CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabled7.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX5448: FPC memory leak due to IPv6 neighbor flaps6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS6.8 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops7.5 High
- juniper contrail service orchestrationContrail Service Orchestration: Tenants able to see other tenants policies via REST API interface7.7 High
openexrOSS-FuzzHeap-buffer-overflow in internal_huf_decompressNo scorephpOSS-FuzzHeap-buffer-overflow in _estrdupNo score- h2database h2, debian linux, oracle communications cloud native core console +2 moreArbitrary code execution in H2 Console9.8 Critical
- libspf2 project libspf2libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to...9.8 Critical
- libspf2 project libspf2, debian linux +1 morelibspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote...9.8 Critical
- onionshareOTF-006: Broken Website Hardening Control: The CSP can be turned on or off but not configured for the specific needs of the website3.7 Low
- onionshareCross-Site Scripting in Onionshare8.7 High
- micronaut-projects micronaut-core, objectcomputing micronaut +1 moreMemory leak in micronaut-core5.3 Medium
- onionshareImproper Access Control in Onionshare4.3 Medium
- onionshareDenial of Service in Onionshare7.5 High
- onionsharePath traversal in Onionshare6.3 Medium
- onionshareImproper Access Control in Onionshare4.3 Medium
- onionshareImproper Access Control in Onionshare4.3 Medium
- onionshareOut-of-bounds Read in Onionshare7.5 High
- grafana, fedoraproject fedora +1 moreOAuth Identity Token exposure in Grafana4.3 Medium
- wolfsslwolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects...9.1 Critical
- onionshareUsername spoofing in OnionShare4.3 Medium
- deltarm delta rmAn issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking...4.3 Medium
- deltarm delta rmAn issue was discovered in Delta RM 1.2. It is possible to request a new password for any other...6.5 Medium
- deltarm delta rmAn issue was discovered in Delta RM 1.2. Using the /risque/risque/ajax-details endpoint, with a...4.3 Medium
- deltarm delta rmAn issue was discovered in Delta RM 1.2. Using an privileged account, it is possible to edit,...2.7 Low
- nvidia shield tv, shield experience +1 moreNVIDIA Tegra kernel driver contains a vulnerability in NVHost, where a specific race condition...4.7 Medium
- nvidia shield tv, shield experience +1 moreNVIDIA Linux distributions contain a vulnerability in TrustZone’s TEE_Malloc function, where an...5.5 Medium
- nvidia shield tv, shield experience +1 moreAndroid images for T210 provided by NVIDIA contain a vulnerability in BROM, where failure to...7.1 High
- nvidia shield tv, shield experience +1 moreNVIDIA Linux distributions contain a vulnerability in nvmap ioctl, which allows any user with a...7.8 High
- nvidia shield tv, shield experience +1 moreNVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high...6.7 Medium
- nvidia shield tv, shield experience +1 moreNVIDIA Linux kernel distributions contain a vulnerability in nvmap...7.8 High
- free school management software project school management softwareAn unrestricted file upload vulnerability exists in Sourcecodester Free school management...9.8 Critical
- car rental management system project rental management systemSourcecodester Car Rental Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via...5.4 Medium
- torchbox wagtailComment reply notifications sent to incorrect users in wagtail3.5 Low
- broadcom netmaster file transfer management, netmaster network management for tcp\/ip +1 moreNetMaster 12.2 Network Management for TCP/IP and NetMaster File Transfer Management contain a XSS...6.1 Medium
- hpe tezA potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access...9.8 Critical
- xootix login/signup popup, side cart woocommerce (ajax), side cart woocommerce +3 more +5 moreXootiX Plugins <= Various Versions Cross-Site Request Forgery to Arbitrary Options Update8.8 High
- buffercode random banner, random banner banner +1 moreRandom Banner <= 4.1.4 Admin+ Stored Cross-Site Scripting4.8 Medium
- metagauss profilegrid, profilegrid – user profiles, memberships, groups and communities – user profiles, memberships, groups and communities +1 moreProfileGrid – User Profiles, Memberships, Groups and Communities <= 4.7.4 Authenticated Stored Cross-Site Scripting6.4 Medium
- i-plugins whmcs bridge, whmcs bridge bridge +1 moreWHMCS Bridge <= 6.1 Subscriber+ Stored Cross-Site Scripting6.4 Medium
- metagauss leadmagic, user registration, login & landing pages – leadmagic registration, login & landing pages – leadmagic +1 moreUser Registration, Login & Landing Pages – LeadMagic <= 1.2.7 Admin+ Stored Cross-Site Scripting4.8 Medium
- crisp, crisp live chat live chat +1 moreCrisp Live Chat <= 0.31 Cross-Site Request Forgery to Stored Cross-Site Scripting8.8 High
- vjinfotech wp import export, wp import export lite +1 moreWP Import Export (Lite) <= 3.9.15 Unauthenticated Sensitive Data Disclosure7.5 High
- umbraco cmsUmbraco Remote ApplicationURL Overwrite8.6 High
- umbraco cmsUmbraco Password Reset URL Poison6.8 Medium
- mattermostUsers can view the contents of an archived channel when access is explicitly denied by the system admin2.6 Low
- mattermost boardsEmails of all users are exposed via one of the Boards APIs4.3 Medium
- mattermost boardsSession is not invalidated on server-side when user logged out of Boards4.7 Medium
- Show moreLoading…