Skip to content
OpenAdvisories

Archive

8 March 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.5
    CVE-2022-24713 Public exploit EPSS 14%

    Regular expression denial of service in Rust's regex crate

    regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those (tunable) mitigations…

  • High 8.5
    CVE-2022-24715 Public exploit EPSS 15%

    Arbitrary code execution for authenticated users in Icinga Web 2

    Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Authenticated users, with access to the configuration, can create SSH resource files in unintended directories, leading to the execution of arbitrary code. This iss…

  • High 7.5
    CVE-2022-24716 Public exploit Scanner template EPSS 89%

    Path traversal in Icinga Web 2

    Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database…