Skip to content
OpenAdvisories

Archive

5 January 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.0

    Improper Preservation of Permissions in containerd

    containerd is an open source container runtime. On installations using SELinux, such as EL8 (CentOS, RHEL), Fedora, or SUSE MicroOS, with containerd since v1.5.0-beta.0 as the backing container runtime interface (CRI), an unprivileged pod scheduled to the nod…

  • High 8.6

    IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could l…

  • High 8.8

    DayByDay CRM - Missing Authorization when Changing Password

    In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization. Any application user in the application who has update user permission enabled is able to change the password of other users, including the administrator’s. This allows the attacker to gai…

  • High 7.5

    DayByDay CRM - Weak Password Requirements in Update User

    In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionality. A user with privileges to update his password could change it to a weak password, such as those with a length of a single character. This may allo…