CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- acronis agent, cyber protect 15, cyber protect home office +3 more +5 moreLocal privilege escalation via named pipe due to improper access control checks7.8 High
- acronis cyber protect home office, true image 2021, true image +2 moreLocal privilege escalation due to race condition on application startup7.0 High
- acronis cyber protect home office, true image 2021, true image +2 moreLocal privilege escalation due to DLL hijacking vulnerability7.3 High
- acronis cyber protect home office, true image 2021, true image +2 moreLocal privilege escalation due to unrestricted loading of unsigned libraries7.8 High
- acronis agent, cyber protect 15, cyber protect home office +3 more +5 moreLocal privilege escalation due to excessive permissions assigned to child processes7.8 High
- advantech adam-3600, adam-3600 firmware +1 moreAdvantech ADAM-36009.8 Critical
- ricon industrial cellular router, riconmobile s9922l firmware, s9922xl firmware +2 moreRicon Mobile, Inc.9.1 Critical
- broadcom ca harvest software change managerCA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a...8.8 High
- arista eosIn Arista's EOS software affected releases, eAPI might skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.7.4 High
- yet another stars rating project another stars rating, dario curvino yasr – yet another stars rating (wordpress plugin) +1 moreWordPress Yasr – Yet Another Stars Rating plugin <= 2.9.9 - Cross-Site Scripting (XSS) vulnerability4.7 Medium
- embed swagger swaggerEmbed Swagger <= 1.0.0 Reflected Cross-Site Scripting6.1 Medium
- fotobookFotobook <= 3.2.3 Reflected Cross-Site Scripting6.1 Medium
- codemiq wp html mail, wordpress email template designer +1 moreWP HTML Mail <= 3.0.9 Missing Authorization on REST-API Route8.3 High
- microfocus voltage securemailA potential Information leakage vulnerability has been identified in versions of Micro Focus...6.5 Medium
- debian linux, linux kernel, redhat enterprise linux +2 moreA use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host...5.5 Medium
- abb opc server for ac 800m, 800xa, control software for ac 800m opc server for ac 800m, compact product suite - control and i/o opc server for ac 800m +2 more +4 moreSECURITY - OPC Server for AC 800M - Remote Code Execution Vulnerability8.4 High
- mirantis container cloud lens extensionImproper URL Validation causes Mirantis Container Cloud Lens Extension to open external programs8.8 High
- abb pni800, spiet800, pni800 firmware +1 more +3 moreSECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module7.5 High
- abb pni800, spiet800, pni800 firmware +1 more +3 moreSECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module7.5 High
- abb pni800, spiet800, pni800 firmware +1 more +3 moreSECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module7.5 High
- \[gwa\] autoresponder project autoresponder, g.j.p. [gwa] autoresponder (wordpress plugin) +1 moreWordPress [GWA] AutoResponder plugin <= 2.3 - Unauthenticated SQL Injection (SQLi) vulnerability7.3 High
- hpe flexnetwork 5130 jg932a firmware, flexnetwork 5130 jg933a firmware, flexnetwork 5130 jg934a firmware +4 more +6 moreA potential local buffer overflow vulnerability has been identified in HPE FlexNetwork 5130 EL...7.8 High
- hpe agentless management, proliant agentless management +1 moreA local unquoted search path security vulnerability has been identified in HPE Agentless...6.7 Medium
- vmware cloud foundationVMware Cloud Foundation contains an information disclosure vulnerability due to logging of...4.9 Medium
- amd all supported processors, athlon 3050ge firmware, athlon 3150g firmware +61 more +63 moreWhen combined with specific software sequences, AMD CPUs may transiently execute non-canonical...7.5 High
- amd 1st/2nd/3rd gen amd epyc™ processors, epyc 7001 firmware, epyc 7002 firmware +105 more +107 moreAMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted...5.5 Medium
- amd radeon software, radeon pro software for enterprise, radeon pro software +2 moreAMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged...7.8 High
- sealevel seaconnect 370w firmwareA heap-based buffer overflow vulnerability exists in the OTA Update u-download functionality of...9.0 Critical
- sealevel seaconnect 370w firmwareA file write vulnerability exists in the OTA update task functionality of Sealevel Systems, Inc....8.1 High
- sealevel seaconnect 370w firmwareA misconfiguration exists in the MQTTS functionality of Sealevel Systems, Inc. SeaConnect 370W v1...7.7 High
- foxit, foxit pdf reader +1 moreA memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader,...8.8 High
- foxit, foxit pdf reader +1 moreA use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader,...8.8 High
- sealevel seaconnect 370w firmwareA denial of service vulnerability exists in the SeaMax remote configuration functionality of...8.6 High
- sealevel seaconnect 370w firmwareA denial of service vulnerability exists in the Modbus configuration functionality of Sealevel...8.6 High
- sealevel seaconnect 370w firmwareA stack-based buffer overflow vulnerability exists in the NBNS functionality of Sealevel Systems,...10.0 Critical
- sealevel seaconnect 370w firmwareA stack-based buffer overflow vulnerability exists in both the LLMNR functionality of Sealevel...10.0 Critical
- sealevel seaconnect 370w firmwareAn out-of-bounds write vulnerability exists in the URL_decode functionality of Sealevel Systems,...3.7 Low
- sealevel seaconnect 370w firmwareAn information disclosure vulnerability exists in the Web Server functionality of Sealevel...7.4 High
- sealevel seaconnect 370w firmwareAn out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of...3.7 Low
- sealevel seaconnect 370w firmwareAn out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of...3.7 Low
- kicad eda, debian linux, fedoraproject fedora +2 moreA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon...7.8 High
- kicad eda, debian linux, fedoraproject fedora +2 moreA stack-based buffer overflow vulnerability exists in the Gerber Viewer gerber and excellon...7.8 High
- symfony twig, debian linux, fedoraproject fedora +2 moreCode injection in Twig8.8 High
- emlogEmlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of...9.8 Critical
- xwiki, xwiki xwiki-platform +1 moreCross-Site Request Forgery in xwiki-platform7.5 High
- jpressA remote code execution (RCE) vulnerability in HelloWorldAddonController.java of jpress v4.2.0...8.8 High
- ujcms jspxcmsA vulnerability in ${"freemarker.template.utility.Execute"?new() of UJCMS Jspxcms v10.2.0 allows...9.8 Critical
- argoproj argo cdPath traversal and dereference of symlinks in Argo CD7.7 High
- atftp project atftp, debian linux +1 moreoptions.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server...5.3 Medium
- skratchdot object-path-setPrototype Pollution7.5 High
- Show moreLoading…