CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- mirantis lensCommand injection in Lens causes arbitrary shell command execution when malicious custom helm chart configuration provided6.3 Medium
- mirantis lensLack of websocket authentication in Lens causes remote code execution when visiting a malicious website8.3 High
- dst-admin project dst-adminAn issue was discovered in dst-admin v1.3.0. The product has an unauthorized arbitrary file...7.5 High
- nikhil-bhalerao laundry booking management systemLaundry Booking Management System 1.0 (Latest) and previous versions are affected by a remote...9.8 Critical
dashmapcrates.ioUnsoundness in `dashmap` referencesNo score- golang sshx/crypto/ssh vulnerable to panic via malformed packets7.5 High
- formpipe lasernetFormpipe Lasernet before 9.13.3 allows file inclusion in Client Web Services (either by an...9.8 Critical
- ultimaker 3 firmware, s3 firmware, s5 firmware +2 moreIn Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3...8.8 High
- ultimaker 3 firmware, s3 firmware, s5 firmware +2 moreIn Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3...7.1 High
clamavDebianclamav - security updateNo score- systemd, fedoraproject fedora, redhat enterprise linux +3 more +5 moreA flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial...5.5 Medium
- gpacA heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which...7.8 High
- gpacA heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the...7.8 High
- struktur libde265, debian linux +1 moreAn issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a...5.5 Medium
- struktur libde265, debian linux +1 moreA stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function...5.5 Medium
- struktur libde265, debian linux +1 moreThere is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1...7.8 High
- struktur libde265, debian linux +1 moreAn issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when...5.5 Medium
- struktur libde265, debian linux +1 moreAn Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to a SEGV in slice.cc.6.5 Medium
- smarty, debian linux, fedoraproject fedora +2 moreSandbox Escape by math function in smarty8.1 High
- publishpress capabilities, unknown publishpress capabilities pro, publishpress capabilities – user role access, editor permissions, admin menus +2 morePublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise9.8 Critical
- smarty, debian linux, fedoraproject fedora +2 moreAccess to restricted PHP code by dynamic static class access in smarty8.8 High
- online thesis archiving system project thesis archiving systemSourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can...9.8 Critical
- accu-time maximus firmwareAccu-Time Systems MAXIMUS 1.0 telnet service suffers from a remote buffer overflow which causes...7.5 High
- kentico xperienceKentico Xperience 13.0.44 allows XSS via an XML document to the Media Libraries subsystem.6.1 Medium
- qxip homer webappQXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736...9.8 Critical
- silabs 700 series firmware, uzb-7 +1 moreZ-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate...6.5 Medium
faker.jsnpmfaker.js 6.6.6 is broken and the developer has wiped the original GitHub repoNo score- dnslib project dnslibdnslib has DNS reply verification issue7.5 High
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an...8.8 High
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file...7.8 High
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive...6.5 Medium
libssh2OSS-FuzzNull-dereference READ in session_startupNo scoreassimpOSS-FuzzHeap-buffer-overflow in Assimp::IOSystem2Unzip::opendiskNo score- coreftp core ftpCoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated...6.5 Medium
- trend micro worry-free business security, trend micro, inc. micro worry-free business security, trendmicro apex one +1 more +3 moreA link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on...7.1 High
- trend micro apex one, trendmicro worry-free business security, worry-free business security services +2 moreA origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a...7.8 High
- trend micro apex one, worry-free business security, trend micro, inc. micro worry-free business security +1 more +3 moreA unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business...7.8 High
- trend micro apex one, worry-free business security, trend micro, inc. micro worry-free business security +1 more +3 moreA link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS)...7.8 High
- trend micro apex one, worry-free business security, trend micro, inc. micro worry-free business security +1 more +3 moreA link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and...7.1 High
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 moreaddBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morebuild_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 moredefineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.9.8 Critical
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morelookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.8.8 High
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morenextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.8.8 High
- libexpat project libexpat, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +4 more +6 morestoreAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.8.8 High
- nvidia nemoPath Traversal in nemo-toolkit2.0 Low
- digitalbazaar forgenode-forge ASN.1 OID Integer Truncation6.3 Medium
- digitalbazaar forgeImproper Verification of Cryptographic Signature in `node-forge`5.3 Medium
node-forgenpmPrototype Pollution in node-forge util.setPath APINo score- digitalbazaar forgeForge: Denial of service in TLS record processing via call stack exhaustion7.5 High
- Show moreLoading…