CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- insyde insydeh2o, siemens ruggedcom ape1808 firmware, simatic field pg m5 +31 more +33 moreA vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware...7.5 High
- insyde insydeh2o, siemens ruggedcom ape1808 - bios, simatic field pg m5 +16 more +18 moreAn issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.0 before 05.08.41, 5.1...8.2 High
- insyde insydeh2o, siemens ruggedcom ape1808 - bios, simatic field pg m5 +16 more +18 moreAn issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021...7.5 High
- google chromeInappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71...6.5 Medium
- ibm guardium data encryption, security guardium data encryption +1 moreIBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under...3.7 Low
- joinmastodon mastodon, mastodon mastodon/mastodon +1 morePrototype Pollution in mastodon/mastodon7.4 High
- printerlogic web stackPrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct...7.5 High
- printerlogic web stackPrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct...7.5 High
- printerlogic web stackPrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct...9.1 Critical
- printerlogic web stackPrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to multiple reflected...6.1 Medium
- printerlogic web stackPrinterLogic Web Stack versions 19.1.1.13 SP9 and below use user-controlled input to craft a URL,...9.8 Critical
- printerlogic web stackPrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to SQL Injection, which...5.3 Medium
- codesys profinetCODESYS: Null Pointer Dereference in CODESYS PROFINET stack7.5 High
- phoenixcontact fl switch 2005 firmware, fl switch 2008 firmware, fl switch 2008f firmware +62 more +64 morePHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment8.8 High
- nvidia omniverse launcherNVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing (CORS) vulnerability which can...9.3 Critical
- ibm security verify access, security verify access docker +1 moreIBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control...9.8 Critical
- ibm financial transaction managerIBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session...6.3 Medium
- ibm financial transaction managerIBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request forgery which could...4.3 Medium
- whatsapp, whatsapp business +1 moreA missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2,...9.1 Critical
- jhead project jheadHeap-buffer-overflow in jhead5.3 Medium
- capsule8An authenticated and authorized agent user could potentially gain administrative access via an...8.8 High
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection') in...8.8 High
- fortinet fortiweb, fortiadc, fortiddos +7 more +9 moreMultiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2...6.3 Medium
- fortinet fortimailA improper neutralization of input during web page generation ('cross-site scripting') in...6.1 Medium
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection') in...8.8 High
- fortinet fortiextender firmwareA improper neutralization of special elements used in a command ('command injection') in Fortinet...7.8 High
- fortinet fortiauthenticatorAn improper access control vulnerability [CWE-284] in FortiAuthenticator HA service 6.3.2 and...4.2 Medium
- fortinet fortiwebAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability ...8.1 High
- minetest, debian linux +1 moreMinetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item...9.8 Critical
- minetest, debian linux +1 moreIn Minetest before 5.4.0, players can add or subtract items from a different player's inventory.6.5 Medium
- postgresql jdbc driver, debian linux, fedoraproject fedora +1 more +3 moreUnchecked Class Instantiation when providing Plugin Classes7.0 High
harfbuzzOSS-FuzzHeap-use-after-free in hb_bit_set_invertible_t::nextNo scoreharfbuzzOSS-FuzzHeap-use-after-free in OT::CoverageFormat1::intersected_coverage_glyphsNo score- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vim8.4 High
- No product listedRemote code execution as root in Samba prior to version 4.13.17No score
- printerlogic web stackPrinterLogic Web Stack versions 19.1.1.13 SP9 and below do not sanitize user input resulting in...8.1 High
- neo4j awesome proceduresNeo4j Graph Database vulnerable to Path Traversal9.1 Critical
libsss_nss_idmap-develAlmaLinuxsssd bug fix and enhancement updateNo scoregnome-control-centerAlmaLinux,gnome-control-center-filesystemAlmaLinux +1 moregnome-control-center bug fix updateNo scorenisporAlmaLinux,nispor-develAlmaLinux,python3-nisporAlmaLinux +2 morenispor bug fix and enhancement updateNo scorelibiscsiAlmaLinux,libiscsi-develAlmaLinux,libiscsi-utilsAlmaLinux +34 more +36 morevirt:rhel bug fix updateNo scorenmstateAlmaLinux,nmstate-plugin-ovsdbAlmaLinux,python3-libnmstateAlmaLinux +2 morenmstate bug fix and enhancement updateNo scoretcpdumpAlmaLinuxtcpdump bug fix and enhancement updateNo scorejssAlmaLinux,jss-javadocAlmaLinux,ldapjdkAlmaLinux +11 more +13 morepki-core:10.6 bug fix and enhancement updateNo scorefreeradiusAlmaLinux,freeradius-develAlmaLinux,freeradius-docAlmaLinux +10 more +12 morefreeradius:3.0 bug fix updateNo scorefrrAlmaLinuxfrr bug fix updateNo scorespirv-toolsAlmaLinux,vulkan-headersAlmaLinux,vulkan-loaderAlmaLinux +5 more +7 morevulkan bug fix and enhancement updateNo scoreostreeAlmaLinux,ostree-develAlmaLinux,ostree-grub2AlmaLinux +1 more +3 moreostree bug fix and enhancement updateNo scorebuildahAlmaLinux,podmanAlmaLinux,runcAlmaLinux +29 more +31 morecontainer-tools:rhel8 security, bug fix, and enhancement updateNo scoretigervncAlmaLinux,tigervnc-iconsAlmaLinux,tigervnc-licenseAlmaLinux +4 more +6 moretigervnc bug fix and enhancement updateNo score- Show moreLoading…