Skip to content
OpenAdvisories

Archive

11 March 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-44667 Public exploit

    Cross-site Scripting in Nacos

    A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters.

  • Medium 4.3
    CVE-2018-25031 Public exploit EPSS 42%

    Spoofing attack in swagger-ui

    Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was originally claimed to be r…

  • Medium 6.5
    CVE-2022-0001 Public exploit

    Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authori…