CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
clevisAlmaLinux,clevis-dracutAlmaLinux,clevis-luksAlmaLinux +2 more +4 moreclevis bug fix and enhancement updateNo scoreresource-agentsAlmaLinux,resource-agents-aliyunAlmaLinux,resource-agents-gcpAlmaLinux +1 more +3 moreresource-agents bug fix and enhancement updateNo score- elitecms elite cmseliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_post.php.9.8 Critical
- thedigitalcraft atomcmsAtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.9.8 Critical
- elitecms elite cmseliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_user.php.9.8 Critical
- elitecms elite cmseliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions...9.8 Critical
- elitecms elite cmseliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_page.php.9.8 Critical
- elitecms elite cmsAn issue in /admin/delete_image.php of eliteCMS v1.0 allows attackers to delete arbitrary files.9.1 Critical
- elitecms elite cmseliteCMS v1.0 is vulnerable to Insecure Permissions via manage_uploads.php.9.8 Critical
- ivanti service managerIvanti Service Manager 2021.1 allows reflected XSS via the appName parameter associated with...6.1 Medium
- No product listedTest update for SUSE:SLE-15-SP2:Update (security)No score
- nec univerge dt800 data maintenance tool, univerge dt820 firmware, univerge dt830 firmware +3 more +5 moreUNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0 and prior, UNIVERGE DT 930 V2.4.0.0...5.3 Medium
- apache supersetAPI sensitive information leak6.5 Medium
- simple client management system project client management systemSQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the...9.8 Critical
- simple client management system project client management systemSQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the...9.8 Critical
- anchorcms anchor cmsCross-site Scripting in Anchor CMS5.4 Medium
- rosariosisRosarioSIS XSS Vulnerability6.1 Medium
- apache pulsarPulsar Admin API allows access to data from other tenants using getMessageById API6.5 Medium
- w-zip project w-zip, yuda-lyu yuda-lyu/w-zip +1 morePath Traversal in yuda-lyu/w-zip9.4 Critical
- unknown essential addons for elementorEssential Addons for Elementor < 5.0.5 - Unauthenticated LFI9.8 Critical
- unknown wordpress gdpr, welaunch wordpress gdpr\&ccpa +1 moreWordPress GDPR & CCPA < 1.9.27 - Unauthenticated Reflected Cross-Site Scripting6.1 Medium
- unknown link libraryLink Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion7.5 High
- unknown link libraryLink Library < 7.2.8 - Library Settings Reset via CSRF6.5 Medium
- unknown link libraryLink Library < 7.2.9 - Reflected Cross-Site Scripting6.1 Medium
- unknown updraftplus wordpress backup plugin, updraftplus +1 moreUpdraftPlus < 1.16.69 - Reflected Cross-Site Scripting6.1 Medium
- pluginus woocommerce products filter, unknown woof – products filter for woocommerce +1 moreWOOF - Products Filter for WooCommerce < 1.2.6.3 - Reflected Cross-Site Scripting6.1 Medium
- nextscripts nextscripts: social networks auto-poster, social networks auto poster +1 moreNextScripts: Social Networks Auto-Poster < 4.3.25 - Arbitrary Post Deletion via CSRF6.5 Medium
- cf7skins contact form 7 skins, unknown skins for contact form 7 +1 moreContact Form 7 Skins < 2.5.1 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- gabe livan asset cleanup: page speed booster, asset cleanup\ page speed booster project +1 moreAsset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting via AJAX Action6.1 Medium
- nextscripts nextscripts: social networks auto-poster, social networks auto poster +1 moreNextScripts: Social Networks Auto-Poster < 4.3.24 - Unauthenticated Stored XSS6.1 Medium
- cusmin absolutely glamorous custom admin, unknown custom dashboard & login page – agca +1 moreCustom Dashboard & Login Page < 7.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- gabe livan asset cleanup: page speed booster, asset cleanup\ page speed booster project +1 moreAsset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting6.1 Medium
- unknown visual css style editorVisual CSS Style Editor < 7.5.4 - Reflected Cross-Site Scripting6.1 Medium
- domaincheckplugin domain checkDomain Check < 1.0.17 - Reflected Cross-Site Scripting6.1 Medium
- wickedplugins wicked foldersWicked Folders < 2.18.10 - Subscriber+ SQL Injection8.8 High
- wpmanageninja ninja tables, unknown ninja tables – best wp datatables plugin for wordpress +1 moreNinja Tables < 4.1.8 - Admin+ Stored Cross-Site Cross-Site Scripting4.8 Medium
- bplugins document embedderDocument Embedder < 1.7.9 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure4.3 Medium
- welaunch wordpress gdpr\&ccpaWordPress GDPR & CCPA < 1.9.26 - Authenticated Reflected Cross-Site Scripting9.6 Critical
- bplugins document embedderDocument Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure5.3 Medium
- getperfectsurvey perfect surveyPerfect Survey < 1.5.2 - Unauthenticated Stored Cross-Site Scripting6.1 Medium
- getperfectsurvey perfect surveyPerfect Survey < 1.5.2 - Reflected Cross-Site Scripting6.1 Medium
- getperfectsurvey perfect surveyPerfect Survey < 1.5.2 - Unauthorised AJAX Call to Stored XSS / Survey Settings Update8.8 High
- getperfectsurvey perfect surveyPerfect Survey < 1.5.2 - Unauthenticated SQL Injection9.8 Critical
- bestwebsoft error log viewer, error log viewer by bestwebsoft +1 moreError Log Viewer < 1.1.2 - Arbitrary Text File Deletion via CSRF6.5 Medium
- nd-learning project nd-learningLearning Courses < 5.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- benbodhi svg supportSVG Support < 2.3.20 - Admin+ Stored Cross-Site Scripting4.8 Medium
- metagauss registrationmagicRegistration Magic < 5.0.1.9 - Reflected Cross-Site Scripting6.1 Medium
- dena h2oUnititialized memory access in h2o7.4 High
jsoncrates.iojson is unmaintainedNo score- element desktopRemote program execution with user interaction8.3 High
- Show moreLoading…