Skip to content
OpenAdvisories

Archive

3 October 2022

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Medium 5.3

    An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary serve…

  • Medium 4.3

    An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary serve…

  • Medium 5.4

    An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary serve…

  • Medium 5.3

    An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary serve…

  • Medium 6.5

    An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access ca…

  • Medium 5.3

    An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary serve…

  • Medium 6.5

    LIEF vulnerable to denial of service through segmentation fault

    A vulnerability in the LIEF::MachO::BinaryParser::init_and_parse function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file.

  • Medium 5.4

    OrchardCore - HTML Injection

    In OrchardCore rc1-11259 to v1.2.2 vulnerable to HTML injection, allow an authenticated user with an editor security role to inject a persistent HTML modal dialog component into the dashboard that will affect admin users.

  • Medium 6.5
    CVE-2022-36551 Public exploit

    Heartex - Label Studio Community Edition vulnerable to SSRF in the Data Import module

    A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the system. Furthermore, self-registration is enabled by default in…