CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- zohocorp manageengine servicedesk plusA Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine...4.8 Medium
- projectdiscovery interactshInteractsh server settings make users vulnerable to Subdomain Takeover8.2 High
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore4.3 Medium
- stormshield network securityAn issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). An attacker can...5.3 Medium
- kron single connectModifying User Permissions via Unauthorized Access in Single Connect5.3 Medium
- kron single connectInformation Leakege via Unauthorized Access in Single Connect5.3 Medium
- kron single connectInformation Leakege via Unauthorized Access in Single Connect8.6 High
- kron single connectInformation Leakege via Unauthorized Access in Single Connect5.3 Medium
- crater-invoice crater-invoice/crater, craterapp crater +1 moreCross-site Scripting (XSS) - Stored in crater-invoice/crater7.6 High
- livehelperchat, livehelperchat livehelperchat/livehelperchat +1 moreCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat7.1 High
- synametrics synamanAn insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0...7.5 High
- livehelperchat, livehelperchat livehelperchat/livehelperchat +1 moreCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat6.3 Medium
clamavOSS-FuzzHeap-buffer-overflow in cli_strlcatNo scorelibplistOSS-FuzzHeap-buffer-overflow in strtolNo score- apache tomcat, debian linux, oracle agile engineering data management +4 more +6 moreLocal privilege escalation with FileStore7.0 High
- teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 moreOut-of-bounds read in multipart parsing in PJSIP9.1 Critical
- teluu pjsip, debian linux, pjsip pjproject +2 morePotential out-of-bound read during RTP/RTCP parsing in PJSIP9.1 Critical
- nextcloud, kiteworks security-advisories +1 morePermission bypass in Nextcloud Android App4.3 Medium
- icsharpcode sharpziplibPath Traversal in SharpZipLib4.0 Medium
- icsharpcode sharpziplibPath Traversal in SharpZipLib4.0 Medium
- icsharpcode sharpziplibPath Traversal in SharpZipLib7.3 High
- prestashopServer Side Twig Template Injection in PrestaShop9.0 Critical
- hospital\'s patient records management system project patient records management systemA Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient...5.4 Medium
- jpressjpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKit#doSendEmail....8.8 High
- mingsoft mcmsMingsoft MCMS SQL injection vulnerability7.5 High
- hospital\'s patient records management system project patient records management systemA Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient...5.4 Medium
- pfsense, pfsense plus +1 more/usr/local/www/pkg.php in pfSense through 2.5.2 uses $_REQUEST['pkg_filter'] in a PHP echo call.6.1 Medium
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreExpat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.7.5 High
- mitre cve servicescontroller/org.controller/org.controller.js in the CVE Services API 1.1.1 before...7.2 High
- ibm security guardium insightsIBM Security Guardium Insights 3.0 could allow an authenticated user to obtain sensitive...2.2 Low
- ibm security guardium insightsIBM Security Guardium Insights 3.0 could allow an authenticated user to perform unauthorized...4.3 Medium
- ibm security guardium insightsIBM Security Guardium Insights 3.0 could allow a remote attacker to obtain sensitive information,...5.9 Medium
drupal/private_taxonomyPackagistThis module enables users to create 'private' vocabularies. The module doesn't sufficiently check user access permissions when attempting to view, edit, or add terms to vocabularies, including vocabul…No score- jpressjpress 4.2.0 is vulnerable to RCE via io.jpress.web.admin._TemplateController#doUploadFile. The...7.2 High
- jpressjpress 4.2.0 is vulnerable to remote code execution via io.jpress.web.admin._TemplateController...7.2 High
- mingsoft mcmsMingsoft MCMS SQL injection vulnerability7.5 High
- jpressjpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit...7.2 High
- hospital\'s patient records management system project patient records management systemA Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient...5.4 Medium
- buddybossBuddyBoss Platform through 1.8.0 allows XSS via the Group Name or Group Description field.5.4 Medium
- buddybossBuddyBoss Platform through 1.8.0 allows remote attackers to obtain the email address of each user...5.3 Medium
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Reflected in microweber/microweber7.1 High
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Stored in microweber/microweber8.1 High
- jpressjpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit...7.2 High
- acer care centerIn ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading...7.8 High
- showdoc, star7th star7th/showdoc +1 moreSQL Injection in star7th/showdoc6.7 Medium
- crater-invoice crater-invoice/crater, craterapp crater +1 moreImproper Access Control in crater-invoice/crater7.5 High
owning_refcrates.ioowning_ref vulnerable to multiple soundness issuesNo score- apache karafPath traversal flaws5.3 Medium
- apache karafInsecure Java Deserialization in Apache Karaf8.1 High
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore8.1 High
- Show moreLoading…