CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- haloHalo CMS - Stored Cross-Site Scripting (XSS) in Article's Tag4.8 Medium
- fit2cloud haloHalo CMS - Stored Cross-Site Scripting (XSS) in Profile Image5.4 Medium
- fit2cloud haloHalo CMS - Stored Cross-Site Scripting (XSS) in Article's Title5.4 Medium
@openzeppelin/contractsnpm,@openzeppelin/contracts-upgradeablenpm +1 moreGovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behaviorNo score- dependencytrack frontend, zabbix, debian linux +1 more +3 morePossible view of the setup pages by unauthenticated users if config file already exists3.7 Low
- dependencytrack frontend, zabbix, fedoraproject fedora +2 moreStored XSS in host groups configuration window in Zabbix Frontend6.3 Medium
- zabbix, fedoraproject fedora, zabbix proxy, server +2 moreIncorrect permissions of [/var/run/zabbix] forces dac_override3.3 Low
- dependencytrack frontend, zabbix +1 moreUnsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML9.1 Critical
- trustedfirmware trusted firmware-mTrusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control. NSPE...5.9 Medium
- crowcpp crowContent Injection6.5 Medium
- crowcpp crowPath Traversal6.5 Medium
- jpressjpress v4.2.0 admin panel provides a function through which attackers can modify the template and...8.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +108 more +110 morePossible null pointer dereference due to improper validation of APE clip in Snapdragon Auto,...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm qca6390 firmware, qca6391 firmware +72 more +74 moreLack of validation for third party application accessing the service can lead to information...6.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +65 more +67 morePossible heap overflow due to lack of index validation before allocating and writing to heap...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +84 more +86 morePossible buffer overflow while printing the HARQ memory partition detail due to improper...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, qualcomm ar8035 firmware, csrb31024 firmware +84 more +86 morePossible denial of service due to improper validation of DNS response when DNS client requests...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +48 more +50 morePossible denial of service due to out of memory while processing RRC and NAS OTA message in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +108 more +110 morePossible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +56 more +58 morePossible assertion due to improper validation of symbols configured for PDCCH monitoring in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +100 more +102 moreImproper validation of memory region in Hypervisor can lead to incorrect region mapping in...9.3 Critical
- daybydaycrm daybyday, bottelet daybydaycrm +1 moreDayByDay CRM - Insufficient Session Expiration after Password Change8.8 High
- daybydaycrm daybyday, bottelet daybydaycrm +1 moreDayByDay CRM - Application-Wide Client-Side Template Injection (CSTI)5.4 Medium
- stanford corenlp, stanfordnlp stanfordnlp/corenlp +1 moreImproper Restriction of XML External Entity Reference in stanfordnlp/corenlp6.1 Medium
- phoronix-test-suite phoronix-test-suite/phoronix-test-suite, fedoraproject fedora, phoronix-media phoronix test suite +2 moreCross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suite5.4 Medium
- phoronix-test-suite phoronix-test-suite/phoronix-test-suite, fedoraproject fedora, phoronix-media phoronix test suite +2 moreCross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suite6.5 Medium
tdengineOSS-FuzzHeap-buffer-overflow in stringProcessNo scoretcmallocOSS-FuzzHeap-buffer-overflow in void absl::BytesToHexStringInternal<std::__1::basic_string<char, std::__1::char_No scoretcmallocOSS-FuzzUse-after-poison in absl::BytesToHexStringNo score- mozilla firefoxMozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in...8.8 High
- debian linux, flatpak, flatpak flatpak-builder +2 more +4 moreflatpak-builder can access files outside the build directory.7.7 High
- cisco clamav, canonical ubuntu linux, debian linux +2 moreClam AntiVirus (ClamAV) Denial of Service Vulnerability7.5 High
- gpacGPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function...5.5 Medium
- cryptsetup project cryptsetup, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIt was found that a specially crafted LUKS header could trick cryptsetup into disabling...4.3 Medium
- gpacThe binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the...5.5 Medium
- gpacThe binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the...5.5 Medium
- gpacThe binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line...7.8 High
- gpacThe binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in...5.5 Medium
- gpacThe binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in...7.8 High
- gpacThe binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function...7.8 High
- gpacThe binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc_entry_del...5.5 Medium
- gpacA buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the...7.8 High
- gpacSegmentation fault vulnerability exists in Gpac through 1.0.1 via the gf_odf_size_descriptor...5.5 Medium
github.com/spiffe/spireGoUnbounded memory usage on exposed HTTP/2 (non-gRPC) endpointsNo scoreoro/platformPackagistXSS vulnerability in translations6.9 Medium@soketi/soketinpmZalgo-like output that crashes the serverNo scorelinuxUbuntu,linux-gcpUbuntu,linux-gcp-5.4Ubuntu +1 more +3 morelinux, linux-gcp, linux-gcp-5.4, linux-hwe-5.4 regressionNo score- fig2dev project fig2dev, debian linux +1 moreA denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the...5.5 Medium
- fig2dev project fig2dev, debian linux +1 moreA double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream...5.5 Medium
- libmeshb project libmeshbA buffer overflow in the GmfOpenMesh() function of libMeshb v7.61 allows attackers to cause a...6.5 Medium
- Show moreLoading…