Skip to content
OpenAdvisories

Archive

14 November 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2022-0324 Public exploit

    Buffer Overflow in Dhcp6relay in Software for Open Networking in the Cloud (SONiC)

    There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a c…

  • High 8.8
    CVE-2022-40127 Public exploit Scanner template EPSS 86%

    Apache Airflow <2.4.0 has an RCE in a bash example

    A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.