Archive
3 August 2022
Vulnerabilities first published on this day (UTC), newest first.
44 results · Feed
-
Unscored —
In ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are able to exploit a heap-b…
-
Unscored —
In ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to trigger a use-after-fre…
-
High 8.8
Django vulnerable to Reflected File Download attack
An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a FileResponse when the filename is der…
-
High 7.1
SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc
PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java code. The PGJDBC implementation of the `java.sql.ResultRow.refreshRow()` method is not performing escaping of column n…