Skip to content
OpenAdvisories

Archive

21 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /21 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.7
    CVE-2022-31679

    Spring Data REST can expose hidden entity attributes

    Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsupported versions, if an attacker knows about the structure of the underlying domain model, they can craft HTTP requests …

    org.springframework.data:spring-data-rest-core Maven
  • Low —
    GHSA-28r9-pq4c-wp3c

    personnummer/rust vulnerable to Improper Input Validation

    This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severi…

    personnummer crates.io
  • Low 3.3
    CVE-2019-5641

    Rapid7 InsightVM Information Disclosure after Logout

    Rapid7 InsightVM suffers from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the Inspect Element browser feature to remove the login panel and view the details available in the last webpage visi…

    Rapid7 InsightVM
  • Low 3.7
    CVE-2022-2872

    Unrestricted Upload of File with Dangerous Type in octoprint/octoprint

    Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3.

    OctoPrint octoprint/octoprint octoprint PyPI