CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- huawei harmonyosPassword vault has a External Control of System or Configuration Setting vulnerability.Successful...7.5 High
- huawei harmonyosHwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this...7.5 High
- huawei harmonyosChanglian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this...7.5 High
- huawei harmonyosLocation-related APIs exists a Race Condition vulnerability.Successful exploitation of this...8.1 High
- huawei harmonyosPackageManagerService has a Permissions, Privileges, and Access Controls vulnerability ...5.3 Medium
- huawei harmonyosHwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability...9.8 Critical
- huawei harmonyosArbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability ...7.5 High
- huawei harmonyosArbitrary file has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability ...7.5 High
- huawei harmonyosPCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of...9.1 Critical
- huawei harmonyosHilinksvc service exists a Data Processing Errors vulnerability .Successful exploitation of this...7.5 High
- huawei emui, magic ui +1 moreThere is a Configuration defects in Smartphone.Successful exploitation of this vulnerability may...9.8 Critical
- huawei emui, magic ui +1 moreThere is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability...9.8 Critical
- zohocorp manageengine adselfservice plusManageEngine ADSelfService Plus below build 6116 stores the password policy file for each domain...4.3 Medium
- zohocorp manageengine adselfservice plusManageEngine ADSelfService Plus below build 6116 contains an observable response discrepancy in...5.3 Medium
- dhrystone project dhrystoneA NULL pointer dereference in the main() function dhry_1.c of dhrystone 2.1 causes a denial of...7.5 High
- openwhyd, openwhyd openwhyd/openwhyd +1 moreImproper Authorization in openwhyd/openwhyd8.6 High
- asus rt-ac52u b1 firmwareInvalid input sanitizing leads to reflected Cross Site Scripting (XSS) in ASUS RT-AC52U_B1 3.0.0...6.1 Medium
- telesquare tlr-2005ksh firmwareTLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled...9.8 Critical
- booking calendar project calendar, unknown booking calendar +1 moreBooking Calendar < 8.9.2 - Reflected Cross-Site Scripting6.1 Medium
- e-dynamics events made easyEvents Made Easy < 2.2.36 - Subscriber+ SQL Injection8.8 High
- ideabox powerpack addons for elementorPowerPack Addons for Elementor < 2.6.2 - Reflected Cross-Site Scripting6.1 Medium
- optimocha speed booster pack, unknown speed booster pack ⚡ pagespeed optimization suite +1 moreSpeed Booster Pack < 4.3.3.1 - Admin+ SQL Injection7.2 High
- unknown updraftplus wordpress backup plugin, updraftplus +1 moreUpdraftPlus < 1.16.66 - Reflected Cross-Site Scripting6.1 Medium
- unknown omgf | host google fonts locally, ffw optimize my google fonts +1 moreOMGF < 4.5.12 - Admin+ Arbitrary Folder Deletion via Path Traversal4.9 Medium
- daanvandenbergh caos | host google analytics locally, daan complete analytics optimization suite +1 moreCAOS < 4.1.9 - Admin+ Arbitrary Folder Deletion via Path Traversal4.9 Medium
- premio chaty, chaty pro, unknown floating chat widget pro - chaty pro +1 more +3 moreChaty < 2.8.3 - Reflected Cross-Site Scripting6.1 Medium
- booster for woocommerce, pluggabl booster for woocommerce +1 moreBooster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in Product XML Feeds Module6.1 Medium
- booster for woocommerce, pluggabl booster for woocommerce +1 moreBooster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in General Module6.1 Medium
- booster for woocommerce, pluggabl booster for woocommerce +1 moreBooster for Woocommerce < 5.4.9 - Reflected Cross-Site Scripting in PDF Invoicing Module6.1 Medium
- unknown woocommerce pdf invoices & packing slips, wpovernight woocommerce pdf invoices\& packing slips +1 moreWooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site Scripting4.8 Medium
- geminilabs site reviewsSite Reviews < 5.17.3 - Unauthenticated Stored Cross-Site Scripting6.1 Medium
- litespeedtech litespeed cacheLiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS6.1 Medium
- litespeedtech litespeed cacheLiteSpeed Cache < 4.4.4 - Admin+ Reflected Cross-Site Scripting4.8 Medium
- stars rating project rating, unknown stars rating +1 moreStars Rating < 3.5.1 - Comments Denial of Service7.5 High
- rich-web tab, unknown tab – accordion, faq +1 moreTab - Accordion, FAQ < 1.3.2 - Unauthenticated AJAX Calls7.5 High
- mlcalc mortgage calculator / loan calculator, mortgage calculator\/loan calculator +1 moreMortgage Calculator / Loan Calculator < 1.5.17 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- unknown download monitorDownload Monitor < 4.4.5 - Admin+ SQL Injection7.2 High
- wptravelengine wp travel engine, unknown wp travel engine – travel and tour booking plugin +1 moreWP Travel Engine < 5.3.1 - Editor+ Stored Cross-Site Scripting5.4 Medium
- opmantek open-auditAn information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0. The vulnerability...6.5 Medium
- sun & moon rise co., ltd. shockwall, sun moon jingyao network computer terminal protection system firmware +1 moreSUN & MOON RISE CO., LTD. Shockwall - Improper Authentication8.0 High
- sun & moon rise co., ltd. shockwall, smr shenwang endpoint protection security system +1 moreSUN & MOON RISE CO., LTD. Shockwall - Improper Input Validation3.5 Low
- asus rt-ax56u, rt-ax56u firmware +1 moreASUS RT-AX56U Router - Stack-based buffer overflow8.0 High
- qualcomm, inc. bluecore, qualcomm csr8510 a10 firmware, csr8811 a12 firmware +2 morePossible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +194 more +196 moreAn out of bound memory access can occur due to improper validation of number of frames being...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8017 firmware, apq8064au firmware +139 more +141 moreImproper validation of LLM utility timers availability can lead to denial of service in...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon wearables, qualcomm qca6390 firmware, qca6391 firmware +70 more +72 morePossible out of bound read due to lack of domain input validation while processing APK close...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +237 more +239 morePossible buffer overflow due to lack of buffer length check when segmented WMI command is...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, qualcomm ar6003 firmware, ar8035 firmware +74 more +76 morePossible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto,...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +101 more +103 morePossible buffer overflow due to lack of range check while processing a DIAG command for COEX...7.8 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qca6391 firmware, qcm6490 firmware +17 more +19 morePossible denial of service due to improper handling of debug register trap from user applications...7.1 High
- Show moreLoading…