Skip to content
OpenAdvisories

Archive

10 November 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low 2.6

    SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do

    An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Module for SUSE Manager Server 4.3, SUSE Manager Server…

  • Low 2.7

    Nomad Event Stream Subscriber Using a Token with TTL Receives Updates Until Garbage Collected

    HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2.

  • Low 3.8

    wasmtime_trap_code C API function has out of bounds write vulnerability

    Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's C API implementation where the definition of the `wasmtime_trap_code` does not match its declared signature in the `wasmtime/trap.h` header file. This discr…

  • Low 2.6

    Tauri Filesystem Scope can be Partially Bypassed

    Tauri is a framework for building binaries for all major desktop platforms. In versions prior to 1.0.7 and 1.1.2, Tauri is vulnerable to an Incorrectly-Resolved Name. Due to incorrect escaping of special characters in paths selected via the file dialog and dr…