CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
md4cOSS-FuzzHeap-buffer-overflow in md_analyze_inlinesNo score- google chromeInappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote...4.3 Medium
- twisted, debian linux, fedoraproject fedora +2 moreCookie and header exposure in twisted7.5 High
- google chromeOut of bounds memory access in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote...8.8 High
- google chromeUse after free in Cast in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who...8.8 High
- google chromeUse after free in Payments in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to...8.8 High
- google chromeInappropriate implementation in Pointer Lock in Google Chrome on Windows prior to 98.0.4758.80...8.8 High
- google chromeInappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80...9.6 Critical
- google chromeUse after free in Extensions in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to...8.8 High
- google chromeUse after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker...8.8 High
- google chromeUse after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker...8.8 High
- google chromeInappropriate implementation in Scroll in Google Chrome prior to 98.0.4758.80 allowed a remote...6.5 Medium
- google chromePolicy bypass in COOP in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to bypass...6.5 Medium
- google chromeUse after free in Window Dialogue in Google Chrome prior to 98.0.4758.80 allowed a remote...8.8 High
- google chromeUse after free in Screen Capture in Google Chrome prior to 98.0.4758.80 allowed a remote attacker...8.8 High
- google chromeUse after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to...8.8 High
- google chromeUse after free in Web Search in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to...8.8 High
- google chromeInappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 98.0.4758...6.5 Medium
- google chromeHeap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to...8.8 High
- google chromeUse after free in Reader Mode in Google Chrome prior to 98.0.4758.80 allowed a remote attacker...8.8 High
- google chromeUse after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker...9.6 Critical
- ip2location country blocker, unknown ip2location country blocker +1 moreIP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country Ban7.1 High
- servisnet tessaAn issue was discovered in Servisnet Tessa 0.0.2. An attacker can obtain sensitive information...7.5 High
- servisnet tessaAn issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an...9.8 Critical
- servisnet tessaAn issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a...9.8 Critical
- korenix jetwave 2212g firmware, jetwave 2212s firmware, jetwave 2212x firmware +3 more +5 moreCertain Korenix JetWave devices allow authenticated users to execute arbitrary code as root via ...8.8 High
- starwindsoftware iscsi sanStarWind iSCSI SAN before 3.5 build 2007-08-09 allows socket exhaustion.7.5 High
- starwindsoftware iscsi sanStarWind iSCSI SAN before 6.0 build 2013-03-20 allows a memory leak.9.8 Critical
- starwindsoftware nas, san +1 moreStarWind SAN and NAS before 0.2 build 1685 allows users to reset other users' passwords.8.8 High
- starwindsoftware nas, san +1 moreStarWind SAN and NAS before 0.2 build 1685 allows remote code execution via a virtual disk...9.8 Critical
- apache traffic controlServer-Side Request Forgery in Traffic Ops endpoint POST /user/login/oauth7.5 High
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat6.5 Medium
grpc-swiftOSS-FuzzInvalid-free in NIOHTTP2.NIOHTTP2Handler.No score- debian permperM 0.4.0 has a Buffer Overflow related to strncpy. (Debian initially fixed this in 0.4.0-7.)9.8 Critical
- beanstalk console project console, ptrofimov ptrofimov/beanstalk console +1 moreCross-site Scripting (XSS) - Reflected in ptrofimov/beanstalk_console8.6 High
- crossbeam-rs crossbeamImproper Restriction of Operations within the Bounds of a Memory Buffer and Race Condition in crossbeam-utils8.1 High
- karma-runner karma-runner/karma, karma project karma +1 moreCross-site Scripting (XSS) - DOM in karma-runner/karma5.4 Medium
ghostscriptOSS-FuzzHeap-buffer-overflow in s_hex_processNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_strncasestrNo score- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreDenial of Service and Data Integrity vulnerability in features command5.4 Medium
- ibm openbmc, hmc, power hardware management console \(7063-cr2\) firmware +2 more +4 moreIBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive...5.3 Medium
- silicon labs z-wave, silabs zgm130s037hgn firmware, zgm2305a27hgn firmware +3 more +5 moreThe Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure...8.1 High
- sierra designs z-wave, silabs zgm130s037hgn firmware, zgm2305a27hgn firmware +3 more +5 moreZ-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a...8.3 High
- apache artemis, apache software foundation activemq artemis, netapp active iq unified manager +1 more +3 moreApache ActiveMQ Artemis DoS7.5 High
- mruby, mruby mruby/mruby +1 moreNULL Pointer Dereference in mruby/mruby5.5 Medium
- trend micro worry-free business security, trend micro, inc. micro worry-free business security +1 moreA security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free...7.1 High
- apache gobblinInsecure TrustManager used in LDAP connections9.8 Critical
- apache gobblinLocal Credentials Disclosure Vulnerability5.5 Medium
- bildsben itunesrpc-remasteredPath traveresal in iTunesRPC-Remastered8.3 High
- Show moreLoading…