Skip to content
OpenAdvisories

Archive

14 April 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2022-24853 Public exploit

    File system exposure in Metabase

    Metabase is an open source business intelligence and analytics application. Metabase has a proxy to load arbitrary URLs for JSON maps as part of our GeoJSON support. While we do validation to not return contents of arbitrary URLs, there is a case where a part…

  • Medium 6.1
    CVE-2022-1257 Public exploit

    Improper Verification of Cryptographic Signature by McAfee Agent

    Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database fil…