Skip to content
OpenAdvisories

Archive

17 June 2022

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Critical 9.0

    A stack-based buffer overflow vulnerability exists in the BlynkConsole.h runCommand functionality of Blynk -Library v1.…

  • Critical 10.0

    A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.…

  • Critical 9.0

    Improper Neutralization of Formula Elements in a CSV File in inventree/inventree

    Improper Neutralization of Formula Elements in a CSV File in GitHub repository inventree/inventree prior to 0.7.2.

  • Critical 9.0

    Unrestricted Upload of File with Dangerous Type in inventree/inventree

    Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2.

  • Critical 9.8

    Delegate functions are missing `Send` bound

    Affected versions of this crate did not require event handlers to have `Send` bound despite there being no guarantee of them being called on any particular thread, which can potentially lead to data races and undefined behavior. The flaw was corrected in comm…

  • Critical —

    Miscomputation when performing AES encryption in rust-crypto

    The following Rust program demonstrates some strangeness in AES encryption - if you have an immutable key slice and then operate on that slice, you get different encryption output than if you operate on a copy of that key. For these functions, we expect that …