CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- docker desktopDocker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token...5.5 Medium
- salesagility suitecrmSuiteCRM through 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the...8.8 High
- mitre calderaAn issue was discovered in CALDERA 2.8.1. It contains multiple startup "requirements" that...8.8 High
- mitre calderaAn issue was discovered in CALDERA 2.8.1. It contains multiple reflected, stored, and self XSS...6.1 Medium
- jenkins debian package builder, jenkins project debian package builder plugin +1 moreAgent-to-controller security bypass in Jenkins Debian Package Builder Plugin8.8 High
- jenkins conjur secrets, jenkins project conjur secrets plugin +1 moreAgent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows retrieving all credentials7.5 High
- jenkins conjur secrets, jenkins project conjur secrets plugin +1 moreAgent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows decrypting secrets7.5 High
- jenkins batch task, jenkins project batch task plugin +1 moreCSRF vulnerability in Jenkins batch task Plugin5.4 Medium
- jenkins publish over ssh, jenkins project publish over ssh plugin +1 morePassword stored in plain text by Jenkins Publish Over SSH Plugin3.3 Low
- jenkins publish over ssh, jenkins project publish over ssh plugin +1 morePath traversal vulnerability in Jenkins Publish Over SSH Plugin4.3 Medium
- jenkins publish over ssh, jenkins project publish over ssh plugin +1 moreMissing permission check in Jenkins Publish Over SSH Plugin6.5 Medium
- jenkins publish over ssh, jenkins project publish over ssh plugin +1 moreCSRF vulnerability and missing permission checks in Jenkins Publish Over SSH Plugin4.3 Medium
- jenkins publish over ssh, jenkins project publish over ssh plugin +1 moreStored XSS vulnerability in Jenkins Publish Over SSH Plugin4.8 Medium
- jenkins hashicorp vault, jenkins project hashicorp vault plugin +1 moreImproper credentials masking in Jenkins HashiCorp Vault Plugin6.5 Medium
- jenkins badge, jenkins project badge plugin +1 moreStored XSS vulnerability in Jenkins Badge Plugin5.4 Medium
- jenkins warnings next generation, jenkins project warnings next generation plugin +1 morePath Traversal in Jenkins Warnings Next Generation Plugin8.1 High
- jenkins active directory, jenkins project active directory plugin +1 moreUser passwords transmitted in plain text by Jenkins Active Directory Plugin6.5 Medium
- jenkins metrics, jenkins project metrics plugin +1 moreAccess key stored in plain text by Jenkins Metrics Plugin5.5 Medium
- jenkins ssh agent, jenkins project ssh agent plugin +1 moreMissing permission checks in SSH Agent Plugin allow enumerating credentials IDs4.3 Medium
- jenkins bitbucket branch source, jenkins project bitbucket branch source plugin +1 moreCross-Site Request Forgery in Jenkins Bitbucket Branch Source Plugin7.1 High
- jenkins bitbucket branch source, jenkins project bitbucket branch source plugin +1 moreIncorrect Permission Assignment for Critical Resource in Jenkins Bitbucket Branch Source Plugin4.3 Medium
- jenkins docker commons, jenkins project docker commons plugin +1 moreOS command execution vulnerability in Jenkins Docker Commons Plugin8.8 High
- jenkins credentials binding, jenkins project credentials binding plugin +1 moreIncorrect Permission Assignment for Critical Resource in Jenkins Credentials Binding Plugin4.3 Medium
- jenkins matrix project, jenkins project matrix project plugin, oracle communications cloud native core automated test suite +2 moreStored XSS vulnerability in Matrix Project Plugin5.4 Medium
- jenkins, oracle communications cloud native core automated test suite +1 moreCross-Site Request Forgery in Jenkins4.3 Medium
- mitre calderaAn issue was discovered in CALDERA 2.9.0. The Debrief plugin receives base64 encoded "SVG"...8.8 High
- mitre calderaAn issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized...8.8 High
- mitre calderaAn issue was discovered in CALDERA 2.8.1. It does not properly segregate user privileges,...8.1 High
- tibco data virtualization, data virtualization for aws marketplace +1 moreTIBCO Data Virtualization Arbitrary File Download vulnerability6.3 Medium
- socket engine.ioUncaught Exception in engine.io7.5 High
- bytecode viewer project viewer, konloch bytecode-viewer +1 moreBytecode Viewer v2.10.x Zip Slip9.9 Critical
- lorensbergs connect2** DISPUTED ** Lorensbergs Connect2 3.13.7647.20190 is affected by an XSS vulnerability....4.8 Medium
- chronoengine chronoforumsChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files.2.7 Low
- chronoengine chronoforumsChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.5.3 Medium
- unisys clearpath mcp tcp\/ip networking servicesUnisys ClearPath MCP TCP/IP Networking Services 59.1, 60.0, and 62.0 has an Infinite Loop.7.5 High
- palo alto networks cortex xdr agentCortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability7.8 High
- palo alto networks cortex xdr agentCortex XDR Agent: Unintended Program Execution When Using Live Terminal Session6.7 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: File Information Exposure Vulnerability When Generating Support File5.0 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Local Arbitrary File Deletion Vulnerability6.1 Medium
- iresturant project iresturantMartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field...5.4 Medium
- printable staff id card creator system project staff id card creator systemIn Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database...9.8 Critical
- zohocorp manageengine o365 manager plusZoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file...7.8 High
- zohocorp log360, manageengine cloud security plus +1 moreZoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the...8.8 High
- crater-invoice crater-invoice/crater, craterapp crater +1 moreUnrestricted Upload of File with Dangerous Type in crater-invoice/crater8.8 High
- zohocorp manageengine m365 manager plusZoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when...7.2 High
- django-cms django cmsCross-site Scripting in django-cms5.4 Medium
- debian linux, fedoraproject fedora, gnome gdkpixbuf +2 moreGNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the...8.8 High
- weseek growi, weseek/growi +1 moreAuthorization Bypass Through User-Controlled Key in weseek/growi6.3 Medium
- orchardcms orchardcms/orchardcore, orchardcore +1 moreCross-site Scripting (XSS) - Stored in orchardcms/orchardcore7.4 High
c-blosc2OSS-FuzzHeap-buffer-overflow in LZ4_decompress_safeNo score- Show moreLoading…