CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- python pillow, debian linux +1 moreOut-of-bounds Read in Pillow6.5 Medium
- python pillow, debian linux +1 moreImproper Initialization in Pillow6.5 Medium
- gpacA Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function,...5.5 Medium
- gpacA Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which...5.5 Medium
- gpacA Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function.5.5 Medium
- gpacA Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf_isom_box_size function, which could...5.5 Medium
- gpacGPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service (context...5.5 Medium
- google protobuf-java, google-protobuf, google-protobuf [jruby gem] +5 more +7 moreDenial of Service of protobuf-java parsing procedure7.5 High
- h2database h2, debian linux, oracle communications cloud native core policy +2 moreRCE in H2 Console9.8 Critical
- pmmp pocketmine-mpPocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin Data8.7 High
- pmmp pocketmine-mpPocketMine-MP before 3.26.5 and 4.0.5 Input Validation via Book Pages7.1 High
- gerapyArbitrary command execution in Gerapy8.8 High
- wordpress, debian linux, wordpress wordpress-develop +2 moreStored XSS in WordPress8.0 High
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreAuthenticated Object Injection in Multisites in WordPress6.6 Medium
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreSQL injection in WordPress7.4 High
- wordpress, debian linux, fedoraproject fedora +1 more +3 moreSQL injection in WordPress8.0 High
- practo insta hmsInsta HMS before 12.4.10 is vulnerable to XSS because of improper validation of user-supplied...6.1 Medium
- keycloakImproper Authorization in Keycloak8.8 High
org.powernukkit:powernukkitMavenRemote code injection, Improper Input Validation and Uncontrolled Recursion in Log4j library10.0 Criticalgithub.com/keep-network/keep-ecdsaGoIncorrect validation of parties IDs leaks secret keys in Secret-sharing schemeNo score- apache avroPossible DOS vulnerabilities in C# Avro SDK7.5 High
- bookstackapp bookstack, bookstackapp/bookstack +1 moreImproper Access Control in bookstackapp/bookstack4.3 Medium
- vim, vim vim/vim, apple mac os x +1 more +3 moreOut-of-bounds Read in vim/vim7.1 High
- vehicle service management system project service management systemAn Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management...7.2 High
- vehicle service management system project service management systemAn Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management...4.8 Medium
- vehicle service management system project service management systemA Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0...4.8 Medium
- vehicle service management system project service management systemIn Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full...9.8 Critical
- bluditA Stored Cross Site Scripting (XSS) vulnerability exists in Bludit 3.13.1 via the About Plugin in...5.4 Medium
- bluditA Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in...5.4 Medium
- vehicle service management system project service management systemA Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0...4.8 Medium
- vehicle service management system project service management systemA Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0...4.8 Medium
- vehicle service management system project service management systemA Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0...4.8 Medium
- vehicle service management system project service management systemA Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0...4.8 Medium
- vehicle service management system project service management systemA Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service...4.8 Medium
- vehicle service management system project service management systemA Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service...4.8 Medium
- vehicle service management system project service management systemA Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1...7.2 High
- vehicle service management system project service management systemSourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker...8.8 High
- vehicle service management system project service management systemA Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0...4.8 Medium
- libmingIn libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check...6.5 Medium
- libmingIn libming 0.4.8, a memory exhaustion vulnerability exist in the function cws2fws in util/main.c....6.5 Medium
- pac4jPac4j token validation bypass if OpenID Connect provider supports none algorithm7.5 High
- apache kylinHardcoded credentials7.5 High
- apache kylinOverly broad CORS configuration7.5 High
- apache kylinCommand injection9.8 Critical
- apache kylinMysql JDBC Connector Deserialize RCE6.5 Medium
- apache kylinApache Kylin unsafe class loading9.8 Critical
- apache kylinImproper Access Control to Streaming Coordinator & SSRF7.5 High
- emlogCross-site scripting (XSS) vulnerability in index.php in emlog version <= pro-1.0.7 allows remote...6.1 Medium
- kalkitech sync2000-m1 firmware, sync2000-m2 firmware, sync2000-m4 firmware +17 more +19 moreA security vulnerability originally reported in the SYNC2101 product, and applicable to specific...8.1 High
- naviwebs navigate cmsAn arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigate_download...7.5 High
- Show moreLoading…