Skip to content
OpenAdvisories

Archive

17 February 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Unscored —
    CVE-2022-22916 Public exploit EPSS 39%

    O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.

  • High 7.8
    CVE-2021-44731 Public exploit

    snapd could be made to escalate privileges and run programs as administrator

    A race condition existed in the snapd 2.54.2 snap-confine binary when preparing a private mount namespace for a snap. This could allow a local attacker to gain root privileges by bind-mounting their own contents inside the snap's private mount namespace and c…