Skip to content
OpenAdvisories

Archive

20 January 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2022-0219 Public exploit

    Improper Restriction of XML External Entity Reference in skylot/jadx

    Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2.

  • Medium 5.5
    CVE-2021-34600 Public exploit

    Telenot complex: Insecure AES Key Generation

    Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used in the NFC tags used for local authorization of users. This may lead to total loss of trustworthiness of the installation.