Skip to content
OpenAdvisories

Archive

30 March 2022

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.8
    CVE-2022-27772 Public exploit

    Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

    spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir method. NOTE: This vulnerability only…

  • Unscored —
    CVE-2021-39749 Public exploit

    In WindowManager, there is a possible way to start non-exported and protected activities due to a missing permission ch…

  • Unscored —
    CVE-2021-3456 Public exploit

    An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman client…

  • Medium 6.8
    CVE-2022-1163 Public exploit

    Cross-site Scripting (XSS) - Stored in mineweb/minewebcms

    Cross-site Scripting (XSS) - Stored in GitHub repository mineweb/minewebcms prior to next.

  • Unscored —
    CVE-2022-24693 Public exploit

    Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily …