CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- mra13 simple download monitorSimple Download Monitor < 3.9.9 - Multiple CSRF8.8 High
- mra13 simple download monitorSimple Download Monitor < 3.9.11 - Contributor+ Stored Cross-Site Scripting via Shortcodes5.4 Medium
- unknown updraftplus wordpress backup plugin, updraftplus +1 moreUpdraftPlus < 1.16.59 - Admin+ Stored Cross-Site Scripting4.8 Medium
- starwindsoftware command centerIn StarWind Command Center before V2 build 6021, an authenticated read-only user can elevate...8.8 High
- navidromeSQL injection in github.com/navidrome/navidrome6.5 Medium
- saviynt enterprise identity cloudAn issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An authentication...9.8 Critical
- saviynt enterprise identity cloudAn issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An attacker can...5.3 Medium
- libexpat project libexpat, debian linux, netapp clustered data ontap +7 more +9 moreExpat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for...9.8 Critical
- mediatek linkit software development kitIn MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer...9.8 Critical
- micrium uc\/libAn issue was discovered in lib_mem.c in Micrium uC/OS uC/LIB 1.38.x and 1.39.00. The following...9.8 Critical
phpOSS-FuzzHeap-use-after-free in zend_std_get_property_ptr_ptrNo scoreghostscriptOSS-FuzzUNKNOWN READ in pdfi_setcolorNNo scoreserenityOSS-FuzzHeap-buffer-overflow in Core::Stream::File::open_pathNo scoreghostscriptOSS-FuzzHeap-use-after-free in gx_monitor_freeNo scoreopenexrOSS-FuzzHeap-buffer-overflow in generic_unpackNo scoreghostscriptOSS-FuzzGlobal-buffer-overflow in get_space_objectNo scoreghostscriptOSS-FuzzNull-dereference READ in gstate_clone_coreNo scoreghostscriptOSS-FuzzSegv on unknown address in gp_semaphore_closeNo score- apache software foundation xerces, apache xerces-j, netapp active iq unified manager +27 more +29 moreInfinite loop within Apache XercesJ xml parser6.5 Medium
- linux kernelA vulnerability was found in the Linux kernel's eBPF verifier when handling internal data...5.5 Medium
- bluez, debian linux, fedoraproject fedora +2 moreA heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with...8.8 High
- strongswan, canonical ubuntu linux, debian linux +2 more +4 moreIn strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early...9.1 Critical
- kernel util-linux, fedoraproject fedora +1 moreCVE-2021-3996 does not affect BellSoft software5.5 Medium
- kernel util-linux, fedoraproject fedora +1 moreCVE-2021-3995 does not affect BellSoft software5.5 Medium
- projectworlds online-shopping-webvsite-in-phpProjectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via...9.8 Critical
- appcmsAppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php6.1 Medium
thread_localcrates.ioData race in `Iter` and `IterMut`No score- epub2txt project epub2txtxhtml_translate_entity in xhtml.c in epub2txt (aka epub2txt2) through 2.02 allows a stack-based...7.8 High
- b3log vditor, vanessa219 vanessa219/vditor +1 moreCross-site Scripting (XSS) - Stored in vanessa219/vditor6.8 Medium
ndpiOSS-FuzzHeap-buffer-overflow in ndpi_search_kerberosNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_workflow_process_packetNo scoreopenexrOSS-FuzzHeap-buffer-overflow in hufDecodeNo score- google chromeHeap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote...8.8 High
- google chromeHeap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote...8.8 High
- google chromeInappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote...6.5 Medium
- google chromeUse after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a...8.8 High
- google chromeUse after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote...8.8 High
- google chromeHeap buffer overflow in PDFium in Google Chrome prior to 97.0.4692.99 allowed a remote attacker...8.8 High
- google chromeInappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed...6.5 Medium
- google chromeUse after free in Bookmarks in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who...8.8 High
- google chromeUse after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed an attacker who...8.8 High
- google chromeHeap buffer overflow in DevTools in Google Chrome prior to 97.0.4692.99 allowed an attacker who...7.8 High
- google chromeUse after free in Text Input Method Editor in Google Chrome on Android prior to 97.0.4692.99...8.8 High
- google chromeUse after free in Scheduling in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to...8.8 High
- google chromeUse after free in Vulkan in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to...8.8 High
- google chromeUse after free in Printing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who...8.8 High
- google chromeUse after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who...8.8 High
- google chromeInappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a...6.5 Medium
- google chromeUse after free in Web packaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker...8.8 High
- google chromeInappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a...6.5 Medium
- Show moreLoading…