Skip to content
OpenAdvisories

Archive

11 February 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.8
    CVE-2021-4102 Exploited

    Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corr…

    KEV Dec 15, 2021
  • High 8.4
    CVE-2022-0185 Exploited Public exploit EPSS 25%

    A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functi…

    KEV Aug 21, 2024
  • Critical 9.8
    CVE-2022-24112 Exploited Public exploit Scanner template EPSS 96%

    apisix/batch-requests plugin allows overwriting the X-REAL-IP header

    An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was changed or the port of A…

    KEV Aug 25, 2022