Archive
11 March 2022
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Critical 10.0
Command Injection in Parse server
Parse Server is an open source http web server backend. In versions prior to 4.10.7 there is a Remote Code Execution (RCE) vulnerability in Parse Server. This vulnerability affects Parse Server in the default configuration with MongoDB. The main weakness that…
-
Medium 6.1CVE-2021-44667 Public exploit
Cross-site Scripting in Nacos
A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters.
-
Unscored —CVE-2022-0853 Public exploit
A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using Us…
-
Unscored —CVE-2022-23731 Public exploit
V8 javascript engine (heap vulnerability) can cause privilege escalation ,which can impact on some webOS TV models.
-
Medium 4.3
Spoofing attack in swagger-ui
Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was originally claimed to be r…
-
High 7.5CVE-2020-36518 Public exploit
Deeply nested json in jackson-databind
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
-
Medium 6.5CVE-2022-0001 Public exploit
Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authori…