CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
bumpalocrates.iobumpalo has use-after-free due to a lifetime error in `Vec::into_iter()`No scorewarpcrates.ioWarp vulnerable to Path Traversal via Improper validation of Windows pathsNo score- chinamobileltd an lianbao wf firmware-1China Mobile An Lianbao WF-1 router v1.0.1 is affected by an OS command injection vulnerability...9.8 Critical
- opensuse factoryparsec: dangerous 777 permissions for /run/parsec5.9 Medium
- alcoda netbiblio, netbiblio webopac +1 moreReflected XSS in NetBiblio WebOPAC search functionality6.1 Medium
- cisco security managerCisco Security Manager Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco security managerCisco Security Manager Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco security managerCisco Security Manager Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco security managerCisco Security Manager Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco security managerCisco Security Manager Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco session initiation protocol (sip) software, ip conference phone 7832 firmware, ip conference phone 8832 firmware +18 more +20 moreCisco IP Phones Information Disclosure Vulnerability4.6 Medium
- cisco unified contact center domain manager, unified contact center management portal, unified contact center express +2 moreCisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager Privilege Escalation Vulnerability9.6 Critical
- cisco security managerCisco Security Manager Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco security managerCisco Security Manager Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco security managerCisco Security Manager Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco security managerCisco Security Manager Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco security managerCisco Security Manager Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco security managerCisco Security Manager Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco security managerCisco Security Manager Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco security managerCisco Security Manager Cross-Site Scripting Vulnerabilities6.1 Medium
- le-yan co., ltd. dental management systemLe-yan Co., Ltd. dental management system - Hard-coded Credentials9.8 Critical
- le-yan co., ltd. dental management systemLe-yan Co., Ltd. dental management system - SQL Injection9.8 Critical
- asus rt-ax56u, rt-ax56u firmware +1 moreASUS RT-AX56U - Path Traversal6.5 Medium
- eyoucmseyouCMS V1.5.5-UTF8-SP3_1 suffers from Arbitrary file deletion due to insufficient filtering of...8.1 High
- qnap qvr elite, qvr guard, qvr pro +2 moreStack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard8.1 High
- qnap qvr elite, qvr guard, qvr pro +2 moreStack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard8.1 High
- qnap qvr elite, qvr guard, qvr pro +2 moreStack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard8.1 High
- qnap qvr elite, qvr guard, qvr pro +2 moreStack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard8.1 High
- qnap qvr elite, qvr guard, qvr pro +2 moreStack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard8.1 High
- qnap qcalagentOpen Redirect Vulnerability in QcalAgent6.1 Medium
- qnap qcalagentReflected XSS Vulnerability in QcalAgent5.3 Medium
md4cOSS-FuzzHeap-buffer-overflow in md_decode_utf8__No scorephpOSS-FuzzSegv on unknown address in zeroNo scoremd4cOSS-FuzzUNKNOWN READ in md_build_attributeNo scorefreetype2OSS-FuzzStack-buffer-overflow in BZ2_decompressNo score- google chromeInsufficient validation of untrusted input in QUIC in Google Chrome prior to 97.0.4692.71 allowed...6.5 Medium
- google chromeUse after free in WebRTC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who had...9.6 Critical
- debian linux, linux kernel, fedoraproject fedora +8 more +10 morekernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges...7.8 High
- gnu glibc, debian linux, oracle communications cloud native core binding support function +8 more +10 moreThe deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka...9.8 Critical
- gnu glibc, debian linux, oracle communications cloud native core unified data repository +4 more +6 moreThe deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library ...9.8 Critical
- marked project marked, fedoraproject fedora +1 moreExponential catastrophic backtracking (ReDoS) in marked7.5 High
- marked project marked, fedoraproject fedora +1 moreCubic catastrophic backtracking (ReDoS) in marked7.5 High
- vim, vim vim/vim, debian linux +2 moreHeap-based Buffer Overflow in vim/vim6.8 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Passwords in Google Chrome prior to 97.0.4692.71 allowed a remote...6.5 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in WebShare in Google Chrome prior to 97.0.4692.71 allowed a remote...4.3 Medium
- google chrome, fedoraproject fedora +1 morePolicy bypass in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak...6.5 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Compositing in Google Chrome prior to 97.0.4692.71 allowed a...4.3 Medium
- google chrome, fedoraproject fedora +1 moreUninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a...8.1 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote...6.5 Medium
- Show moreLoading…