Skip to content
OpenAdvisories

Archive

24 April 2022

Vulnerabilities first published on this day (UTC), newest first.

← March 2022 2022 / April /24 May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.1
    CVE-2022-1451

    Out-of-bounds Read in r_bin_java_constant_value_attr_new function in radareorg/radare2

    Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive informati…

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • High 7.1
    CVE-2022-1452

    Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in radareorg/radare2

    Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive inform…

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • Critical 9.0
    CVE-2022-1445

    Stored Cross Site Scripting vulnerability in the checked_out_to parameter in snipe/snipe-it

    Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is capable of stolen the user Cookie.

    snipe snipe/snipe-it snipe/snipe-it Packagist
  • Unscored —
    RUSTSEC-2022-0071

    Rusoto is unmaintained

    The maintainers of Rusoto advise that all its crates are deprecated. This includes the common crates `rusoto_core`, `rusoto_signature`, `rusoto_credential`, and service crates such as `rusoto_s3` and `rusoto_ec2`. Users should migrate to the [AWS SDK for Rust…

    rusoto_credential crates.io