Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2022
January

CVEs published in January 2022

2,262 vulnerabilities, 204 critical, 13 exploited.

Known exploitedIn KEVPublic exploitFix available

reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443788.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443778.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443768.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443748.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443738.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443728.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443718.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443708.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443698.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443688.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443678.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443658.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443648.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443638.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443628.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443618.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443608.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443598.6 HighJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality...CVE-2021-443588.6 HighJanuary 28, 2022
livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatCVE-2022-0395Fix available6.5 MediumJanuary 28, 2022
bmoor project bmoorPrototype PollutionCVE-2021-23558Fix available7.3 HighJanuary 28, 2022
keyget project keygetPrototype PollutionCVE-2021-237605.6 MediumJanuary 28, 2022
zip-local project zip-localArbitrary File Write via Archive Extraction (Zip Slip)CVE-2021-23484Fix available9.8 CriticalJanuary 28, 2022
vim, vim vim/vim, fedoraproject fedora +2 moreOut-of-bounds Read in vim/vimCVE-2022-0393Fix available8.4 HighJanuary 28, 2022
hhg-multistore multistoreH.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via ...CVE-2021-464489.8 CriticalJanuary 28, 2022
hhg-multistore multistoreA cross-site scripting (XSS) vulnerability in H.H.G Multistore v5.1.0 and below allows attackers...CVE-2021-464475.4 MediumJanuary 28, 2022
hhg-multistore multistoreH.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via ...CVE-2021-464469.8 CriticalJanuary 28, 2022
hhg-multistore multistoreH.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via ...CVE-2021-464459.8 CriticalJanuary 28, 2022
hhg-multistore multistoreH.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via ...CVE-2021-464449.8 CriticalJanuary 28, 2022
janeczku calibre-web, janeczku/calibre-web +1 moreCross-site Scripting (XSS) - Reflected in janeczku/calibre-webCVE-2022-0352Fix available8.5 HighJanuary 28, 2022
openssl, debian linux, oracle enterprise manager ops center +5 more +7 moreBN_mod_exp may produce incorrect results on MIPSCVE-2021-4160Fix available5.9 MediumJanuary 28, 2022
yzmcmsThe comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently,...CVE-2022-238895.3 MediumJanuary 28, 2022
yzmcmsYzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component ...CVE-2022-238888.8 HighJanuary 28, 2022
yzmcmsYzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers...CVE-2022-238876.5 MediumJanuary 28, 2022
western digital my cloud, westerndigital my cloud os +1 moreInsufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices.CVE-2022-229948.8 HighJanuary 28, 2022
westerndigital my cloud osCommand Injection Remote Code Execution vulnerability on Western Digital My Cloud devices.CVE-2022-229927.8 HighJanuary 28, 2022
reolink rlc-410w firmwareAn OScommand injection vulnerability exists in the device network settings functionality of...CVE-2021-40412EPSS 27.5%9.1 CriticalJanuary 28, 2022
reolink rlc-410w firmwareAn OS command injection vulnerability exists in the device network settings functionality of...CVE-2021-404119.1 CriticalJanuary 28, 2022
reolink rlc-410w firmwareAn OS command injection vulnerability exists in the device network settings functionality of...CVE-2021-40410EPSS 27.9%9.1 CriticalJanuary 28, 2022
reolink rlc-410w firmwareAn OS command injection vulnerability exists in the device network settings functionality of...CVE-2021-404099.1 CriticalJanuary 28, 2022
reolink rlc-410w firmwareAn OS command injection vulnerability exists in the device network settings functionality of...CVE-2021-404089.1 CriticalJanuary 28, 2022
reolink rlc-410w ip camera, rlc-410w firmware +1 moreAn OS command injection vulnerability exists in the device network settings functionality of...CVE-2021-40407In KEVEPSS 47.6%9.1 CriticalJanuary 28, 2022
reolink rlc-410w firmwareAn incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability...CVE-2021-404167.1 HighJanuary 28, 2022
reolink rlc-410w firmwareAn incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability...CVE-2021-404157.1 HighJanuary 28, 2022
reolink rlc-410w firmwareAn incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability...CVE-2021-404147.1 HighJanuary 28, 2022
reolink rlc-410w firmwareAn incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability...CVE-2021-404137.1 HighJanuary 28, 2022
reolink rlc-410w firmwareAn out-of-bounds write vulnerability exists in the device TestEmail functionality of reolink RLC...CVE-2022-212179.1 CriticalJanuary 28, 2022
reolink rlc-410w firmwareA denial of service vulnerability exists in the cgiserver.cgi session creation functionality of...CVE-2021-404067.5 HighJanuary 28, 2022
reolink rlc-410w firmwareA firmware update vulnerability exists in the 'factory' binary of reolink RLC-410W v3.0.0...CVE-2021-4041910.0 CriticalJanuary 28, 2022
reolink rlc-410w firmwareAn authentication bypass vulnerability exists in the cgiserver.cgi Login functionality of reolink...CVE-2021-404045.3 MediumJanuary 28, 2022
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open