Skip to content
OpenAdvisories

Archive

7 May 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Feed

  • Unscored —

    Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers…

  • Medium 5.9

    Charm vulnerable to server-side request forgery (SSRF)

    A vulnerability in which attackers could forge HTTP requests to manipulate the `charm` data directory to access or delete anything on the server. This has been patched and is available in release [v0.12.1](https://github.com/charmbracelet/charm/releases/tag/v…

  • Unscored —

    In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security re…

  • High 7.3

    Use after free in append_command in vim/vim

    Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution