2 March 2022

6 results · Clear filters · Feed

• High 7.5
  CVE-2021-38266

  Liferay Portal and Liferay DXP fails to properly import users from LDAP

  The Portal Security module in Liferay Portal 7.2.1 and earlier, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17 and 7.2 before fix pack 5 does not correctly import users from LDAP, which allows remote attackers to prevent a legitimate user from…

  com.liferay.portal:release.dxp.bom com.liferay:com.liferay.portal.security.ldap.impl Maven
  Mar 2, 2022
• High 8.1
  CVE-2022-24722

  Cross-site Scripting in view_component

  VIewComponent is a framework for building view components in Ruby on Rails. Versions prior to 2.31.2 and 2.49.1 contain a cross-site scripting vulnerability that has the potential to impact anyone using translations with the view_component gem. Data received …

  GitHub view_component view_component RubyGems
  Mar 2, 2022
• High 7.2
  CVE-2022-0819 EPSS 43%

  Code Injection in dolibarr/dolibarr

  Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1.

  Dolibarr dolibarr/dolibarr dolibarr dolibarr/dolibarr Ubuntu Packagist
  Mar 2, 2022
• High 7.8
  CVE-2022-22301

  An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in FortiAP-C console 5.4.0 …

  Fortinet Fortinet FortiAP-C Network devices
  Mar 2, 2022
• High 8.8
  CVE-2022-0577

  Exposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapy

  Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1.

  scrapy scrapy/scrapy scrapy python-scrapy Debian Ubuntu PyPI
  Mar 2, 2022
• High 8.3
  CVE-2022-0824 Public exploit Scanner template EPSS 97%

  Improper Access Control to Remote Code Execution in webmin/webmin

  Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.

  Webmin webmin/webmin
  Mar 2, 2022