Skip to content
OpenAdvisories

Archive

12 May 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.5
    CVE-2022-22970 Public exploit

    Denial of service in Spring Framework

    In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.

  • High 7.8
    CVE-2021-26258 Public exploit

    Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4.3337.0 may allow an auth…

  • High 7.5
    CVE-2022-29885 Public exploit EPSS 73%

    EncryptInterceptor does not provide complete protection on insecure networks

    The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While th…