Skip to content
OpenAdvisories

Archive

28 February 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.1

    Missing Authorization in Rundeck

    Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In versions prior to 3.4.5, authenticated users could craft a request to modify or delete System or Project level Calendars, without appropriate authorization. M…

  • High 7.5

    HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling

    HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage. Fixed in 1.0.18, 1.1.12, and 1.2.6.

  • High 8.6

    Server-Side Request Forgery (SSRF) in rudloff/alltube

    Server-Side Request Forgery (SSRF) in GitHub repository rudloff/alltube prior to 3.0.2.