Skip to content
OpenAdvisories

Archive

30 March 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.1

    HTTP Request Smuggling in puma

    Puma is a simple, fast, multi-threaded, parallel HTTP 1.1 server for Ruby/Rack applications. When using Puma behind a proxy that does not properly validate that the incoming HTTP request matches the RFC7230 standard, Puma and the frontend proxy may disagree o…

  • Critical 9.1

    Tekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to root by uploading a ma…

  • Critical 9.8

    [20220307] - Core - Variable Tampering on JInput $_REQUEST data

    An issue was discovered in Joomla! 4.0.0 through 4.1.0. Under specific circumstances, JInput pollutes method-specific input bags with $_REQUEST data.