CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- teamviewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- discourseUser can bypass approval when invited to Discourse4.3 Medium
- adobe indesignAdobe InDesign JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability3.3 Low
- adobe indesignAdobe InDesign JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe indesignAdobe InDesign JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe incopyAdobe InCopy TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe incopyAdobe InCopy JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe incopyAdobe InCopy JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe incopyAdobe InCopy JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability3.3 Low
- php everywhere project everywhere, alexander fuchs php everywhere (wordpress plugin) +1 moreWordPress PHP Everywhere Plugin <= 2.0.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- western digital edgeroverInsecure file and directory permissions on EdgeRover7.7 High
- western digital my cloud, westerndigital my cloud os +1 moreLimited authentication bypass vulnerability on Western Digital My Cloud devices7.8 High
- western digital my cloud, westerndigital my cloud os +1 moreCommand injection through unsecured HTTP calls on Western Digital My Cloud devices7.8 High
- western digital my cloud, westerndigital my cloud os +1 morePre-authenticated stack overflow vulnerability on FTP Service9.8 Critical
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager Stored XSS in the Spin Set8.0 High
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager Stored XSS in workflow Stages parameter8.1 High
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager Stored XSS on Edit Tag page via Localization input8.0 High
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager Stored XSS in user name parameter in the package manager8.1 High
- adobe experience manager, experience manager cloud service +1 moreAEM Forms Improper Restriction of XML External Entity Reference9.8 Critical
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager Stored XSS in the Carousel Set8.1 High
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager Reflected XSS in /bin/wcm/contentfinder/page/view.html5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager Unicode normalization leads to dispatcher bypass6.5 Medium
- dahuasecurity asc2204c firmware, hcvr7xxx firmware, hcvr8xxx firmware +25 more +27 moreSome Dahua products have access control vulnerability in the password reset process. Attackers...9.8 Critical
- jpressjpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController:...9.8 Critical
- reprisesoftware reprise license managerReprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the...6.1 Medium
- gpacThe binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in...5.5 Medium
- ibm iThe IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote...6.5 Medium
- element-it http commanderA cross-site scripting (XSS) vulnerability in the "Zip content" feature in Element-IT HTTP...5.4 Medium
- discourseUser's bio visible even if profile is restricted in Discourse4.3 Medium
- Show moreLoading…