CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- vim, vim vim/vim, apple macos +1 more +3 moreHeap-based Buffer Overflow in vim/vim6.6 Medium
- mingsoft mcmsRCE in Mingsoft MCMS9.8 Critical
- mingsoft mcmsArbitrary file upload in Mingsoft MCMS9.8 Critical
- mingsoft mcmsMCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson...9.8 Critical
- mingsoft mcmsArbitrary File Upload in Mingsoft MCMS9.8 Critical
- mingsoft mcmsMCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key...9.8 Critical
- jerryscriptJerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via...7.8 High
- jerryscriptJerryscript 3.0.0 was discovered to contain a stack overflow via ecma_lcache_lookup in /jerry...7.8 High
- jerryscriptJerryscript 3.0.0 was discovered to contain a stack overflow via vm_loop.lto_priv.304 in /jerry...7.8 High
- jerryscriptThere is an Assertion 'ecma_is_value_undefined (value) || ecma_is_value_null (value) ||...5.5 Medium
- jerryscriptJerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecma_ref_object_inline in ...5.5 Medium
- jerryscriptThere is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type !=...5.5 Medium
- jerryscriptJerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma...7.8 High
- microsoft chakracoreThere is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js:...7.5 High
- jerryscriptThere is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at ...5.5 Medium
- jerryscriptThere is an Assertion 'ecma_is_value_object (value)' failed at jerryscript/jerry-core/ecma/base...5.5 Medium
- jerryscriptThere is an Assertion 'type == ECMA_OBJECT_TYPE_GENERAL || type == ECMA_OBJECT_TYPE_PROXY' failed...5.5 Medium
- jerryscriptThere is an Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at /jerry-core/ecma...5.5 Medium
- jerryscriptThere is an Assertion 'ecma_object_check_class_name_is_object (obj_p)' failed at /jerry-core/ecma...5.5 Medium
- jerryscriptThere is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at ...5.5 Medium
- jerryscriptThere is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry-core/lit/lit-strings.c in...5.5 Medium
- jerryscriptThere is an Assertion 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' failed at /jerry-core/parser/js...5.5 Medium
- jerryscriptThere is an Assertion 'context_p->token.type == LEXER_LITERAL' failed at /jerry-core/parser/js/js...5.5 Medium
- jerryscriptThere is an Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op_object_is_fast_array ...5.5 Medium
- jerryscriptThere is an Assertion 'context_p->stack_top_uint8 == SCAN_STACK_TRY_STATEMENT || context_p-...5.5 Medium
- jerryscriptThere is an Assertion 'lit_is_valid_cesu8_string (string_p, string_size)' failed at /base/ecma...5.5 Medium
- jerryscriptThere is an Assertion 'ecma_is_lexical_environment (object_p)' failed at /base/ecma-helpers.c...5.5 Medium
- jerryscriptThere is an Assertion 'page_p != NULL' failed at /parser/js/js-parser-mem.c(parser_list_get) in...5.5 Medium
- moddable sdkModdable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component...7.8 High
- jerryscriptThere is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser...5.5 Medium
- moddable sdkModdable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component...5.5 Medium
- moddable sdkModdable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the...5.5 Medium
- moddable sdkModdable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c...7.8 High
- moddable sdkModdable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in...5.5 Medium
- moddable sdkModdable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c...5.5 Medium
- moddable sdkModdable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.5.5 Medium
- moddable sdkModdable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component...7.8 High
- moddable sdkModdable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in...5.5 Medium
- moddable sdkModdable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component...7.8 High
- espruinoEspruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf.7.8 High
- espruinoEspruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in...7.8 High
- espruinoEspruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in...5.5 Medium
- ibm security soar, soar +1 moreIBM Security SOAR V42 and V43could allow a remote attacker to obtain sensitive information,...5.9 Medium
- computer and mobile repair shop management system project and mobile repair shop management systemAn SQL Injection vulnerability exists in Sourcecodester Computer and Mobile Repair Shop...9.8 Critical
- sourcecodester online reviewer system project online reviewer systemAn SQL Injection vulnerability exists in Sourcecodester Online Reviewer System 1.0 via the...9.8 Critical
- covid 19 testing management system project 19 testing management systemAn SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System (CTMS)...9.8 Critical
- sourcecodester logistic hub parcel\'s management system project logistic hub parcel\'s management systemAn SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1...9.8 Critical
- trend micro deep security agent for linux, trendmicro deep security agent +1 moreA code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security...7.8 High
- trend micro deep security agent for linux, trendmicro deep security agent +1 moreA directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload...7.5 High
- code-projects pharmacy managementAn SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username...9.8 Critical
- Show moreLoading…