Skip to content
OpenAdvisories

Archive

20 February 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low 3.1

    Decidim has race condition in Endorsements

    Decidim is a participatory democracy framework. Starting in version 0.10.0 and prior to versions 0.26.9, 0.27.5, and 0.28.0, a race condition in the endorsement of resources (for instance, a proposal) allows a user to make more than once endorsement. To explo…

  • Low 2.5

    Totolink X6000R shadow hard-coded credentials

    A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852_B20230719. Affected by this vulnerability is an unknown functionality of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the at…

  • Low 3.3

    Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow …