CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- apache pluto, apache software foundation portals +1 moreXSS vulnerability in the MVCBean JSP portlet maven archetype6.1 Medium
- apache pluto, apache software foundation portals +1 moreXSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet6.1 Medium
- apache pluto, apache software foundation portals +1 moreXSS in V3 Demo Portlet6.1 Medium
- lighttpd, debian linux +1 moreIn lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward...5.9 Medium
- honda civic 2012The keyfob subsystem in Honda Civic 2012 vehicles allows a replay attack for unlocking. This is...5.3 Medium
- digitalbazaar digitalbazaar/forge, forge +1 moreOpen Redirect in digitalbazaar/forge5.3 Medium
- zabbix zabbix-agent2The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation...9.8 Critical
- roundcube, debian linux +1 moreRoundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted...6.1 Medium
- uriparser project uriparser, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreAn issue was discovered in uriparser before 0.9.6. It performs invalid free operations in...5.5 Medium
- uriparser project uriparser, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 moreAn issue was discovered in uriparser before 0.9.6. It performs invalid free operations in...5.5 Medium
- libexpat project libexpat, netapp active iq unified manager, clustered data ontap +8 more +10 moreIn doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for...8.1 High
- hoppscotch, hoppscotch hoppscotch/hoppscotch +1 moreCross-site Scripting in hoppscotch/hoppscotch8.0 High
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow remote attackers with...7.2 High
libarchiveOSS-FuzzHeap-use-after-free in read_data_compressedNo scorednsmasqOSS-FuzzHeap-buffer-overflow in print_macNo scorednsmasqOSS-FuzzHeap-buffer-overflow in dhcp_replyNo scorednsmasqOSS-FuzzHeap-buffer-overflow in check_bad_addressNo scorednsmasqOSS-FuzzHeap-buffer-overflow in extract_nameNo score- gpacA Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a...5.5 Medium
- gpacA Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gf_list_count function, which...5.5 Medium
- gpacA Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the _fseeko function, which causes a...5.5 Medium
- gpacA Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64_box_new function, which...5.5 Medium
- gpacA Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplace_shift_moov_meta_offsets...5.5 Medium
- gpacA Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shift_chunk_offsets.part function...5.5 Medium
- sphinxsearch sphinx, debian linux +1 moreSphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in...7.5 High
- mit scratch-svg-rendererCross-site Scripting in Scratch-Svg-Renderer6.1 Medium
- github readme stats project readme statsGithub Read Me Stats commit 3c7220e4f7144f6cb068fd433c774f6db47ccb95 was discovered to contain a...6.1 Medium
- insyde insydeh2o, siemens ruggedcom ape1808 - bios, simatic field pg m5 +16 more +18 moreAn issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2...8.2 High
- insyde insydeh2oAn issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5...9.8 Critical
- insyde insydeh2o, siemens ruggedcom ape1808 - bios, simatic field pg m5 +16 more +18 moreAn issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2...8.2 High
- insyde insydeh2o, siemens ruggedcom ape1808 - bios, simatic field pg m5 +16 more +18 moreAn issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2...8.2 High
- insyde insydeh2oAn issue was discovered in SdLegacySmm in Insyde InsydeH2O with kernel 5.1 before 05.15.11, 5.2...7.5 High
- gnome gnome-shellLinux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation...5.5 Medium
- typelevel jawnHash collision in typelevel jawn5.9 Medium
- hdfgroup hdf5A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the...5.5 Medium
- hdfgroup hdf5A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 at at hdf5/src/H5Eint.c,...5.5 Medium
- hdfgroup hdf5A heap-based buffer overflow vulnerability exists in HDF5 1.13.1-1 via H5F_addr_decode_len in ...5.5 Medium
- shopwareInsufficient Session Expiration in shopware3.5 Low
- shopwareOpen redirect in shopware6.8 Medium
- discourseExposure of whisper participants in discourse4.3 Medium
- containerd, fedoraproject fedora +1 moreImproper Preservation of Permissions in containerd8.0 High
- pluginsglpi addressingRemote Command Execution vulnerability9.9 Critical
drupal/simple_oauthPackagistThis module enables you to implement OAuth 2.0 authentication for Drupal. The module doesn't sufficiently verify client secret keys for "confidential" OAuth 2.0 clients when using certain grant types.…No scoredrupal/super_loginPackagistThis module enables you to login with an email address. The module doesn't sufficiently check if a user account is active when using email login. This vulnerability is mitigated by the fact that an at…No score- ibm powervm hypervisorIBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM...8.6 High
- libsndfile project libsndfile, debian linux +1 moreAn out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is...7.1 High
- daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 moreDayByDay CRM - Missing Authorization when Changing Password8.8 High
- daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 moreDayByDay CRM - Weak Password Requirements in Update User7.5 High
- daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 moreDayByDay CRM - Stored Cross-Site Scripting (XSS) in Task Title5.4 Medium
- daybydaycrm daybyday crm, bottelet daybydaycrm, flarepoint +2 moreDayByDay CRM - Missing Authorization when Viewing Absences4.3 Medium
- Show moreLoading…