Skip to content
OpenAdvisories

Archive

8 October 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Feed

  • Medium 6.5

    Remote Denial of Service via Tasks endpoint in fat_free_crm

    fat_free_crm is a an open source, Ruby on Rails customer relationship management platform (CRM). In versions prior to 0.20.1 an authenticated user can perform a remote Denial of Service attack against Fat Free CRM via bucket access. The vulnerability has been…

  • Medium 4.3

    Linux Kernel IPv4 fib_semantics.c fib_nh_match out-of-bounds

    A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the a…

  • Low 3.5

    SourceCodester Web-Based Student Clearance System add-student.php prepare cross site scripting

    A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been rated as problematic. Affected by this issue is the function prepare of the file /Admin/add-student.php. The manipulation leads to cross site scripting. The attack may…