Skip to content
OpenAdvisories

Archive

13 April 2022

Vulnerabilities first published on this day (UTC), newest first.

← March 2022 2022 / April /13 May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.2
    CVE-2022-24847

    Improper Input Validation in GeoServer

    GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The GeoServer security mechanism can perform an unchecked JNDI lookup, which in turn can be used to perform class deserialization and result in ar…

    geoserver geoserver org.geoserver:gs-main Maven
  • High 8.8
    CVE-2022-24845

    Integer bounds error in Vyper

    Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In affected versions, the return of `<iface>.returns_int128()` is not validated to fall within the bounds of `int128`. This issue can result in a misinterpretation of the integer va…

    vyperlang vyper vyper PyPI
  • High 7.5
    CVE-2022-24843

    Path Traversal in github.com/flipped-aurora/gin-vue-admin

    Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin 2.50 has arbitrary file read vulnerability due to a lack of parameter validation. This has been resolved in version 2.5.1.…

    flipped-aurora gin-vue-admin
  • High 8.1
    CVE-2022-24844

    SQL Injection in github.com/flipped-aurora/gin-vue-admin

    Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. The problem occurs in the following code in server/service/system/sys_auto_code_pgsql.go, which means that PostgreSQL must be used as th…

    flipped-aurora gin-vue-admin
  • High 8.3
    CVE-2022-24828

    Missing input validation can lead to command execution in composer

    Composer is a dependency manager for the PHP programming language. Integrators using Composer code to call `VcsDriver::getFileContent` can have a code injection vulnerability if the user can control the `$file` or `$identifier` argument. This leads to a vulne…

    composer composer composer/composer composer Debian Ubuntu Alpine Packagist
  • High 8.2
    CVE-2022-24818 Public exploit

    Unchecked JNDI lookups in GeoTools

    GeoTools is an open source Java library that provides tools for geospatial data. The GeoTools library has a number of data sources that can perform unchecked JNDI lookups, which in turn can be used to perform class deserialization and result in arbitrary code…

    geotools geotools
  • High 7.1
    CVE-2022-24788

    Buffer overflow in Vyper

    Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. Versions of vyper prior to 0.3.2 suffer from a potential buffer overrun. Importing a function from a JSON interface which returns `bytes` generates bytecode which does not clamp byt…

    vyperlang vyper vyper PyPI
  • High 8.8
    CVE-2022-1339

    SQL injection in ElementController.php in pimcore/pimcore

    SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data

    pimcore pimcore/pimcore pimcore/pimcore Packagist
  • High 7.8
    CVE-2015-20107 Public exploit

    In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the…

    python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine
  • High 7.8
    CVE-2022-22960 Exploited Public exploit EPSS 36%

    VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due …

    KEV Apr 15, 2022