Skip to content
OpenAdvisories

Archive

3 April 2022

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Medium 5.5

    usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.

  • Medium 4.3

    Improper Authorization in janeczku/calibre-web

    Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16.

  • Medium 4.3

    Improper Access Control in janeczku/calibre-web

    Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16.

  • Medium 6.8
    CVE-2022-28379 EPSS 71%

    jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion.

  • Medium 6.1

    Cross-site Scripting in craftcms/cms

    Craft CMS before 3.7.29 allows XSS.

  • Medium 6.3

    tildearrow Furnace FUR to VGM Converter stack-based overflow

    A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-intera…

  • Medium 4.3

    LibTIFF tiff2ps resource consumption

    A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction.…