CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- digitalbazaar forgeForge: AES-GCM authentication bypass via unvalidated tagLength option5.9 Medium
- digitalbazaar forgeForge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count7.5 High
- digitalbazaar forgeForge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store3.7 Low
- digitalbazaar forgeForge: Regular expression denial of service in PEM decoding (pem.decode)7.5 High
- libtiff, debian linux, netapp ontap select deploy administration utility +2 moreLibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations...5.5 Medium
- checkpoint endpoint securityUsers have access to the directory where the installation repair occurs. Since the MS Installer...7.8 High
- vmware spring framework, oracle communications cloud native core console, communications cloud native core service communication proxy +2 moreLog entry injection in Spring Framework4.3 Medium
- philips engage, engage software +1 moreICSMA-22-006-01 Philips Engage Software2.6 Low
- ivanti workspace controlA insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control ...5.5 Medium
- solarwinds serv-uImproper Input Validation Vulnerability in Serv-U4.3 Medium
- huawei emui, harmonyos, magic ui +2 moreThere is a Heap-based buffer overflow vulnerability with the NFC module in smartphones....9.8 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is Vulnerability of APIs being concurrently called for multiple times in...7.5 High
- huawei emui, magic ui +1 moreThere is an Integer overflow vulnerability with ACPU in smartphones. Successful exploitation of...9.8 Critical
- huawei emui, harmonyos +1 moreThe bone voice ID TA has a vulnerability in information management,Successful exploitation of...7.5 High
- huawei harmonyosThe eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreThe bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation...7.5 High
- huawei harmonyosThe eID module has a vulnerability that causes the memory to be used without being initialized...7.5 High
- huawei harmonyosThe weaver module has a vulnerability in parameter type verification,Successful exploitation of...7.5 High
- huawei harmonyosThe eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this...7.5 High
- huawei harmonyosThe eID module has a null pointer reference vulnerability. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreThe bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThe bone voice ID trusted application (TA) has a heap overflow vulnerability. Successful...9.8 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is a Null pointer dereference vulnerability in the camera module in smartphones. Successful...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Vulnerability of accessing resources using an incompatible type (type confusion) in...5.5 Medium
- huawei emui, harmonyos, magic ui +2 moreThere is a Buffer overflow vulnerability due to a boundary error with the Samba server in the...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Null pointer dereference vulnerability in the camera module in smartphones. Successful...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Buffer overflow vulnerability due to a boundary error with the Samba server in the...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful...5.3 Medium
- huawei emui, magic ui +1 moreThere is an Out-of-bounds array read vulnerability in the security storage module in smartphones....7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is an Uncontrolled resource consumption vulnerability in the display module in smartphones....7.5 High
- huawei emui, harmonyos +1 moreThe fingerprint module has a security risk of brute force cracking. Successful exploitation of...4.6 Medium
- huawei harmonyosThe distributed data service component has a vulnerability in data access control. Successful...7.5 High
- huawei harmonyosThe cellular module has a vulnerability in permission management. Successful exploitation of this...7.5 High
- huawei harmonyosHwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability...5.3 Medium
- huawei harmonyosThe Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this...8.8 High
- huawei harmonyosThe CaasKit module has a path traversal vulnerability. Successful exploitation of this...5.3 Medium
- huawei harmonyosThe Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this...8.8 High
- huawei ws318n-21 firmwareThere is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing...4.2 Medium
- samsung s assistantImproper access control vulnerability in S Assistant prior to version 7.5 allows attacker to...5.3 Medium
- samsung galaxy storeImproper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app...7.5 High
- samsung emailAbitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read...3.9 Low
- samsung bixby routinesA vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R(11.0...4.4 Medium
- samsung reminderA vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and...4.4 Medium
- samsung internetImproper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to...5.7 Medium
- samsung healthImproper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging...2.8 Low
- google android, samsung mobile devices +1 moreA missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1...5.5 Medium
- google android, samsung mobile devices +1 moreAn implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows...4.4 Medium
- google android, samsung mobile devices +1 moreKeeping sensitive data in unprotected BluetoothSettingsProvider prior to SMR Jan-2022 Release 1...4.0 Medium
- Show moreLoading…