October 11, 2022—KB5018450 (Monthly Rollup)

None None...

americanfootballmonthly.com Cross Site Scripting vulnerability OBB-2977207

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

September 13, 2022—KB5017358 (Monthly Rollup)

None None...

September 13, 2022—KB5017361 (Monthly Rollup)

None None...

Vulnerabilities fixed in Android

Google has fixed vulnerabilities in the Android operating system. A malicious person could exploit them to cause the following categories of damage: Remote code execution Administrator/Root privileges Access to sensitive data Access to system data Increased user privileges To exploit the...

CVE-2022-37183

Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...

CVE-2022-37183

Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...

CVE-2022-37183

Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...

August 9, 2022 Security update (KB5016620)

None None...

July 12, 2022—KB5015870 (Security-only update)

None None...

July 12, 2022—KB5015866 (Monthly Rollup)

None None...

June 14, 2022—KB5014748 (Monthly Rollup)

None None...

June 14, 2022—KB5014752 (Monthly Rollup)

None None...

golfmonthly.com Cross Site Scripting vulnerability OBB-2622045

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Monthly Threat Digest: April 2022

...

May 10, 2022—KB5014011 (Monthly Rollup)

None None...

May 10, 2022—KB5014017 (Monthly Rollup)

None None...

May 10, 2022—KB5014010 (Monthly Rollup)

None None...

CVE-2022-0785

The Daily Prayer Time WordPress plugin before 2022.03.01 does not sanitise and escape the month parameter before using it in a SQL statement via the getmonthlytimetable AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...

CVE-2022-0785

The Daily Prayer Time WordPress plugin before 2022.03.01 does not sanitise and escape the month parameter before using it in a SQL statement via the getmonthlytimetable AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...