Skip to content
OpenAdvisories

Archive

11 July 2022

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Critical 9.1

    Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, co…

  • Critical 9.8

    LENZE: Missing password verification in authorisation procedure

    Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.

  • Critical 9.3

    ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function

    The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

  • Critical 9.3

    Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

    The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

  • Critical 9.3

    Ganga allows absolute path traversal

    The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

  • Critical 9.3

    SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

    The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.