Archive
3 April 2022
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Medium 5.5
usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.
-
Medium 4.3
Improper Authorization in janeczku/calibre-web
Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16.
-
Medium 4.3
Improper Access Control in janeczku/calibre-web
Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16.
-
Medium 6.8CVE-2022-28379 EPSS 71%
jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion.
-
Medium 6.1
Cross-site Scripting in craftcms/cms
Craft CMS before 3.7.29 allows XSS.
-
Medium 6.3
tildearrow Furnace FUR to VGM Converter stack-based overflow
A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-intera…
-
Medium 4.3
LibTIFF tiff2ps resource consumption
A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction.…