CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- getgrav getgrav/grav, grav +1 more Cross-site Scripting (XSS) - Stored in getgrav/grav 4.6 Medium
- max-3000 maxsite cms Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via... 5.4 Medium
- max-3000 maxsite cms Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in ... 8.1 High
- max-3000 maxsite cms A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows... 9.8 Critical
- max-3000 maxsite cms Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via... 5.4 Medium
- hospital management system project management system Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS)... 5.4 Medium
- hospital management system project management system Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS)... 5.4 Medium
- hospital management system project management system Hospital Management System v1.0 was discovered to contain a stored cross-site scripting (XSS)... 5.4 Medium
- home owners collection management system project owners collection management system Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting ... 6.1 Medium
- cmsmadesimple cms made simple CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting (XSS)... 6.1 Medium
- cmsmadesimple cms made simple CMS Made Simple v2.2.15 was discovered to contain a Remote Command Execution (RCE) vulnerability... 7.2 High
- datarobot A Remote Code Execution (RCE) vulnerability exists in DataRobot through 2021-10-28 because it... 9.8 Critical
- pagerduty rundeck Missing Authorization in Rundeck 8.1 High
- pagerduty rundeck Authorization Bypass Through User-Controlled Key in Rundeck 6.4 Medium
- icehrm A stored cross-site scripting (XSS) vulnerability in Ice Hrm 30.0.0.OS allows attackers to steal... 5.4 Medium
- icehrm Ice Hrm 30.0.0.OS was discovered to contain a reflected cross-site scripting (XSS) vulnerability... 6.1 Medium
- icehrm Ice Hrm 30.0.0.OS was discovered to contain multiple reflected cross-site scripting (XSS)... 6.1 Medium
- mikrotik routeros A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of... 7.5 High
- mikrotik routeros A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of... 7.5 High
- dropbox lepton Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the... 7.8 High
- audio file project file Audio File commit 004065d was discovered to contain a heap-buffer overflow in the function... 8.8 High
- qrcp project qrcp qrcp through 0.8.4, in receive mode, allows ../ Directory Traversal via the file name specified... 5.3 Medium
- arm adaptive scalable texture compression encoder ARM astcenc 3.2.0 is vulnerable to Buffer Overflow in function encode_ise(). 7.8 High
- ok-file-formats project ok-file-formats David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow via function... 7.8 High
- codeigniter, codeigniter4 +1 more Cross-Site Request Forgery (CSRF) Protection Bypass Vulnerability in CodeIgniter4 6.3 Medium
- ok-file-formats project ok-file-formats David Brackeen ok-file-formats dev version is vulnerable to Buffer Overflow. When the function of... 7.8 High
- codeigniter, codeigniter4 +1 more Remote CLI Command Execution Vulnerability in CodeIgniter4 9.4 Critical
- cherwell service management An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. It... 6.1 Medium
- cherwell service management An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. The... 5.3 Medium
- ok-file-formats project ok-file-formats David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the... 7.8 High
- cherwell service management An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3.... 6.1 Medium
- cherwell service management An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. XSS... 6.1 Medium
- obyte Obyte (formerly Byteball) Wallet before 3.4.1 allows XSS. A crafted chat message can lead to... 6.1 Medium
- ok-file-formats project ok-file-formats David Brackeen ok-file-formats 97f78ca is vulnerable to Buffer Overflow. When the function of the... 7.8 High
- arm adaptive scalable texture compression encoder ARM astcenc 3.2.0 is vulnerable to Buffer Overflow. When the compression function of the astc... 9.8 Critical
- hashicorp nomad HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling 7.5 High
- car driving school management system project driving school management system Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User... 6.1 Medium
- car driving school management system project driving school management system Car Driving School Management System v1.0 is affected by SQL injection in the login page. An... 9.8 Critical
-
rust-cryptocrates.io Miscomputation when performing AES encryption in rust-crypto No score - alltubedownload alltube, rudloff rudloff/alltube +1 more Server-Side Request Forgery (SSRF) in rudloff/alltube 8.6 High
- westguardsolutions ws form, ws form pro, westguard ws form lite – drag & drop contact form builder for wordpress +1 more +3 more WS Form < 1.8.176 - Unauthenticated Stored Cross-Site Scripting 6.1 Medium
- westguardsolutions ws form, ws form pro, westguard ws form lite – drag & drop contact form builder for wordpress +1 more +3 more WS Form < 1.8.176 - Admin+ Stored Cross-Site Scripting 4.8 Medium
- accesspressthemes ap custom testimonial, unknown testimonial wordpress plugin – ap custom testimonial +1 more AP Custom Testimonial < 1.4.8 - Reflected Cross-Site Scripting 6.1 Medium
- accesspressthemes ap custom testimonial, unknown testimonial wordpress plugin – ap custom testimonial +1 more AP Custom Testimonial < 1.4.8 - Admin+ SQL Injection 7.2 High
- templateinvaders ti woocommerce wishlist, ti woocommerce wishlist pro +1 more TI WooCommerce Wishlist < 1.40.1 - Unauthenticated Blind SQL Injection 9.8 Critical
- asgaros forum, unknown asgaros forum +1 more Asgaros Forum < 2.0.0 - Subscriber+ Blind SQL Injection 8.8 High
- crazy bone project bone, unknown crazy bone +1 more Crazy Bone <= 0.6.0 - Unauthenticated Stored XSS 6.1 Medium
- jgwhite33 wp review slider WP Review Slider < 11.0 - Admin+ SQL Injection 7.2 High
- thimpress learnpress LearnPress < 4.1.5 - Arbitrary Image Renaming 4.3 Medium
- unknown easy drag and drop all import : wp ultimate csv importer, smackcoders import all pages\, post types\, products\, orders\, and users as xml \& csv +1 more WP Ultimate CSV Importer < 6.4.3 - Admin+ Stored Cross-Site Scripting 4.8 Medium
- Show olderLoading…