Skip to content
OpenAdvisories

Archive

31 March 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.5

    Exposure of Sensitive Information in Pomerium

    Pomerium is an identity-aware access proxy. In distributed service mode, Pomerium's Authenticate service exposes pprof debug and prometheus metrics handlers to untrusted traffic. This can leak potentially sensitive environmental information or lead to limited…

  • Medium 4.8

    IBM Security Verify Access could allow a user, using man in the middle techniques, to obtain sensitive information or p…

  • Medium 6.1

    Cross-site Scripting (XSS) - Stored in vanessa219/vditor

    Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.13.