Archive
21 March 2022
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
High 8.8
A post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated attacker to execute cod…
-
High 7.5
Improper Input Validation in guzzlehttp/psr7
guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions prior to 1.8.4 and 2.1.1 are vulnerable to improper header parsing. An attacker could sneak in a new line character and pass untrusted values. The issue is patched in 1.8.4 and 2.1.1. There are current…
-
High 8.8CVE-2022-25766 EPSS 35%
Remote Code Execution (RCE)
The package ungit before 1.5.20 are vulnerable to Remote Code Execution (RCE) via argument injection. The issue occurs when calling the /api/fetch endpoint. User controlled values (remote and ref) are passed to the git fetch command. By injecting some git opt…
-
High 7.5
The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by imp…
-
High 8.8
Untrusted Search Path in PNPM
PNPM v6.15.1 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute PNPM commands in a directory containing malicious content. This vulnerability occurs when the application is…