Skip to content
OpenAdvisories

Archive

25 November 2020

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.7

    Any GLPI CalDAV calendars is read-only for every authenticated user

    GLPI stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.3, any authenticated user has read…

  • High 7.5

    Memory leak in nanopb

    Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dyn…