection') CVE-2021-3918	CWE-94	High	No	No	-	07.06.2022	SB2021111302 SB2022060836 SB2022071504 and 45 more
#VU62361 - Improper Control of Generation of Code ('Code Injection') CVE-2021-43138	CWE-94	Medium	No	No	-	15.04.2022	SB2022041532 SB2022041533 SB2022062103 and 33 more
#VU61669 - Exposure of sensitive information to an unauthorized actor CVE-2022-0155	CWE-200	Low	No	No	-	28.03.2022	SB2022032840 SB2022032843 SB2022071505 and 32 more
#VU58647 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-43798	CWE-22	High	Public exploit available	Exploited	-	08.12.2021	SB2021120803 SB2022062026 SB2022102094 and 7 more
#VU57967 - Improper input validation CVE-2021-3807	CWE-20	Medium	No	No	-	05.11.2021	SB2021110513 SB2021112603 SB2022042257 and 51 more