2022-04-24 - CVE Archive

CVE-2022-1452 Apr 24, 21:15 HIGH POC PATCH This Week

Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Information Disclosure Radare2 Radare

NVD GitHub

CVSS 3.1

7.1

EPSS

0.8%

CVE-2022-1451 Apr 24, 21:15 HIGH POC PATCH This Week

Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Radare2 Radare

NVD GitHub

CVSS 3.1

7.1

EPSS

0.8%

CVE-2022-1445 Apr 24, 15:15 MEDIUM POC PATCH This Month

Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5.4.3. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Snipe It Snipeitapp

NVD GitHub

CVSS 3.1

5.4

EPSS

0.8%