Skip to content
OpenAdvisories

Archive

12 April 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2022-28213 Public exploit EPSS 12%

    When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does …

  • Critical 9.8
    CVE-2021-31805 Public exploit Scanner template EPSS 85%

    Forced OGNL evaluation, when evaluated on raw not validated user input in tag attributes, may lead to RCE.

    The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to 2.5.29, still some of the tag’s attributes could perform a double evaluation if a developer applied forced OGNL evaluation by using the %{...} syntax. Using forced OGNL evaluatio…

  • Critical 9.8
    CVE-2022-28346 Public exploit EPSS 19%

    SQL Injection in Django

    An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the pass…

  • Medium 6.0
    CVE-2022-24765 Public exploit

    Uncontrolled search for the Git directory in Git for Windows

    Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder `C:\.git`, …