Skip to content
OpenAdvisories

Archive

12 October 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.4
    CVE-2022-39299 Public exploit

    Signature bypass via multiple root elements in Passport-SAML

    Passport-SAML is a SAML 2.0 authentication provider for Passport, the Node.js authentication library. A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession…

  • Medium 4.3
    CVE-2022-3464 Public exploit

    puppyCMS settings.php cross site scripting

    A vulnerability classified as problematic has been found in puppyCMS up to 5.1. This affects an unknown part of the file /admin/settings.php. The manipulation of the argument site_name leads to cross site scripting. It is possible to initiate the attack remot…

  • High 8.4
    CVE-2022-22077 Public exploit

    Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile