Archive
8 June 2022
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
Critical 9.8
Backdoor in api-res-py
api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.
-
Critical 9.8
The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current …
-
Critical 10.0
Path Traversal in gogs/gogs
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.
-
Critical 9.1
Read beyond bounds in ap_strcmp_match()
Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party…
-
Critical 9.6
Code Injection in jgraph/drawio
Code Injection in GitHub repository jgraph/drawio prior to 19.0.2.
-
Critical 9.9
ITarian - Any user with a valid session token can create and execute agent procedures and bypass mandatory approvals
The ITarian platform (SAAS / on-premise) offers the possibility to run code on agents via a function called procedures. It is possible to require a mandatory approval process. Due to a vulnerability in the approval process, present in any version prior to 6.3…