CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
ghostscriptOSS-FuzzHeap-buffer-overflow in mem_mono_copy_monoNo score- node-fetch node-fetch/node-fetch, node-fetch project node-fetch, debian linux +1 more +3 moreExposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch8.8 High
- owncloud files antivirusThe files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the...7.2 High
- owncloud files antivirusThe files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by...8.8 High
- owncloud desktop client, fedoraproject fedora +1 moreownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop...7.8 High
- checkmkA stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an...5.4 Medium
- pexip infinityPexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing...7.5 High
- pexip infinityPexip Infinity before 26 allows temporary remote Denial of Service (abort) because of missing...7.5 High
- pexip infinityPexip Infinity before 26 allows remote denial of service because of missing H.264 input...7.5 High
- pexip infinityPexip Infinity before 26 allows remote denial of service because of missing H.264 input...7.5 High
- pexip infinityPexip Infinity before 26 allows remote denial of service because of missing RTMP input validation.7.5 High
- crestron hd-md4x2-4k-e firmwareAn issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web...9.8 Critical
- opendesign drawings software development kitOpen Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked...7.8 High
- cyberark endpoint privilege managerCyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local...7.8 High
- chinamobile an lianbao wf-1 firmwareChina Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone...9.8 Critical
- facebook hermesAccess of Resource Using Incompatible Type in Hermes9.8 Critical
ghostscriptOSS-FuzzUNKNOWN READ in pdfi_count_cff_indexNo score- libreswan, debian linux, fedoraproject fedora +2 moreLibreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer...7.5 High
- nanoid project nanoidInformation Exposure4.0 Medium
- modex project modexModex v2.11 was discovered to contain a NULL pointer dereference in set_create_id() at xtract.c.5.5 Medium
- jerryscriptAn issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in...7.5 High
- colors.js project colors.jsDenial of Service (DoS)7.5 High
- modex project modexModex v2.11 was discovered to contain an Use-After-Free vulnerability via the component tcache.5.5 Medium
- spinroot spinSpin v6.5.1 was discovered to contain an out-of-bounds write in lex() at spinlex.c.5.5 Medium
- gnu recutils, fedoraproject fedora +1 moreAn Use-After-Free vulnerability in rec_record_destroy() at rec-record.c of GNU Recutils v1.8.90...5.5 Medium
- mrubyAn untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation...7.5 High
- arm bifrost gpu kernel driver, midgard gpu kernel driver, valhall gpu kernel driver +2 moreArm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bifrost r0p0 through r34p0, and Valhall...7.8 High
- salonerp project salonerpIn SalonERP 3.0.1, a SQL injection vulnerability allows an attacker to inject payload using 'sql'...8.8 High
- gnu gcc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust...5.5 Medium
- ubiquiti inc unifi network application, ui unifi network controller +1 moreAn injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53...9.8 Critical
- hp designjet t1530 l2y23a firmware, designjet t1530 l2y24a firmware, designjet t1530 l2y24b firmware +24 more +26 moreCertain HP DesignJet products may be vulnerable to unauthenticated HTTP requests which allow...7.5 High
- wpchill download monitor, download monitor (wordpress plugin) +1 moreWordPress plugin Download Monitor <= 4.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability4.8 Medium
- samsung internetIncorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers...6.5 Medium
- arista eosAn issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users…9.1 Critical
- tenable tenable.scTenable.sc versions 5.14.0 through 5.19.1 were found to contain a remote code execution...8.1 High
- microfocus arcsight enterprise security managerPotential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security...6.1 Medium
- microfocus arcsight enterprise security managerPotential vulnerabilities have been identified in Micro Focus ArcSight Enterprise Security...6.1 Medium
- sap se netweaver as for abap and abap platform, sap netweaver abap, netweaver application server abap +2 moreIn SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751,...4.3 Medium
- sap enterprise threat detectionSAP Enterprise Threat Detection (ETD) - version 2.0, does not sufficiently encode user-controlled...6.1 Medium
- sap se s/4hana, sap s\/4hana +1 moreThe F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104,...8.1 High
- sap business oneSAP Business One - version 10.0, extended log stores information that can be of a sensitive...5.5 Medium
- sap se s/4hana, sap s\/4hana +1 moreThe F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104,...8.1 High
- google androidThe broadcast that DevicePickerFragment sends when a new device is paired doesn't have any...5.3 Medium
- google androidIn LocationSettingsActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking...7.8 High
- google androidIn setLaunchIntent of BluetoothDevicePickerPreferenceController.java, there is a possible way to...7.8 High
- mz-automation lib60870A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c...7.5 High
- omron cx-oneOmron CX-One7.8 High
- johnson controls videoedgeVideoEdge5.3 Medium
- we-con levistudiouWECON LeviStudioU7.8 High
- we-con levistudiouWECON LeviStudioU7.8 High
- Show moreLoading…