CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- debian linux, linux kernel, canonical ubuntu linux +24 more +26 moreImportant: kernel security, bug fix, and enhancement update7.8 High
- frourioValidation bypass in frourio8.1 High
- frourio frourio-expressValidation bypass in frourio-express8.1 High
- zephyrproject zephyrThe RNDIS USB device class includes a buffer overflow vulnerability8.2 High
- zephyrproject zephyrBuffer overflow in usb device class8.2 High
- neutrinolabs xrdp, fedoraproject fedora +1 morePrivilege escalation on xrdp7.8 High
- quickboxQuickBox Pro v2.4.8 contains a cross-site scripting (XSS) vulnerability at "adminuseredit.php...6.1 Medium
- nvidia virtual gpu, cloud gaming virtual gpu, virtual gpu software and nvidia cloud gaming +2 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where a...5.5 Medium
- nvidia gpu display driver, cloud gaming guest, geforce +6 more +8 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm...5.5 Medium
- xylem aquaviewUse of hardcoded credentials impacting AquaView versions 1.60, 7.x, 8.x9.3 Critical
- apache jamesPath traversal in Apache James 3.6.14.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability7.7 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability6.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Tampering Vulnerability5.3 Medium
- josh kohlbach woocommerce – store exporter, visser store exporter for woocommerce +1 moreWooCommerce – Store Exporter < 2.7.1 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- premio mystickyelements, unknown all-in-one floating contact form, call, chat, and 50+ social icon tabs – my sticky elements +1 moreAll-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)5.4 Medium
- strangerstudios paid memberships proPaid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL Injection9.8 Critical
- ip2location country blocker, unknown ip2location country blocker +1 moreIP2Location Country Blocker < 2.26.6 - Arbitrary Country Ban via CSRF7.1 High
- unknown privacy policy generator, terms & conditions generator wordpress plugin : wplegalpages, wpeka wplegalpages +1 moreWPLegalPages < 2.7.1 - Subscriber+ Arbitrary Settings Update to Stored XSS5.4 Medium
- ivorysearch ivory search, unknown ivory search – wordpress search plugin +1 moreIvory Search < 5.4.1 - Multiple Admin+ Stored Cross-Site Scripting4.8 Medium
- gtranslate translate wordpress with gtranslateGTranslate < 2.9.7 - Reflected Cross-Site Scripting4.7 Medium
- ip2location country blocker, unknown ip2location country blocker +1 moreIP2Location Country Blocker < 2.26.5 - Ban Bypass6.5 Medium
- bracketspace advanced cron manager, unknown advanced cron manager pro +1 moreAdvanced Cron Manager - Subscriber+ Arbitrary Events/Schedules Creation/Deletion4.3 Medium
- unknown store toolkit for woocommerceStore Toolkit for WooCommerce < 2.3.2 - Reflected Cross-Site Scripting6.1 Medium
- cluevo lms, e-learning platform, unknown cluevo lms, e-learning platform, cluevo learning management system +2 moreCluevo < 1.8.1 - Admin+ Stored Cross Site Scripting4.8 Medium
- seur oficial oficial, unknown seur oficial +1 moreSEUR Oficial < 1.7.2 - Admin+ Arbitrary File Download4.9 Medium
- etoilewebdesign ultimate product catalog, unknown ultimate product catalog – wordpress catalog plugin +1 moreUltimate Product Catalog < 5.0.26 - Subscriber+ Arbitrary Product Creation & Settings Update6.5 Medium
- thinkupthemes responsive vector maps, unknown rvm – responsive vector maps +1 moreRVM - Responsive Vector Maps < 6.4.2 - Subscriber+ Arbitrary File Read6.5 Medium
- rearrange woocommerce products project woocommerce products, unknown rearrange woocommerce products +1 moreRearrange Woocommerce Products < 3.0.8 - Subscriber+ SQL Injection6.5 Medium
- supportcandy, unknown supportcandy – helpdesk & support ticket system +1 moreSupportCandy < 2.2.7 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- supportcandy, unknown supportcandy – helpdesk & support ticket system +1 moreSupportCandy < 2.2.7 - CSRF to Cross-Site Scripting8.8 High
- supportcandy, unknown supportcandy – helpdesk & support ticket system +1 moreSupportCandy < 2.2.7 - Reflected Cross-Site Scripting6.1 Medium
- supportcandy, unknown supportcandy – helpdesk & support ticket system +1 moreSupportCandy < 2.2.7 - Arbitrary Ticket Deletion via CSRF6.5 Medium
- supportcandy, unknown supportcandy – helpdesk & support ticket system +1 moreSupportCandy < 2.2.5 - Unauthenticated Arbitrary Ticket Deletion7.5 High
- high resolution streaming image server project resolution streaming image serverIIPImage High Resolution Streaming Image Server prior to commit...7.5 High
- fisco-bcosFISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may...7.5 High
libp2p-corecrates.ioFailure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord`No score- xerox xmpie ustoreXMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries....7.5 High
- otrs ag otrscustomcontactfields, otrs custom contact fields +1 moreDisclosure of mail addresses2.4 Low
- otrsDynamic field error message is vulnerable to XSS3.8 Low
- octopus server, deploy +1 moreIn affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to...6.1 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...6.5 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of special elements in output used by a downstream component ('Injection'...6.5 Medium
- synology mail stationImproper neutralization of special elements used in an OS command ('OS Command Injection')...9.9 Critical
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of special elements used in an SQL command ('SQL Injection')...4.7 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of special elements used in an SQL command ('SQL Injection')...4.7 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of special elements used in an SQL command ('SQL Injection')...4.7 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreExposure of sensitive information to an unauthorized actor vulnerability in Web Server in...5.3 Medium
libredwgOSS-FuzzStack-buffer-overflow in decompress_rNUMBERNo scoreopen62541OSS-FuzzHeap-use-after-free in UA_ServerConfig_cleanNo score- Show moreLoading…