Skip to content
OpenAdvisories

Archive

31 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /31 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2022-21659

    Observable Response Discrepancy in Flask-AppBuilder

    Flask-AppBuilder is an application development framework, built on top of the Flask web framework. In affected versions there exists a user enumeration vulnerability. This vulnerability allows for a non authenticated user to enumerate existing accounts by tim…

    flask-appbuilder PyPI
  • Medium 5.5
    CVE-2021-23520

    Arbitrary File Write via Archive Extraction (Zip Slip)

    The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling unc…

    juce juce Debian Ubuntu
  • Medium 5.5
    CVE-2021-23521

    Link Following

    This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic link is followed outside of the target dir allowing writing a…

    juce juce Debian Ubuntu
  • Medium 4.1
    CVE-2022-0414

    Improper Validation of Specified Quantity in Input in dolibarr/dolibarr

    Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0.

    Dolibarr dolibarr/dolibarr dolibarr dolibarr/dolibarr Ubuntu Packagist