Skip to content
OpenAdvisories

Archive

30 March 2022

Vulnerabilities first published on this day (UTC), newest first.

131 results · Feed

  • Unscored —

    SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL command…

  • Unscored —

    SQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —

    Incorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access published content.

  • Low 3.4

    A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be correctly …

  • Unscored —

    An XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. The widthheight…

  • Unscored —

    An issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the FileImporter extension mishandles t…

  • Unscored —

    An issue was discovered in Mediawiki through 1.37.1. The check for the override-antispoof permission in the AntiSpoof e…

  • Unscored —

    An issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl issue for groups expiri…

  • High 7.3

    heap buffer overflow in get_one_sourceline in vim/vim

    heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.

  • High 7.8

    Use after free in utf_ptr2char in vim/vim

    Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.

  • High 7.5

    Infinite Loop in PJSIP

    PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability that affects PJSIP users that consume PJSIP's XML parsing in their apps. Users are advised to update.…