CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
c-blosc2OSS-FuzzHeap-buffer-overflow in ndlz8_decompressNo score- jenkins configuration as code, jenkins project configuration as code plugin +1 moreObservable Discrepancy and Observable Timing Discrepancy in Jenkins Configuration as Code Plugin5.3 Medium
- jenkins mailer, jenkins project mailer plugin, oracle communications cloud native core automated test suite +2 moreIncorrect Permission Assignment for Critical Resource in Jenkins Mailer Plugin4.3 Medium
- jenkins mailer, jenkins project mailer plugin, oracle communications cloud native core automated test suite +2 moreCross-Site Request Forgery in Jenkins Mailer Plugin4.3 Medium
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreMissing Authorization in snipe/snipe-it6.3 Medium
- debian linux, flatpak, fedoraproject fedora +1 more +3 morePermissions granted to applications can be hidden from the user at install time8.2 High
- gpacA Segmentation fault casued by heap use after free vulnerability exists in Gpac through 1.0.1 via...5.5 Medium
- gpacA Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1...5.5 Medium
- gpacA Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2...5.5 Medium
- gpacA Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via...5.5 Medium
- gpacA Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using...5.5 Medium
- gpacA null pointer deference vulnerability exists in gpac through 1.0.1 via the naludmx_parse_nal_avc...5.5 Medium
- gpacA heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get...7.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMalicious websites could have confused Firefox into showing the wrong origin when asking to...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreAfter accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreSecuritypolicyviolation events could have leaked cross-origin information for frame-ancestors...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen navigating from inside an iframe while requesting fullscreen access, an attacker-controlled...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen inserting text while in edit mode, some characters might have lead to out-of-bounds memory...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen resizing a popup while requesting fullscreen access, the popup would have become unable to...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreCertain network request objects were freed too early when releasing a network request handle....8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMalicious websites could have tricked users into accepting launching a program to handle an...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreApplying a CSS filter effect could have accessed out of bounds memory. This could have lead to a...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreConstructing audio sinks could have lead to a race condition when playing audio files and closing...7.5 High
- keystonejs keystone, keystonejs/keystone +1 moreCross-site Scripting (XSS) - Reflected in keystonejs/keystone7.1 High
- apache guacamoleImproper validation of SAML responses8.8 High
- apache guacamolePrivate tunnel identifier may be included in the non-private details of active connections6.5 Medium
- authzed spicedbLookup operations do not take into account wildcards in SpiceDB8.1 High
- linux kernelnf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local...5.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability6.1 Medium
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 21 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution Vulnerability9.0 Critical
- microsoft windows 10 version 1607, windows 10 +1 moreRemote Desktop Licensing Diagnoser Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreWindows Resilient File System (ReFS) Remote Code Execution Vulnerability6.4 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreWindows Resilient File System (ReFS) Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreWindows Resilient File System (ReFS) Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreWindows Resilient File System (ReFS) Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreWindows Resilient File System (ReFS) Remote Code Execution Vulnerability6.8 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreWindows Resilient File System (ReFS) Remote Code Execution Vulnerability6.8 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability6.1 Medium
- microsoft dynamics 365, dynamics 365 customer engagement v9.0 +1 moreMicrosoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability7.6 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability4.2 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability4.2 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability2.5 Low
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +19 more +21 moreWindows Resilient File System (ReFS) Remote Code Execution Vulnerability6.3 Medium
- microsoft windows 7, windows 7 service pack 1, windows server 2008 service pack 2 +5 more +7 moreWindows BackupKey Remote Protocol Security Feature Bypass Vulnerability5.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWorkstation Service Remote Protocol Security Feature Bypass Vulnerability5.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreRemote Procedure Call Runtime Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 20h2, windows 10 version 21h1, windows 10 version 21h2 +6 more +8 moreWindows Defender Credential Guard Security Feature Bypass Vulnerability4.4 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Kerberos Elevation of Privilege Vulnerability8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 moreWindows User Profile Service Elevation of Privilege Vulnerability7.0 High
- Show moreLoading…