Skip to content
OpenAdvisories

Archive

6 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /6 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    GHSA-3qpm-h9ch-px3c

    Remote code injection, Improper Input Validation and Uncontrolled Recursion in Log4j library

    ### Summary The version used of Log4j, the library used for logging by PowerNukkit, is subject to a remote code execution vulnerability via the ldap JNDI parser. It's well detailed at [CVE-2021-44228](https://github.com/advisories/GHSA-jfh8-c2jp-5v3q) and CVE…

    org.powernukkit:powernukkit Maven
  • Critical —
    GHSA-gp6j-vx54-5pmf

    Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme

    # Summary In the threshold signature scheme, participants start by dividing secrets into shares using a secret sharing scheme. The Verifiable Secret Sharing scheme generates shares from the user’s IDs but does not properly validate them. Using a malicious ID …

    github.com/keep-network/keep-ecdsa Go