CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- mz-automation libiec61850A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of...7.5 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader Missing Custom Protocols in Warning Message Prompts2.5 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader Use-after-free could lead to Arbitrary code execution7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader Use-After-Free could lead to Arbitrary code execution7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Pro DC Stack Overflow Vulnerability Arbitrary code execution7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader Memory Corruption could lead to Information Disclosure5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader Memory Corruption could lead to Application denial-of-service5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Use After Free could lead to Application denial-of-service5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Reader Out-of-bounds Read Remote Code Execution Vulnerability3.3 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader Use-After-Free could lead to Arbitrary code execution7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Pro DC Heap Overflow could lead to Arbitrary code execution7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC add-on (AxAcroPDFLib.AxAcroPDF) src NTLMv2 SSO Auth leak vulnerability3.1 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Out-of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC add-on (AxAcroPDFLib.AxAcroPDF) for Internet Explorer LoadFile NTLMv2 SSO Auth leak vulnerability3.1 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader Collab.registerReview Use-After-Free Remote Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC TTF Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC OTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC JP2 File Parsing Use-After-Free Information Disclosure Vulnerability3.3 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC annotation gestures integer overflow vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Pro DC NULL Pointer Dereference could lead to Application-denial-of-service3.3 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Pro DC Heap Overflow Vulnerability could lead to Arbitrary code execution7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Pro DC NULL Pointer Dereference could lead to Application-denial-of-service3.3 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe illustratorAdobe Illustrator TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe illustratorAdobe Illustrator JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe bridgeAdobe Bridge JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability3.3 Low
- adobe bridgeAdobe Bridge TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe bridgeAdobe Bridge JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- arista eosAn issue has recently been discovered in Arista EOS where, under certain conditions, the service ACL configured for OpenConfig gNOI and OpenConfig RESTCONF might be bypassed, which results in the deni…5.5 Medium
- arista eosAn issue has recently been discovered in Arista EOS where certain gNOI APIs incorrectly skip authorization and authentication which could potentially allow a factory reset of the device.9.1 Critical
- arista terminattrAn issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users…9.1 Critical
- mitsubishielectric fx3u-enet-l firmware, fx3u-enet-p502 firmware, fx3u-enet firmware +2 moreImproper initialization vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.16 and...7.5 High
- mitsubishielectric fx3u-enet-l firmware, fx3u-enet-p502 firmware, fx3u-enet firmware +2 moreLack of administrator control over security vulnerability in MELSEC-F series FX3U-ENET Firmware...7.5 High
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat4.3 Medium
- ropium project ropiumROPium v3.1 was discovered to contain an invalid memory address dereference via the find() function.7.5 High
- meta platforms, inc ray-ban® stories smart glasses, ray-ban stories rw4002 601\/71 50-22 firmware, stories rw4003 65582v 48-23 firmware +2 more +4 moreA logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture...5.3 Medium
- imperva web application firewallImperva Web Application Firewall (WAF) before 2021-12-31 allows remote unauthenticated attackers...9.8 Critical
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreSQL Injection in dolibarr/dolibarr8.3 High
- nuuo nvrmini2 devices, nvrmini2 firmware +1 moreNUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive,...9.8 Critical
- ibm sterling gentran:server for microsoft windows, sterling gentran +1 moreIBM Sterling Gentran:Server for Microsoft Windows 5.3 stores potentially sensitive information in...4.0 Medium
- parity frontierInteger underflow in Frontier6.5 Medium
- discourseGroup advanced search option may leak group and group's members visibility4.3 Medium
- octobercms octoberAuthenticated file write leads to remote code execution in october/system8.8 High
- octobercms octoberArbitrary code execution in october/system8.8 High
- prosodyprosody - security update7.5 High
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat5.7 Medium
- Show moreLoading…