Archive
10 February 2022
Vulnerabilities first published on this day (UTC), newest first.
48 results · Feed
-
Unscored —
Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service.
-
Unscored —
Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component.
-
High 8.8
ThinkPHP Remote Code Execution (RCE) vulnerability
A Remote Code Execution (RCE) vulnerability exists in ThinkPHP 3.x.x via value[_filename] in index.php, which could let a malicious user obtain server control privileges.
-
Unscored —
In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with no…
-
Unscored —
The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending…
-
Critical 9.8
ifme - Insufficient Session Expiration
In Ifme, versions 1.0.0 to v.7.33.2 don’t properly invalidate a user’s session even after the user initiated logout. It makes it possible for an attacker to reuse the admin cookies either via local/network access or by other hypothetical attacks.
-
Critical 9.8
Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
-
High 8.4
Use of Out-of-range Pointer Offset in vim/vim
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.