29 May 2022

5 results · Feed

• Critical 9.8
  CVE-2022-31799

  Denial of service in bottle

  Bottle before 0.12.20 mishandles errors during early request binding.

  python-bottle bottle python-bottle py3-bottle Debian Ubuntu Alpine PyPI
  May 29, 2022
• Medium 6.5
  CVE-2022-24967

  Black Rainbow NIMBUS before 3.7.0 allows stored Cross-site Scripting (XSS).

  May 29, 2022
• Unscored —
  CVE-2022-31796

  libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequest…

  libjpeg libjpeg Debian Ubuntu
  May 29, 2022
• Medium 4.4
  CVE-2022-1928

  Cross-site Scripting (XSS) - Stored in go-gitea/gitea

  Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9.

  go-gitea go-gitea/gitea code.gitea.io/gitea Go
  May 29, 2022
• High 7.8
  CVE-2022-1927

  Buffer Over-read in vim/vim

  Buffer Over-read in GitHub repository vim/vim prior to 8.2.

  vim vim/vim vim vim Debian Ubuntu
  May 29, 2022