CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- google chromeInappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote...6.5 Medium
- google chromeUse after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker...8.8 High
ftd2xx-embedded-halcrates.iocrate has been renamed to `ftdi-embedded-hal`No score- showdoc, star7th star7th/showdoc +1 moreCross-site Scripting (XSS) - Stored in star7th/showdoc6.5 Medium
- linux kernel, netapp a700s firmware, active iq unified manager +13 more +15 moreA use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED...6.8 Medium
ghostscriptOSS-FuzzHeap-use-after-free in pdfi_cspace_free_callbackNo score- phpmyadminCross-site Scripting in phpmyadmin6.1 Medium
- phpmyadminImproper Authentication in phpmyadmin4.3 Medium
- ls1intum artemis java test sandboxArtemis Java Test Sandbox InvocationTargetException Subclass Escape8.2 High
- peteroupc cborDenial of service in CBOR library7.5 High
com.hazelcast:hazelcastMaven,com.hazelcast.jet:hazelcast-jetMaven +1 moreSecurity Advisory for "Log4Shell"10.0 Criticalezsystems/ezpublish-kernelPackagistIBX-1392: Image filenames sanitizationNo score- peteroupc cborupokecenter CBOR Denial of Service7.5 High
- pmmp pocketmine-mpPocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login Replay5.3 Medium
- pmmp pocketmine-mpPocketMine-MP before 4.0.7 Denial of Service via JSON Decoding7.1 High
- graph-gophers graphql-goDenial of Service in graphql-go6.5 Medium
- wasmcloud host runtime, wasmcloud-otp +1 moreIncorrect Authorization in wasmCloud6.3 Medium
- hms project hmsHMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php.9.8 Critical
- hms project hmsHMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php.9.8 Critical
- hms project hmsHMS v1.0 was discovered to contain a SQL injection vulnerability via adminlogin.php.9.8 Critical
- online banking system project banking systemOnline Banking System v1.0 was discovered to contain a SQL injection vulnerability via index.php.9.8 Critical
- bingrep project bingrepDenial of service in bingrep7.5 High
- gpacThe binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function...5.5 Medium
- gpacA NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function...5.5 Medium
- hdfgroup hdf5A Divide By Zero vulnerability exists in HDF5 v1.13.1-1 vis the function H5T__complete_copy () at...6.5 Medium
- hdfgroup hdf5An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function...6.5 Medium
- hdfgroup hdf5HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry.8.8 High
- gpacA NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function...5.5 Medium
- gpacThe binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the...5.5 Medium
- gpacGPAC v1.1.0 was discovered to contain a stack overflow via the function gf_node_get_name () at...5.5 Medium
- gpacAn untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function...5.5 Medium
- gpacA NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function...5.5 Medium
- gpacA NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function...5.5 Medium
- dell appsync, emc appsync +1 moreDell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication...8.1 High
- dell appsync, emc appsync +1 moreDell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote...6.9 Medium
- dell appsync, emc appsync +1 moreDELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An...8.3 High
- dell powermax os, solutions enabler vapp, solutions enabler +5 more +7 moreThe Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local...7.8 High
- dell unisphere for powermax, powermax os, solutions enabler +4 more +6 moreUnisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability....6.3 Medium
- cached-path-relative project cached-path-relative, debian linux +1 morePrototype Pollution7.3 High
- convert-svg-core project convert-svg-coreDirectory Traversal7.5 High
- camunda min-dashPrototype Pollution7.5 High
- isomorphic-git cors-proxyServer-side Request Forgery (SSRF)8.6 High
- online leave management system project leave management systemSQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23,...9.8 Critical
- oretnom23 budget and expense tracker systemSQL injection vulnerability in Sourcecodester Budget and Expense Tracker System v1 by oretnom23,...9.8 Critical
- spotweb project spotwebCross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to...5.4 Medium
pterodactyl/panelPackagistInsufficient Session Expiration in Pterodactyl API6.0 MediumbitlyshortenerPyPIInvalid URL generation in bitlyshortenerNo score- moodleMoodle Improper Authentication4.3 Medium
- moodleMoodle Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium
- Show moreLoading…