29 August 2022

11 results · Clear filters · Feed

• Medium 5.4
  CVE-2021-38934

  IBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows …

  IBM Engineering Test Management
  Aug 29, 2022
• Medium 6.2
  CVE-2022-21385

  A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Ba…

  Oracle Oracle Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  Aug 29, 2022
• Medium 5.9
  CVE-2022-3035

  Cross-site Scripting (XSS) - Stored in snipe/snipe-it

  Cross-site Scripting (XSS) - Stored in GitHub repository snipe/snipe-it prior to v6.0.11.

  snipe snipe/snipe-it snipe/snipe-it Packagist
  Aug 29, 2022
• Medium 5.9
  CVE-2022-36037

  Cross-site scripting (XSS) from dynamic options in the multiselect field in Kirby

  kirby is a content management system (CMS) that adapts to many different projects and helps you build your own ideal interface. Cross-site scripting (XSS) is a type of vulnerability that allows execution of any kind of JavaScript code inside the Panel session…

  getkirby kirby getkirby/cms Packagist
  Aug 29, 2022
• Medium 5.9
  CVE-2022-27558

  HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability.

  HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking.

  HCL Software HCL iNotes
  Aug 29, 2022
• Medium 6.1
  CVE-2022-27547

  HCL iNotes is susceptible to a link to non-existent domain vulnerability.

  HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc.

  HCL Software HCL iNotes
  Aug 29, 2022
• Medium 4.9
  CVE-2022-0718

  python-oslo-utils has improper password parsing

  A flaw was found in python-oslo-utils. Due to improper parsing, passwords with a double quote ( " ) in them cause incorrect masking in debug logs, causing any part of the password after the double quote to be plaintext.

  python-oslo.utils oslo-utils python-oslo.utils Debian Ubuntu PyPI
  Aug 29, 2022
• Medium 4.9
  CVE-2022-31677

  Pinniped Supervisor Insufficient Session Expiration vulnerability

  An Insufficient Session Expiration issue was discovered in the Pinniped Supervisor (before v0.19.0). A user authenticating to Kubernetes clusters via the Pinniped Supervisor could potentially use their access token to continue their session beyond what proper…

  go.pinniped.dev Go
  Aug 29, 2022
• Medium 4.8
  CVE-2022-37059

  Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel

  Cross Site Scripting (XSS) in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field

  intelliants/subrion Packagist
  Aug 29, 2022
• Medium 6.1
  CVE-2022-36033

  jsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled

  jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly sanitize HTML including `javascript:` URL expressions, which could allow XSS attacks when a reader subsequently clicks that l…

  jhy jsoup org.jsoup:jsoup jsoup Debian Ubuntu Azure Linux Maven
  Aug 29, 2022
• Medium 5.5
  CVE-2022-2953

  LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a …

  LibTIFF LibTIFF tiff tiff Debian Azure Linux Alpine
  Aug 29, 2022