CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- google android, samsung mobile devices +1 moreImproper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to...4.0 Medium
- google android, samsung mobile devices +1 moreImplicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1...4.0 Medium
- google android, samsung mobile devices +1 moreIncorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically...6.1 Medium
- google android, samsung mobile devices +1 moreImproper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows...7.7 High
- google android, samsung mobile devices +1 more(Applicable to China models only) Unprotected WifiEvaluationService in TencentWifiSecurity...4.0 Medium
- google android, samsung mobile devices +1 moreUnprotected dynamic receiver in SecSettings prior to SMR Jan-2022 Release 1 allows untrusted...4.0 Medium
- google android, samsung mobile devices, samsung mobile devices +2 moreAn improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022...5.0 Medium
- fanuc r-30ia, r-30ia mate, r-30ia firmware, r-30ia mate firmware +9 more +11 moreThe FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which...7.4 High
- fanuc r-30ia, r-30ia mate, r-30ia firmware, r-30ia mate firmware +9 more +11 moreThe FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which...7.5 High
- webassembly binaryenA Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm:...5.5 Medium
- webassembly binaryenA Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm:...5.5 Medium
- webassembly binaryenA Denial of Service vulnerability exists in Binaryen 103. The program terminates with signal...5.5 Medium
- webassembly binaryenA Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple...5.5 Medium
- webassembly binaryenA Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function.5.5 Medium
- webassembly binaryenA Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm:...5.5 Medium
- partkeeprPartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when...4.3 Medium
- partkeeprPartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows...6.5 Medium
- agoric realms-shimSandbox Bypass9.8 Critical
- eggjs extend2Prototype Pollution7.3 High
- agoric realms-shimSandbox Bypass9.8 Critical
- fastlinemedia beaver builderIn Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection...5.3 Medium
- fastlinemedia beaver themerIn Beaver Themer, attackers can bypass conditional logic controls (for hiding content) when...5.3 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability...8.4 High
- ibm security verify accessIBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to...3.1 Low
- ibm security verify accessIBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive version information...5.3 Medium
- ibm security verify accessIBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic...5.9 Medium
- ibm security verify accessIBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting. This...3.0 Low
- ibm security verify accessIBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain...2.7 Low
- soketiDenial of Service in soketi7.5 High
- chocobozzz chocobozzz/peertube, framasoft peertube +1 moreImproper Access Control in chocobozzz/peertube5.3 Medium
- chocobozzz chocobozzz/peertube, framasoft peertube +1 moreServer-Side Request Forgery (SSRF) in chocobozzz/peertube4.8 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...8.8 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...6.5 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...7.5 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...4.8 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...5.4 Medium
- aeon labs zw090-a, samsung sth-eth-200, silabs uzb-7 +5 more +7 moreZ-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited...6.5 Medium
- aeon labs zw090-a, fibaro fgwpb-111, silicon labs 500 series +4 more +6 moreZ-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not...6.5 Medium
- schlage be468, silicon labs 500 series, silabs 500 series firmware +2 moreZ-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible...6.5 Medium
- dome dm501, jasco zw4201, linear lb60z-1 +2 more +4 moreZ-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including...8.1 High
- linear wadwaz-1, wapirz-1, silicon labs 300 series +5 more +7 moreZ-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption,...8.8 High
- sonicwall sonicosA Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote...8.8 High
- sonicwall sonicosA Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote...8.8 High
- qnap qts, quts hero, qutscloud +2 moreReflected XSS Vulnerability in TFTP4.2 Medium
ghostscriptOSS-FuzzUNKNOWN READ in gx_restrict_PatternNo scoreapache-httpdOSS-FuzzHeap-buffer-overflow in ap_is_chunkedNo scorewolfmqttOSS-FuzzUNKNOWN READ in MqttProps_FreeNo score- kubernetesANSI escape characters in kubectl output are not being filtered3.0 Low
zstdOSS-FuzzGlobal-buffer-overflow in ZSTD_compressBlock_opt0No score- python pillow, debian linux +1 moreArbitrary expression injection in Pillow9.8 Critical
- Show moreLoading…