CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- f5 nginx controller api managementOn NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access...5.4 Medium
- f5 big-iq centralized managementOn BIG-IQ Centralized Management 8.x before 8.1.0, an authenticated administrative role user on a...7.2 High
- embedthis goaheadThe code that performs password matching when using 'Basic' HTTP authentication does not use a...9.8 Critical
- srmilon wp google map, wp google map (wordpress plugin) +1 moreWordPress WP Google Map plugin <= 1.8.0 - Privilege Escalation vulnerability5.4 Medium
- hitachi linkoneOWASP Related Vulnerabilities in Hitachi Energy’s LinkOne Product4.2 Medium
- qemu, redhat enterprise linux +1 moreA NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to...6.5 Medium
- moodleCross Site Request Forgery in Moodle8.8 High
- moodleInsufficient user authorization in Moodle4.3 Medium
- moodleInsufficient user authorization in Moodle3.8 Low
- moodleSQL injection in Moodle9.8 Critical
- mirantis bored-agentImproper header sanitization in bored-agent causes escalation of privilege8.8 High
- charactell formstorm, formstorm enterprise +1 moreCharactell - FormStorm Enterprise Account Take Over6.1 Medium
- microfocus operations agentEscalation of privileges vulnerability in Micro Focus in Micro Focus Operations Agent, affecting...3.3 Low
- autodesk design reviewA Memory Corruption Vulnerability in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 and...7.8 High
drupal/image_export_importPackagistThe security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please re…No scoredrupal/vendor_stream_wrapperPackagistThis module provides a stream wrapper for files located in the vendor directory. Even when the vendor directory is moved outside the webroot, it allows providing publically accessible URLs to these fi…No scoredrupal/cogPackagistThe security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please re…No scoredrupal/media_entity_flickrPackagistThe security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please re…No scoredrupal/vpprPackagistUpdate Maintainers stepped forward, fixed the security issue, and Vocabulary Permissions Per Role is supported again. The module allows adding to/editing terms of/removing terms from vocabularies per…No scoredrupal/exifPackagistThis module enables you to automatically scan images uploaded to the site to extract their meta data and store it in taxonomy structures. The module doesn't sufficiently protect against malicious file…No scoredrupal/business_responsive_themePackagistThe security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please re…No scoredrupal/swiftypePackagistThe security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please re…No scoredrupal/expire_reset_pass_linkPackagistThe security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please re…No scoredrupal/admin_toolbar_searchPackagistThe security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please re…No scoredrupal/tac_litePackagistUpdate 2022-03-01. New maintainers have volunteered for the project and created a new release which includes fixes for the 3 security issues that caused the module to be unsupported. The security team…No scoredrupal/anonymousredirectPackagistThe security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please re…No score- ibm websphere application server, websphere application server liberty +1 moreIBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 could allow a remote...7.5 High
- jflyfox jfinal cmsIn jfinal_cms >= 5.1 0, there is a storage XSS vulnerability in the background system of CMS....5.4 Medium
- oneblog project oneblogOneBlog <= 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high...6.5 Medium
- uscat project uscatuscat, as of 2021-12-28, is vulnerable to Cross Site Scripting (XSS) via the input box of the...5.4 Medium
- uscat project uscatuscat, as of 2021-12-28, is vulnerable to Cross Site Scripting (XSS) via "close registration...5.4 Medium
- mindskip xzs-mysqlxzs-mysql >= t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source...7.5 High
- netgear xr1000This vulnerability allows network-adjacent attackers to disclose sensitive information on...6.5 Medium
- parallels desktop, parallels +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- parallels desktop, parallels +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- parallels desktop, parallels +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...7.5 High
- bec technologies multiple routers, netgear ac2100 firmware, ac2400 firmware +15 more +17 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...8.8 High
- google android, nextcloud +1 moreSQL Injection in FileContentProvider (GHSL-2021-1007)7.5 High
- forestblog project forestblogA problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be...6.1 Medium
- forestblog project forestblogIn ForestBlog, as of 2021-12-28, File upload can bypass verification.9.8 Critical
- adodb adodb/adodb, adodb project adodb, debian linux +2 moreAuthentication Bypass by Primary Weakness in adodb/adodb9.1 Critical
- jeecg bootSQL Injection in JeecgBoot9.8 Critical
- jupyter server proxy, jupyterhub jupyter-server-proxy +1 moreSSRF vulnerability (requires authentication)6.3 Medium
- debian linux, fedoraproject fedora, xen +2 moreInsufficient cleanup of passed-through device IRQs The management of IRQs associated with...4.6 Medium
- xen, debian linux, fedoraproject fedora +2 moreA PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was...5.5 Medium
- xen, debian linux, fedoraproject fedora +2 morearm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more...7.8 High
- slic3rSeveral missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each...5.5 Medium
- slic3rA flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application...5.5 Medium
- apache shenyu, apache software foundation shenyu (incubating) +1 moreApache ShenYu missing authentication allows gateway registration7.5 High
- apache shenyu, apache software foundation shenyu (incubating) +1 moreApache ShenYu 2.4.1 Improper access control9.1 Critical
- Show moreLoading…