CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- livehelperchat, livehelperchat livehelperchat/livehelperchat +1 moreCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat5.7 Medium
- vim, vim vim/vim, apple mac os x +2 more +4 moreHeap-based Buffer Overflow in vim/vim7.8 High
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moreImportant: kernel security and bug fix update8.4 High
- opensuse factory, factory watchman, backports sle-15-sp3 +2 morewatchman: chown in watchman@.socket unit allows symlink attack7.8 High
- stormshield network securityIn Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and...5.5 Medium
- apache knoxDOM based XSS Vulnerability in Apache Knox6.1 Medium
- crater-invoice crater-invoice/crater, craterapp crater +1 moreUnrestricted Upload of File with Dangerous Type in crater-invoice/crater7.2 High
- ibm filenet content managerIBM FileNet Content Manager 5.5.4, 5.5.6, and 5.5.7 could allow a remote authenticated attacker...6.3 Medium
- futurepress epub.jsCross-site Scripting in epubjs6.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore6.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreSQL Injection in pimcore/pimcore8.3 High
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore5.3 Medium
openjdk-8-demoTuxCare,openjdk-8-docTuxCare,openjdk-8-jdkTuxCare +6 more +8 moreFix CVE(s):No score- icecoder, icecoder icecoder/icecoder +1 moreCross-site Scripting (XSS) - Reflected in icecoder/icecoder5.4 Medium
- mruby, mruby mruby/mruby +1 moreNULL Pointer Dereference in mruby/mruby6.2 Medium
- livehelperchat, livehelperchat livehelperchat/livehelperchat +1 moreCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat7.1 High
- pluginops landing page, landing page builder – lead page – optin page – squeeze page – wordpress landing pages +1 moreLanding Page Builder < 1.4.9.6 - Authenticated Reflected Cross-Site Scripting (XSS)5.4 Medium
- smashballoon smash balloon social post feedSmash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting (XSS)5.4 Medium
- unknown wp booking system – booking calendar, wpbookingsystem wp booking system +1 moreWP Booking System – Booking Calendar < 2.0.15 - Authenticated Reflected Cross-Site Scripting (XSS)5.4 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 6.2.0 - Subscriber+ Category Add Leading to Stored XSS5.4 Medium
- aioseo all in one seo, smub all in one seo – best wordpress seo plugin – easily improve seo rankings & increase traffic +1 moreAll In One SEO < 4.1.5.3 - Authenticated SQL Injection6.5 Medium
- aioseo all in one seo, smub all in one seo – best wordpress seo plugin – easily improve seo rankings & increase traffic +1 moreAll In One SEO < 4.1.5.3 - Authenticated Privilege Escalation8.8 High
- theeventscalendar eventcalendarEvent Calendar < 1.1.51 - Reflected Cross-Site Scripting6.1 Medium
- seur oficial oficial, unknown seur oficial +1 moreSEUR Oficial < 1.7.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- navneil naicker acf photo gallery fieldACF Photo Gallery Field < 1.7.5 - Reflected Cross-Site Scripting6.1 Medium
- alexander anycommentAnyComment < 0.3.5 - Open Redirect6.1 Medium
- janeczku calibre-web, janeczku/calibre-web +1 moreCross-Site Request Forgery (CSRF) in janeczku/calibre-web7.6 High
odbccrates.ioproject abandonedNo scorer2d2_odbccrates.ioproject abandonedNo score- chaskiq, chaskiq chaskiq/chaskiq +1 moreCross-site Scripting (XSS) - Stored in chaskiq/chaskiq7.3 High
- chaskiq, chaskiq chaskiq/chaskiq +1 moreCross-site Scripting (XSS) - Stored in chaskiq/chaskiq6.5 Medium
- janeczku calibre-web, janeczku/calibre-web +1 moreBusiness Logic Errors in janeczku/calibre-web7.7 High
- king jim co.,ltd. tepra pro, kingjim sma3, spc10 firmware +2 more +4 moreInsufficiently protected credentials vulnerability in 'TEPRA' PRO SR5900P Ver.1.080 and earlier...4.3 Medium
- king jim co.,ltd. mirupass, kingjim mirupass pw10 firmware, mirupass pw20 firmware +2 moreMissing encryption of sensitive data vulnerability in 'MIRUPASS' PW10 firmware all versions and ...4.6 Medium
- expresstech quiz and survey masterStored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7...5.4 Medium
- expresstech quiz and survey masterReflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7...6.1 Medium
- expresstech quiz and survey masterCross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7...8.8 High
- jimoty, inc. jimoty app for android, jmty jimoty +1 moreJimoty App for Android versions prior to 3.7.42 uses a hard-coded API key for an external service...3.3 Low
- stanford corenlp, stanfordnlp stanfordnlp/corenlp +1 moreImproper Restriction of XML External Entity Reference in stanfordnlp/corenlp4.7 Medium
c-blosc2OSS-FuzzHeap-buffer-overflow in ndlz4_decompressNo scoreghostscriptOSS-FuzzUNKNOWN READ in chunk_obj_allocNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in s_hex_processNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in mem_true24_fill_rectangleNo score- w1.fi hostapd, fedoraproject fedora, siemens sidis secured smartplug +1 more +3 moreThe implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are...9.8 Critical
- w1.fi hostapd, fedoraproject fedora, siemens sidis secured smartplug +1 more +3 moreThe implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable...9.8 Critical
- theeventscalendar eventcalendarEvent Calendar < 1.1.51 - Subscriber+ Event Creation4.3 Medium
- janeczku calibre-web, janeczku/calibre-web +1 moreCross-site Scripting (XSS) - Stored in janeczku/calibre-web7.3 High
- phoronix-test-suite phoronix-test-suite/phoronix-test-suite, fedoraproject fedora, phoronix-media phoronix test suite +2 moreCross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suite4.5 Medium
c-blosc2OSS-FuzzNegative-size-param in ndlz4_decompressNo scorendpiOSS-FuzzHeap-buffer-overflow in processClientServerHelloNo score- Show moreLoading…