Skip to content
OpenAdvisories

Archive

18 February 2022

Vulnerabilities first published on this day (UTC), newest first.

111 results · Clear filters · Feed

  • High 7.8

    Command Injection in Cobbler

    An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)

  • High 8.8
    CVE-2022-23642 Public exploit EPSS 74%

    Code Injection in Sourcegraph

    Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.37 is vulnerable to remote code execution in the `gitserver` service. The service acts as a git exec proxy, and fails to properly restrict calling `git config`. This allows an …

  • High 7.2

    Use of Hard-coded Cryptographic Key in Netmaker

    Netmaker is a platform for creating and managing virtual overlay networks using WireGuard. Prior to versions 0.8.5, 0.9.4, and 010.0, there is a hard-coded cryptographic key in the code base which can be exploited to run admin commands on a remote server if t…

  • High 7.6

    Prototype Pollution

    The package object-extend from 0.0.0 are vulnerable to Prototype Pollution via object-extend.

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader Foxi…

  • High 8.8
    CVE-2022-24355 Public exploit

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-…

  • High 8.8

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pr…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pr…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pr…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pr…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pr…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pr…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pr…

  • High 7.0

    MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows…

  • High 7.0

    MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attack…

  • High 7.0

    MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attac…

  • High 7.0

    MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allow…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.…

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  • High 7.8

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …