Skip to content
OpenAdvisories

Archive

3 February 2022

Vulnerabilities first published on this day (UTC), newest first.

45 results · Feed

  • Unscored —

    An issue was discovered in HddPassword in Insyde InsydeH2O with kernel 5.1 before 05.16.23, 5.2 before 05.26.23, 5.3 be…

  • Unscored —

    An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that a…

  • Unscored —

    A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI …

  • High 7.5
    CVE-2022-23833 EPSS 50%

    Infinite Loop in Django

    An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.

  • Medium 6.1
    CVE-2022-22818 Public exploit

    Cross-site Scripting in Django

    The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context. This may lead to XSS.