Skip to content
OpenAdvisories

Archive

8 June 2022

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Critical 9.8

    Backdoor in api-res-py

    api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.

  • Critical 9.8

    The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current …

  • Critical 10.0

    Path Traversal in gogs/gogs

    Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.

  • Critical 9.1

    Read beyond bounds in ap_strcmp_match()

    Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party…

  • Critical 9.6

    Code Injection in jgraph/drawio

    Code Injection in GitHub repository jgraph/drawio prior to 19.0.2.

  • Critical 9.9

    ITarian - Any user with a valid session token can create and execute agent procedures and bypass mandatory approvals

    The ITarian platform (SAAS / on-premise) offers the possibility to run code on agents via a function called procedures. It is possible to require a mandatory approval process. Due to a vulnerability in the approval process, present in any version prior to 6.3…