Skip to content
OpenAdvisories

Archive

8 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /8 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 2.0
    CVE-2022-22821

    Path Traversal in nemo-toolkit

    NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available.

    nemo-toolkit PyPI
  • Low —
    GHSA-5rrq-pxf6-6jx5

    Prototype Pollution in node-forge debug API.

    ### Impact The `forge.debug` API had a potential prototype pollution issue if called with untrusted input. The API was only used for internal debug purposes in a safe way and never documented or advertised. It is suspected that uses of this API, if any exist,…

    node-forge npm
  • Low —
    GHSA-wxgw-qj99-44c2

    Prototype Pollution in node-forge util.setPath API

    ### Impact `forge.util.setPath` had a potential prototype pollution issue if called with untrusted keys. This API was not used by forge itself. ### Patches The `forge.util.setPath` API and related functions were removed in 0.10.0. ### Workarounds Don't call `…

    node-forge npm
  • Low —
    GHSA-gf8q-jrpm-jvxq

    URL parsing in node-forge could lead to undesired behavior.

    ### Impact The regex used for the `forge.util.parseUrl` API would not properly parse certain inputs resulting in a parsed data structure that could lead to undesired behavior. ### Patches `forge.util.parseUrl` and other very old related URL APIs were removed …

    node-forge npm