Skip to content
OpenAdvisories

Archive

31 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /31 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.1
    CVE-2022-24802

    Prototype Pollution in deepmerge-ts

    deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. deepmerge-ts is vulnerable to Prototype Pollution via file deepmerge.ts, function defaultMergeRecords(). This issue has been patched in version 4.0.2. There ar…

    RebeccaStevens deepmerge-ts deepmerge-ts npm
  • High 7.5
    CVE-2022-24798

    Insufficient password hash filtering in some IRRd queries and exports

    Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. IRRd did not always filter password hashes in query responses relating to `mntner` objects and database exports. This may have allowed adversaries…

    irrdnet irrd irrd PyPI
  • High 8.1
    CVE-2022-24791

    Use after free in Wasmtime

    Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch …

    bytecodealliance wasmtime thunderbird mozjs38 Ubuntu crates.io
  • High 7.5
    CVE-2022-24794

    Open Redirect in express-openid-connect

    Express OpenID Connect is an Express JS middleware implementing sign on for Express web apps using OpenID Connect. Users of the `requiresAuth` middleware, either directly or through the default `authRequired` option, are vulnerable to an Open Redirect when th…

    auth0 express-openid-connect express-openid-connect npm
  • High 7.5
    CVE-2022-24758

    Insertion of Sensitive Information into Log File affects Jupyter Notebook

    The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are re…

    jupyter notebook notebook jupyter-notebook Debian Ubuntu Alpine PyPI
  • High 7.5
    CVE-2021-37517

    Access Control vulnerability in Dolibarr

    An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • High 8.8
    CVE-2021-36625

    SQL Injection in Dolibarr

    An SQL Injection vulnerability exists in Dolibarr ERP/CRM 13.0.2 (fixed version is 14.0.0) via a POST request to the country_id parameter in an UPDATE statement.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • High 8.8
    CVE-2021-34257

    Unrestricted Upload of File with Dangerous Type in WPanel 4

    Multiple Remote Code Execution (RCE) vulnerabilities exist in WPanel 4 4.3.1 and below via a malicious PHP file upload to (1) Dashboard's Avatar image, (2) Posts Folder image, (3) Pages Folder image and (4) Gallery Folder image.

    wpanel/wpanel4-cms Packagist
  • High 7.5
    CVE-2022-1176

    Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat

    Loose comparison causes IDOR on multiple endpoints in GitHub repository livehelperchat/livehelperchat prior to 3.96.

    LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  • High 8.7
    CVE-2022-1191

    SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat

    SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96.

    LiveHelperChat livehelperchat/livehelperchat