Skip to content
OpenAdvisories

Archive

10 November 2022

Vulnerabilities first published on this day (UTC), newest first.

45 results · Clear filters · Feed

  • Medium 5.3

    Some Deeplearning4J packages use unclaimed s3 bucket in tests and examples

    Deeplearning4J is a suite of tools for deploying and training deep learning models using the JVM. Packages org.deeplearning4j:dl4j-examples and org.deeplearning4j:platform-tests through version 1.0.0-M2.1 may use some unclaimed S3 buckets in tests in examples…

  • Medium 6.5

    Plesk Obsidian allows a CSRF attack, e.g., via the /api/v2/cli/commands REST API to change an Admin password. NOTE: Obs…

  • Medium 5.4

    An issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote authenticated users to…

  • Medium 4.2

    The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config u…

  • Medium 6.1

    mm-wiki is vulnerable to Cross-Site Scripting (XSS)

    mm-wki v0.2.1 is vulnerable to Cross Site Scripting (XSS).