Skip to content
OpenAdvisories

Archive

August 2022

Vulnerabilities first published in this month (UTC), newest first.

5 results · Clear filters · Feed

  • Medium 6.7
    CVE-2021-4178 Public exploit

    fabric8 kubernetes-client vulnerable

    A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML.

  • Medium 4.3
    CVE-2022-2846 Public exploit

    Calendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Creation to Stored XSS

    The Calendar Event Multi View WordPress plugin before 1.4.07 does not have any authorisation and CSRF checks in place when creating an event, and is also lacking sanitisation as well as escaping in some of the event fields. This could allow unauthenticated at…

  • Medium 6.1
    CVE-2022-36007 Public exploit

    Partial Path Traversal in com.github.jlangch:venice

    Venice is a Clojure inspired sandboxed Lisp dialect with excellent Java interoperability. A partial path traversal issue exists within the functions `load-file` and `load-resource`. These functions can be limited to load files from a list of load paths. Assum…

  • Medium 6.5
    CVE-2022-20361 Public exploit

    In btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key Derivation due to Weak…

  • Medium 6.2
    CVE-2022-20360 Public exploit

    In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local esca…