Skip to content
OpenAdvisories

Archive

2 February 2022

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 6.3

    IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker t…

  • Medium 4.3

    IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to ex…

  • Medium 5.3

    Heap-buffer-overflow in jhead

    JHEAD is a simple command line tool for displaying and some manipulation of EXIF header data embedded in Jpeg images from digital cameras. In affected versions there is a heap-buffer-overflow on jhead-3.04/jpgfile.c:285 ReadJpegSections. Crafted jpeg images c…

  • Medium 6.3

    Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticat…

  • Medium 6.1
    CVE-2021-43062 Public exploit Scanner template EPSS 13%

    A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.…

  • Medium 4.2

    An improper access control vulnerability [CWE-284] in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.…