Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2022
January

CVEs published in January 2022

2,262 vulnerabilities, 204 critical, 13 exploited.

Known exploitedIn KEVPublic exploitFix available

reolink rlc-410w firmwareA firmware update vulnerability exists in the "update" firmware checks functionality of...CVE-2022-211348.3 HighJanuary 28, 2022
reolink rlc-410w firmwareAn information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W...CVE-2022-211997.5 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the netserver recv_command functionality of reolink...CVE-2022-218018.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA memory corruption vulnerability exists in the netserver parse_command_list functionality of...CVE-2022-217969.3 CriticalJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi API command parser functionality of...CVE-2021-404237.5 HighJanuary 28, 2022
reolink rlc-410w firmwareAn information disclosure vulnerability exists due to a web server misconfiguration in the...CVE-2022-212368.1 HighJanuary 28, 2022
hp support assistantPotential arbitrary file deletion vulnerability has been identified in HP Support Assistant...CVE-2022-234565.5 MediumJanuary 28, 2022
hitachi linkoneOWASP Related Vulnerabilities in Hitachi Energy’s LinkOne ProductCVE-2021-403403.7 LowJanuary 28, 2022
hitachi linkoneOWASP Related Vulnerabilities in Hitachi Energy’s LinkOne ProductCVE-2021-403393.7 LowJanuary 28, 2022
etoilewebdesign ultimate reviewsWordPress Ultimate Reviews plugin <= 3.0.15 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2022-239794.8 MediumJanuary 28, 2022
hitachi linkoneOWASP Related Vulnerabilities in Hitachi Energy’s LinkOne ProductCVE-2021-403383.7 LowJanuary 28, 2022
wpchill download monitorWordPress Download Monitor plugin <= 4.4.6 - Authenticated Arbitrary File Download vulnerabilityCVE-2021-315676.8 MediumJanuary 28, 2022
bosch video securityHTML code injection vulnerability in Android Application, Bosch Video Security, version 3.2.3. or...CVE-2021-238636.1 MediumJanuary 28, 2022
synel eharmonySYNEL - eharmony Authenticated Blind & Stored XSSCVE-2022-227916.6 MediumJanuary 28, 2022
wp chill download monitorWordPress Download Monitor plugin <= 4.4.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2021-23174EPSS 83.9%3.4 LowJanuary 28, 2022
synel eharmonySYNEL - eharmony Directory TraversalCVE-2022-227905.6 MediumJanuary 28, 2022
emerson deltavEmerson DeltaV Uncontrolled Search Path ElementCVE-2021-444638.1 HighJanuary 28, 2022
emerson deltav distributed control system, deltav workstation +1 moreEmerson DeltaV Missing Authentication for Critical FunctionCVE-2021-262646.1 MediumJanuary 28, 2022
schneider-electric network management card 2 firmware, network management card 3 firmware +1 moreA CWE-200: Information Exposure vulnerability exists which could cause the troubleshooting...CVE-2021-228155.3 MediumJanuary 28, 2022
schneider-electric network management card 2 firmware, network management card 3 firmware +1 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2021-228146.1 MediumJanuary 28, 2022
schneider-electric network management card 2 firmware, network management card 3 firmware +1 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2021-228136.1 MediumJanuary 28, 2022
schneider-electric network management card 2 firmware, network management card 3 firmware +1 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2021-228126.1 MediumJanuary 28, 2022
schneider-electric network management card 2 firmware, network management card 3 firmware +1 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2021-228116.1 MediumJanuary 28, 2022
schneider-electric network management card 2 firmware, network management card 3 firmware +1 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2021-228106.1 MediumJanuary 28, 2022
schneider-electric guiconA CWE-125:Out-of-Bounds Read vulnerability exists that could cause unintended data disclosure...CVE-2021-228095.5 MediumJanuary 28, 2022
schneider-electric guiconA CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution when a...CVE-2021-228087.8 HighJanuary 28, 2022
schneider-electric guiconA CWE-787: Out-of-bounds Write vulnerability exists that could cause arbitrary code execution...CVE-2021-228077.8 HighJanuary 28, 2022
schneider-electric software updateA CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from...CVE-2021-227993.8 LowJanuary 28, 2022
schneider-electric scadapack 312e firmware, scadapack 313e firmware, scadapack 314e firmware +6 more +8 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...CVE-2021-228167.5 HighJanuary 28, 2022
schneider-electric rack power distribution unit with network management card 2 firmware, rack power distribution unit with network management card 3 firmware +1 moreA CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that...CVE-2021-228258.0 HighJanuary 28, 2022
schneider-electric ecostruxure power monitoring expertA CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code...CVE-2021-228278.8 HighJanuary 28, 2022
schneider-electric ecostruxure power monitoring expertA CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code...CVE-2021-228268.8 HighJanuary 28, 2022
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-79 Improper Neutralization of Input During Web Page Generation (?Cross-site Scripting?)...CVE-2021-228226.1 MediumJanuary 28, 2022
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station...CVE-2021-228218.6 HighJanuary 28, 2022
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to...CVE-2021-228209.8 CriticalJanuary 28, 2022
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could...CVE-2021-228194.3 MediumJanuary 28, 2022
schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that...CVE-2021-228187.5 HighJanuary 28, 2022
schneider-electric evb1a firmware, evc1s22p4 firmware, evc1s7p4 firmware +3 more +5 moreA CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to...CVE-2021-227258.8 HighJanuary 28, 2022
schneider-electric evb1a firmware, evc1s22p4 firmware, evc1s7p4 firmware +3 more +5 moreA CVE-352 Cross-Site Request Forgery (CSRF) vulnerability exists that could allow an attacker to...CVE-2021-227248.8 HighJanuary 28, 2022
pega infinity, pegasystems pega infinity +1 moreForgotten password reset functionality for local accounts can be used to bypass local...CVE-2021-276548.8 HighJanuary 28, 2022
lg webosThere is a privilege escalation vulnerability in some webOS TVs. Due to wrong setting...CVE-2022-237277.8 HighJanuary 28, 2022
western digital my cloud, westerndigital my cloud os +1 moreLimited Server-Side Request Forgery vulnerability on Western Digital My Cloud devices.CVE-2022-229937.8 HighJanuary 28, 2022
advantech wise-paas\/otaA privilege escalation vulnerability exists in the installation of Advantech WISE-PaaS/OTA Server...CVE-2021-403978.8 HighJanuary 28, 2022
advantech deviceon\/iserviceA privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iService 1...CVE-2021-403968.8 HighJanuary 28, 2022
advantech deviceon\/iedgeA privilege escalation vulnerability exists in the installation of Advantech DeviceOn/iEdge...CVE-2021-403898.8 HighJanuary 28, 2022
advantech sq managerA privilege escalation vulnerability exists in Advantech SQ Manager Server 1.0.6. A specially...CVE-2021-403888.8 HighJanuary 28, 2022
vmware horizon, workstation +1 moreVMware Workstation (16.x prior to 16.2.2) and Horizon Client for Windows (5.x prior to 5.5.3)...CVE-2022-229386.5 MediumJanuary 28, 2022
tenda ac15 firmware, ac5 firmware +1 moreMultiple Tenda devices are affected by authentication bypass, such as AC15V1.0 Firmware V15.03.05...CVE-2021-449719.8 CriticalJanuary 28, 2022
gibbonedu gibbonGibbon CMS v22.0.01 was discovered to contain a cross-site scripting (XSS) vulnerability, that...CVE-2022-228684.8 MediumJanuary 28, 2022
classapps selectsurvey.netA file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET...CVE-2021-416087.5 HighJanuary 28, 2022
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open