CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- classapps selectsurvey.netSQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET...9.8 Critical
- zfaka project zfakaA SQL injection vulnerability exists in ZFAKA<=1.43 which an attacker can use to complete SQL...9.8 Critical
- salesagility suitecrmSuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote...9.8 Critical
- gadget works online ordering system project works online ordering systemA Cross Site Scripting (XSS) vulnerabilty exists in Sourcecodester Gadget Works Online Ordering...5.4 Medium
- salesagility suitecrmSuiteCRM before 7.12.3 and 8.x before 8.0.2 allows local file inclusion.9.8 Critical
- salesagility suitecrmSuiteCRM before 7.12.3 and 8.x before 8.0.2 allows remote code execution.8.8 High
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before 10.1.2137.10 allows an authenticated user to change any...6.5 Medium
- online motorcycle \(bike\) rental system project motorcycle \(bike\) rental systemOnline Motorcycle (Bike) Rental System 1.0 is vulnerable to a Blind Time-Based SQL Injection...9.8 Critical
- oretnom23 simple cold storage management systemAn SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System...9.8 Critical
- veridiumid veridiumadAn issue was discovered in VeridiumID VeridiumAD 2.5.3.0. The HTTP request to trigger push...7.3 High
- liferay portalLiferay Portal Server tested on 7.3.5 GA6, 7.2.0 GA1 is affected by OS Command Injection. An...7.2 High
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat5.3 Medium
- glpi-project glpiSQL injection using custom CSS administration form in GLPI4.9 Medium
- glpi-project glpiReflected XSS using reload button in GLPI6.1 Medium
- naver whale browser, navercorp whale +1 moreA Built-in extension in Whale browser before 3.12.129.46 allows attackers to compromise the...4.3 Medium
- openstack barbican, redhat openstack platform +1 moreopenstack-barbican Denial of Service vulnerability4.9 Medium
- openstack barbican, redhat openstack platform +1 moreBarbican authorization flaw before v14.0.08.1 High
- intel connman, debian linux +1 moreAn issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply...7.5 High
- intel connman, debian linux +1 moreAn issue was discovered in the DNS proxy in Connman through 1.40. forward_dns_reply mishandles a...9.1 Critical
- intel connman, debian linux +1 moreAn issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply...9.1 Critical
- vmware photon osThe vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged...7.8 High
- vim, vim vim/vim, apple macos +1 more +3 moreHeap-based Buffer Overflow in vim/vim6.1 Medium
- linux kernelAn information leak flaw was found due to uninitialized memory in the Linux kernel’s TIPC...5.5 Medium
- qemu, redhat enterprise linux +1 moreA flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This...7.8 High
- liferay portalLiferay Portal Server tested on 7.3.5 GA6, 7.2.0 GA1 is affected by OS Command Injection. An...7.2 High
- mobile shop system project shop systemAn SQL Injection vulnerabilty exists in Sourcecodester Mobile Shop System in PHP MySQL 1.0 via...9.8 Critical
- piwigoPiwigo is image gallery software written in PHP. When a criteria is not met on a host, piwigo...8.1 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_bcode_insert_offset at...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_json_stringify at src...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_set_internal at src...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via free_json_frame at src...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via parse_cval_type at src...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via add_lineno_map_item at src...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c17e...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_next at src/mjs_object...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/lib/x86_64-linux-gnu...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_print at src...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c6ae...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_get_mjs at src...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_compact_strings at src...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x9a30e...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0xe533e...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via getprop_builtin_foreign at...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via exec_expr at src/mjs_exec...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8d28e...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_execute at src...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8814e...5.5 Medium
- Show moreLoading…