CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- moodleMoodle type juggling vulnerability6.5 Medium
- moodleMoodle Incorrect Authorization4.3 Medium
- fresenius kabi vigilant software suite (mastermed dashboard), fresenius-kabi agilia connect firmware, agilia partner maintenance software +4 more +6 moreFresenius Kabi Agilia Connect Infusion System use of client side authentication7.3 High
- fresenius-kabi agilia connect, fresenius kabi agilia link+, fresenius-kabi agilia partner maintenance software +4 more +6 moreFresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm7.3 High
- fresenius kabi vigilant software suite (mastermed dashboard), fresenius-kabi agilia connect firmware, agilia partner maintenance software +4 more +6 moreFresenius Kabi Agilia Connect Infusion System cross site scripting5.4 Medium
- fresenius kabi vigilant software suite (mastermed dashboard), fresenius-kabi agilia connect firmware, agilia partner maintenance software +4 more +6 moreFresenius Kabi Agilia Connect Infusion System hard coded credentials6.3 Medium
- fresenius kabi agilia connect wifi, fresenius-kabi agilia sp mc wifi firmware +1 moreFresenius Kabi Agilia Connect Infusion System files or directories accessible to external parties5.3 Medium
- fresenius kabi agilia link+, fresenius-kabi agilia connect firmware, agilia link\+ firmware +4 more +6 moreFresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm6.5 Medium
- fresenius-kabi agilia connect, vigilant mastermed, fresenius kabi agilia partner +5 more +7 moreFresenius Kabi Agilia Connect Infusion System plaintext storage of a password6.5 Medium
- fresenius kabi vigilant software suite (mastermed dashboard), fresenius-kabi agilia connect firmware, agilia partner maintenance software +4 more +6 moreFresenius Kabi Agilia Connect Infusion System exposure of information through directory listing5.3 Medium
- fresenius kabi vigilant software suite (mastermed dashboard), fresenius-kabi agilia connect firmware, agilia partner maintenance software +4 more +6 moreFresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm5.9 Medium
- fresenius kabi agilia link+, fresenius-kabi agilia connect firmware, agilia partner maintenance software +4 more +6 moreFresenius Kabi Agilia Connect Infusion System7.3 High
- fresenius kabi agilia link+, fresenius-kabi agilia connect firmware, agilia partner maintenance software +4 more +6 moreFresenius Kabi Agilia Connect Infusion System insufficiently protected credentials7.3 High
- fresenius kabi agilia link+, fresenius-kabi agilia connect firmware, agilia partner maintenance software +4 more +6 moreFresenius Kabi Agilia Connect Infusion System uncontrolled resource consumption7.5 High
- moodleMoodle Improper Encoding or Escaping of Output4.9 Medium
- iconics analytix, genesis64, hyper historian +2 more +4 moreIncomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4...9.8 Critical
- iconics mobilehmi, mitsubishielectric mc works64 +1 moreCross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01...6.1 Medium
- iconics genesis64, mitsubishielectric mc works64 +1 morePlaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E ...5.5 Medium
- google androidAttacker can reset the device with AT Command in the process of rebooting the device. The LG ID...6.1 Medium
- iconics genesis64, mitsubishi electric corporation genesis32, iconics suite +2 more +4 moreBuffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to...5.9 Medium
- linux kernelA vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c...4.4 Medium
- simple college website project college websiteSimple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution...8.1 High
- bobthecow bobthecow/mustache.php, mustache project mustache +1 moreImproper Neutralization of Special Elements Used in a Template Engine in bobthecow/mustache.php5.3 Medium
- rapid7 insight agentRapid7 Insight Agent Improper Access Control4.0 Medium
- ibm cognos controllerIBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security...7.3 High
- ibm cognos controllerIBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized...7.3 High
- ibm cognos controllerIBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity...7.1 High
- ibm cognos controllerIBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity...7.1 High
- oretnom23 employee and visitor gate pass logging systemAn SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging...9.8 Critical
- online railway reservation system project railway reservation systemAn SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0...9.8 Critical
- projectworlds online examination systemAn SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid...9.8 Critical
- online resort management system project resort management systemAn SQL Injection vulnerability exists in Sourcecodester Online Resort Management System 1.0 via...9.8 Critical
- tp-link tl-wa1201, tl-wa1201 firmware +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...8.8 High
- tp-link archer c90, archer c90 firmware +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...9.8 Critical
- oretnom23 simple music cloud community systemAn SQL Injection vulnerability exists in Sourcecodester Simple Music Clour Community System 1.0...9.8 Critical
- europa technical specifications for digital covid certificatesThe EU Technical Specifications for Digital COVID Certificates before 1.1 mishandle certificate governance. A non-production public key certificate could have been used in production.9.8 Critical
- courier management system project management systemAn SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the...9.8 Critical
- nlnetlabs ldnsWhen a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for...7.5 High
- nlnetlabs ldnsWhen ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a...6.5 Medium
- plutinosoft platinumPlatinum Upnp SDK through 1.2.0 has a directory traversal vulnerability. The attack could remote...7.5 High
tower-httpcrates.iotower-http's improper validation of Windows paths could lead to directory traversal attackNo score- asus pa90, pa90 firmware, pb50 +23 more +25 moreASUS VivoMini/Mini PC - improper input validation6.7 Medium
- mruby, mruby mruby/mruby +1 moreNULL Pointer Dereference in mruby/mruby5.5 Medium
leptonicaOSS-FuzzStack-buffer-overflow in pixCountPixelsNo scoreclamavOSS-FuzzHeap-buffer-overflow in cli_bcomp_freemetaNo scoreclamavOSS-FuzzStack-buffer-overflow in load_regex_matcherNo scoreclamavOSS-FuzzHeap-buffer-overflow in cli_loadcrtNo score- contribsys sidekiq, debian linux +1 moreDenial of service in sidekiq7.5 High
- usbview project usbviewUSBView 2.1 before 2.2 allows some local users (e.g., ones logged in via SSH) to execute...7.8 High
- vim, vim vim/vim, apple macos +1 more +3 moreOut-of-bounds Read in vim/vim5.5 Medium
- Show moreLoading…