CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- apache shenyu, apache software foundation shenyu (incubating) +1 moreApache ShenYu Password leakage7.5 High
- apache shenyu, apache software foundation shenyu (incubating) +1 moreApache ShenYu 2.4.1 Groovy Code Injection & SpEL Injection9.8 Critical
- kea-hotel-erp project kea-hotel-erpIn MartDevelopers KEA-Hotel-ERP open source as of 12-31-2021, a remote code execution...8.8 High
- iresturant project iresturantMartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because this...8.8 High
- iresturant project iresturantMartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the...9.8 Critical
- freecadweb freecad, debian linux +1 moreThe Path Sanity Check script of FreeCAD 0.19 is vulnerable to OS command injection, allowing an...7.8 High
- freecadweb freecad, debian linux +1 moreImproper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an...7.8 High
- libsixelIn Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stb_image.h...6.5 Medium
- getgrav getgrav/grav, grav +1 moreCross-site Scripting (XSS) - Stored in getgrav/grav5.7 Medium
- linux kernel, fedoraproject fedora, oracle communications cloud native core binding support function +2 more +4 moreA flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP...5.5 Medium
- delgan delgan/loguru, loguru project loguru +1 moreInsertion of Sensitive Information into Log File in delgan/loguru4.3 Medium
- exiftool project exiftoollib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file =~ /\|$/ check.7.8 High
- jsishJsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src...7.8 High
- jsishJsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src...7.8 High
- jsishJsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c.5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c....5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap buffer overflow via jsi_ArraySliceCmd in src...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap buffer overflow via RegExp_constructor in src...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap buffer overflow via jsiEvalCodeSub in src/jsiEval.c...5.5 Medium
- jerryscriptThere is an Assertion ''JERRY_CONTEXT (jmem_heap_allocated_size) == 0'' failed at /jerry-core...5.5 Medium
- jerryscriptThere is an Assertion ''ecma_is_value_boolean (base_value)'' failed at /jerry-core/ecma...5.5 Medium
- jerryscriptThere is an Assertion ''ecma_object_is_typedarray (obj_p)'' failed at /jerry-core/ecma/operations...5.5 Medium
- jerryscriptJerryscript v3.0.0 and below was discovered to contain a stack overflow via...7.8 High
- apple macos, safari, tvos +3 more +5 moreA logic issue was addressed with improved state management. This issue is fixed in macOS Monterey...8.8 High
- apple ipados, macos, safari +4 more +6 moreA cross-origin issue in the IndexDB API was addressed with improved input validation. This issue...6.5 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreAccess of Memory Location Before Start of Buffer in vim/vim8.4 High
- librecad, debian linux, fedoraproject fedora +2 moreIn LibreCAD 2.2.0, a NULL pointer dereference in the HATCH handling of libdxfrw allows an...5.5 Medium
- librecad, debian linux, fedoraproject fedora +2 moreA buffer overflow vulnerability in CDataList of the jwwlib component of LibreCAD 2.2.0-rc3 and...7.8 High
- librecad, debian linux, fedoraproject fedora +2 moreA buffer overflow vulnerability in CDataMoji of the jwwlib component of LibreCAD 2.2.0-rc3 and...8.8 High
- polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 moreA local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec...7.8 High
- autodesk inventor, advance steel, autocad +8 more +10 moreAn Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019...7.8 High
- autodesk autocad, inventor, advance steel +8 more +10 moreA maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 may be forced to read...7.8 High
- unisys messaging integration servicesUnisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3 and IC4, 7R3C, and 7R3D has an...9.8 Critical
- dell emc system update, dellemc system update - dsu +1 moreDell EMC System Update, version 1.9.2 and prior, contain an Unprotected Storage of Credentials...8.2 High
- dell unity, emc unity operating environment, emc unity xt operating environment +1 more +3 moreDell EMC Unity, Dell EMC UnityVSA and Dell EMC Unity XT versions prior to 5.1.2.0.5.007 contain...6.0 Medium
- dell data protection central, emc data protection central +1 moreDell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability...4.3 Medium
- dell data protection central, emc data protection central +1 moreDell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery...4.3 Medium
- dell alienware 13 r3 firmware, alienware 15 r3 firmware, alienware 15 r4 firmware +409 more +411 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...7.5 High
- dell alienware 13 r3 firmware, alienware 15 r3 firmware, alienware 15 r4 firmware +409 more +411 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...7.5 High
- coins-global coins construction cloudAn issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the...6.1 Medium
- coins-global coins construction cloudAn issue was discovered in COINS Construction Cloud 11.12. Due to improper input neutralization,...6.1 Medium
- coins-global coins construction cloudAn issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user...6.5 Medium
- coins-global coins construction cloudAn issue was discovered in COINS Construction Cloud 11.12. Due to insufficient input...6.5 Medium
- coins-global coins construction cloudAn issue was discovered in COINS Construction Cloud 11.12. Due to logical flaws in the human...8.8 High
- codeigniter, codeigniter4 +1 moreCross-site Scripting Vulnerability in CodeIgniter45.4 Medium
- elfspirit project elfspiritOut-of-bounds Read lead to application crashes or information leakage in ELF parsing.7.1 High
- mediawiki shortdescription, starcitizentools mediawiki-extensions-shortdescription +1 moreCross-site Scripting in ShortDescription extension4.7 Medium
- telosalliance z\/ip one firmwareA directory traversal vulnerability on Telos Z/IP One devices through 4.0.0r grants an...9.8 Critical
- online project time management system project project time management systemAn SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0...9.8 Critical
- Show moreLoading…