Archive
7 May 2022
Vulnerabilities first published on this day (UTC), newest first.
4 results · Feed
-
Unscored —
Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers…
-
Medium 5.9
Charm vulnerable to server-side request forgery (SSRF)
A vulnerability in which attackers could forge HTTP requests to manipulate the `charm` data directory to access or delete anything on the server. This has been patched and is available in release [v0.12.1](https://github.com/charmbracelet/charm/releases/tag/v…
-
Unscored —
In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security re…
-
High 7.3
Use after free in append_command in vim/vim
Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution