CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
KernelLinuxbinder: fix async_free_space accounting for empty parcelsNo scoreKernelLinuxsctp: use call_rcu to free endpointNo scoreKernelLinuxnet: fix use-after-free in tw_timer_handlerNo scoreKernelLinuxNFC: st21nfca: Fix memory leak in device probe and removeNo scoreKernelLinuxInput: appletouch - initialize work before device registrationNo scoreKernelLinuxsctp: use call_rcu to free endpointNo scoreKernelLinuxi2c: validate user data in compat ioctlNo scoreKernelLinuxInput: appletouch - initialize work before device registrationNo scoreKernelLinuxbinder: fix async_free_space accounting for empty parcelsNo scoreKernelLinuxusb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.No scoreKernelLinuxNFC: st21nfca: Fix memory leak in device probe and removeNo scoreKernelLinuxnet: fix use-after-free in tw_timer_handlerNo scoreKernelLinuxInput: appletouch - initialize work before device registrationNo scoreKernelLinuxusb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.No scoreKernelLinuxsctp: use call_rcu to free endpointNo scoreKernelLinuxNFC: st21nfca: Fix memory leak in device probe and removeNo scoreKernelLinuxnet: fix use-after-free in tw_timer_handlerNo scoreKernelLinuxbinder: fix async_free_space accounting for empty parcelsNo scoreKernelLinuxusb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.No scoreKernelLinuxnet: fix use-after-free in tw_timer_handlerNo scoreKernelLinuxInput: appletouch - initialize work before device registrationNo scoreKernelLinuxusb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.No scoreKernelLinuxInput: appletouch - initialize work before device registrationNo scoreKernelLinuxnet: fix use-after-free in tw_timer_handlerNo score- follow-redirects follow-redirects/follow-redirects, follow-redirects project follow-redirects, siemens sinec ins +2 moreExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 High
- zohocorp manageengine applications managerA vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build...8.8 High
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreImproper Validation of Specified Quantity in Input in dolibarr/dolibarr4.3 Medium
colorsnpmInfinite loop causing Denial of Service in colorsNo score- wow-company wpcalc, unknown wpcalc – create any online calculators +1 moreWPcalc <= 2.1 - Authenticated SQL Injection8.8 High
- wow-company wp coder, unknown wp coder – add custom html, css and js code +1 moreWP Coder < 2.5.2 - RFI leading to RCE via CSRF8.8 High
- wow-company button generator, unknown button generator – easily button builder +1 moreButton Generator < 2.3.3 - RFI leading to RCE via CSRF8.8 High
- wow-company modal window, unknown modal window – create popup modal window +1 moreModal Window < 5.2.2 - RFI leading to RCE via CSRF8.8 High
- unknown 10web social photo feed, 10web 10websocial +1 more10Web Social Photo Feed < 1.4.29 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- pluginus woocommerce currency switcher, unknown woocs – currency switcher for woocommerce. professional and free multi currency plugin – pay in selected currency +1 moreWOOCS < 1.3.7.3 - Reflected Cross-Site Scripting6.1 Medium
- posimyth the plus addons for elementor, unknown the plus addons for elementor - pro +1 moreThe Plus Addons for Elementor Pro < 5.0.7 - Unauthenticated SQL Injection9.8 Critical
- posimyth the plus addons for elementor, unknown the plus addons for elementor - pro +1 moreThe Plus Addons for Elementor Pro < 5.0.7 - Sensitive Data Disclosure7.5 High
- metagauss registrationmagic, unknown registrationmagic – custom registration forms, user registration and user login plugin +1 moreRegistrationMagic < 5.0.1.6 - Admin+ SQL Injection7.2 High
- sismics teedy, docs +1 moreTeedy - Stored Cross-Site Scripting (XSS) in Tag Name9.0 Critical
- sismics teedy, docs +1 moreTeedy - Reflected Cross-Site Scripting (XSS) in the Search Functionality9.6 Critical
- directusDirectus - Stored Cross-Site Scripting (XSS) in Profile Avatar Image5.4 Medium
- directusDirectus - Stored Cross-Site Scripting (XSS) via SVG File Upload5.4 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreUse After Free in vim/vim6.8 Medium
- atlassian jira service management server, jira service management, jira service management data center +2 moreAffected versions of Atlassian Jira Service Management Server and Data Center allow authenticated...4.3 Medium
- atlassian jira service management server, jira service management, jira service management data center +2 moreAffected versions of Atlassian Jira Service Management Server and Data Center allow authenticated...4.3 Medium
- apache dubboDubbo Hessian cause RCE when parse error9.8 Critical
- phoronix-test-suite phoronix-test-suite/phoronix-test-suite, fedoraproject fedora, phoronix-media phoronix test suite +2 moreCross-site Scripting (XSS) - Stored in phoronix-test-suite/phoronix-test-suite5.2 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreHeap-based Buffer Overflow in vim/vim6.8 Medium
- nocodbNocoDB - CSV Injection in User Management8.0 High
- nocodbNocoDB - Observable Discrepancy in the password-reset feature5.3 Medium
- mirantis container runtimeMemory Leak in Mirantis Container Runtime (MCR) running in FIPS mode causes a Denial of Service5.3 Medium
- Show moreLoading…