CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 moreDayByDay CRM - Missing Authorization when Viewing Appointments4.3 Medium
lmdbcrates.iolmdb is unmaintained, use lmdb-rkv insteadNo score- tcpdump tcpsliceUse after free in tcpslice triggers AddressSanitizer, no other confirmed impact.5.5 Medium
- fortinet fortimailA exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9...5.3 Medium
- beyondtrust appliance base softwareBeyondTrust Secure Remote Access Base Software through 6.0.1 allows an attacker to achieve full...6.1 Medium
- google llc dart sdk, dart software development kit +1 moreBidirectional Override in Dart SDK4.6 Medium
- atlassian jira server, jira data center +1 moreAffected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers...6.5 Medium
pcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::IPv6AuthenticationHeader::getExtensionLenNo scorec-blosc2OSS-FuzzMemcpy-param-overlap in ZSTD_createDDictNo score- gpacA Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a...5.5 Medium
- gpacA Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which...5.5 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware...7.8 High
- netskopeNetskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability....7.8 High
- convosStored XSS via attribute in convos7.6 High
- convosStored XSS via html file upload in convos7.6 High
- nette latteSandbox bypass in Latte templates8.2 High
- codeigniter, codeigniter4 +1 moreDeserialization of Untrusted Data in Codeigniter47.7 High
- aaron-junker usoc, useful simple open-source cms project simple open-source cms +1 moreSQL Injection via search in USOC9.1 Critical
- aaron-junker usoc, useful simple open-source cms project simple open-source cms +1 moreSQL Injection in USOC10.0 Critical
- oroinc oroplatform, platform +1 moreJavaScript Prototype Pollution in oro/platform8.8 High
- discourseDenial of Service in discourse6.8 Medium
- linuxfoundation spinnakerImproper Access Control in spinnaker10.0 Critical
- fluxbbFluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability.6.1 Medium
- oroinc oroplatform, platform +1 moreXSS vulnerability in oro/platform6.9 Medium
- facebook whatsapp business for android, whatsapp business for ios, whatsapp desktop +4 more +6 moreThe calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior...9.8 Critical
- linuxfoundation spinnakerPath Traversal in spinnaker6.6 Medium
- transloadit transloadit/uppy, uppy +1 moreServer-Side Request Forgery (SSRF) in transloadit/uppy8.2 High
- netristv netristv/ws-scrcpy, ws scrcpy project scrcpy +1 moreExternal Control of File Name or Path in netristv/ws-scrcpy7.5 High
- google android, mediatek, inc. mt6580, mt6630, mt6735, mt6737, mt6739, mt6750s, mt6753, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6771, mt6779, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6885, mt6889, mt6893, mt7662t, mt7663, mt7668, mt7915, mt7920, mt7921, mt7922, mt8163, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8183, mt8185, mt8195, mt8321, mt8362a, mt8362b, mt8365, mt8385, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn Bluetooth, there is a possible application crash due to bluetooth flooding a device with...6.5 Medium
- google android, mediatek, inc. mt6580, mt6630, mt6735, mt6737, mt6739, mt6750s, mt6753, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6763, mt6771, mt7662t, mt7663, mt7668, mt8163, mt8167, mt8167s, mt8173, mt8183, mt8321, mt8362a, mt8362b, mt8385, mt8765, mt8788 +1 moreIn Bluetooth, there is a possible link disconnection due to bluetooth does not properly handle a...6.5 Medium
- google android, mediatek, inc. mt6580, mt6630, mt6735, mt6737, mt6739, mt6750s, mt6753, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6763, mt6771, mt7662t, mt7663, mt7668, mt8163, mt8167, mt8167s, mt8173, mt8183, mt8321, mt8362a, mt8362b, mt8385, mt8765, mt8788 +1 moreIn Bluetooth, there is a possible application crash due to bluetooth does not properly handle the...6.5 Medium
- google android, mediatek, inc. mt6739, mt6768, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This...5.5 Medium
- google android, mediatek, inc. mt6595, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6753, mt6755, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6758, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8768 +1 moreIn libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check....5.5 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8167, mt8168, mt8173, mt8362a, mt8365 +1 moreIn seninf driver, there is a possible information disclosure due to uninitialized data. This...4.4 Medium
- google android, mediatek, inc. mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8185, mt8789, mt8791, mt8797 +1 moreIn vow driver, there is a possible memory corruption due to improper locking. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6739, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6893, mt8169 +1 moreIn kd_camera_hw driver, there is a possible information disclosure due to uninitialized data....4.4 Medium
- google android, mediatek, inc. mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8183, mt8185, mt8385, mt8788, mt8789 +1 moreIn vow driver, there is a possible memory corruption due to improper input validation. This could...6.7 Medium
- google android, mediatek, inc. mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8185, mt8789, mt8791, mt8797 +1 moreIn vow driver, there is a possible memory corruption due to a race condition. This could lead to...6.4 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6750, mt6750s, mt6753, mt6755, mt6757, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8127, mt8163, mt8167, mt8168, mt8169, mt8173, mt8183, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8765, mt8788 +1 moreIn mdp driver, there is a possible memory corruption due to an integer overflow. This could lead...7.8 High
- mediatek mt7615 firmware, mt7622 firmware +1 moreIn wifi driver, there is a possible system crash due to a missing validation check. This could...6.5 Medium
- starwind command center, san\&nas +1 moreStarWind SAN & NAS build 1578 and StarWind Command Center Build 6864 Update Manager allows...9.8 Critical
- controlup real-time agentAn unauthenticated Named Pipe channel in Controlup Real-Time Agent (cuAgent.exe) before 8.5 potentially allows an attacker to run OS commands via the ProcessActionRequest WCF method.7.8 High
- redhat libvirt, fedoraproject fedora, netapp ontap select deploy administration utility +2 moreA flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself...6.5 Medium
- nltk, nltk nltk/nltk, debian linux +1 more +3 moreInefficient Regular Expression Complexity in nltk/nltk7.5 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary...7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary...7.8 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary...7.8 High
- controlup agentA hardcoded key in ControlUp Real-Time Agent (cuAgent.exe) before 8.2.5 may allow a potential attacker to run OS commands via a WCF channel.7.2 High
- totolink ex200 firmwareThe downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command...9.8 Critical
- fortinet fortiosA download of code without integrity check vulnerability in the "execute restore src-vis" command...3.3 Low
- Show moreLoading…