Skip to content
OpenAdvisories

Archive

8 July 2022

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.5

    mat2 before 0.13.0 allows directory traversal during the ZIP archive cleaning process.

    mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive.

  • High 8.8

    Known vulnerable to account takeover via host header injection attack in v1.3.1

    Known v1.3.1+2020120201 was discovered to allow attackers to perform an account takeover via a host header injection attack.

  • High 7.8

    Use After Free in vim/vim

    Use After Free in GitHub repository vim/vim prior to 9.0.0046.

  • High 7.8

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.

  • High 7.8

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044.