CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- mozilla firefoxBy using XSL Transforms, a malicious webserver could have served a user an XSL document that...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf a user installed an extension of a particular type, the extension could have auto-updated...6.5 Medium
- mozilla firefoxMozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan...8.8 High
- python, fedoraproject fedora, netapp active iq unified manager +10 more +12 moreA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 High
- ocproducts composrAuthenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote...8.8 High
- hyphp hybbs2update_code in Admin.php in HYBBS2 through 2.3.2 allows arbitrary file upload via a crafted ZIP...8.8 High
- hyphp hybbs2Admin.php in HYBBS2 through 2.3.2 allows remote code execution because it writes plugin-related...9.8 Critical
- archisteamfarm project archisteamfarmInadequate access verification when using proxy commands in ArchiSteamFarm5.0 Medium
- std42 elfinderStudio 42 elFinder allows stored XSS5.4 Medium
- giteaCross-site Scripting in Gitea6.1 Medium
- publify publify/publify, publify project publify +1 moreBusiness Logic Errors in publify/publify6.5 Medium
- blog project blogInsufficient file checks in m1k1o/blog8.5 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreAccess of Memory Location Before Start of Buffer in radareorg/radare26.3 Medium
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 moreExposure of Sensitive Information in Grafana4.3 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreAccess of Memory Location After End of Buffer in radareorg/radare26.3 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreUse After Free in radareorg/radare28.8 High
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 moreCross Site Request Forgery in Grafana6.3 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreBuffer Access with Incorrect Length Value in radareorg/radare26.3 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreHeap-based Buffer Overflow in radareorg/radare26.3 Medium
- grafana, fedoraproject fedora, netapp e-series performance analyzer +2 moreCross site scripting in Grafana proxy6.5 Medium
github.com/docker/distributionGoOCI Manifest Type Confusion Issue3.0 Low- radare radare2, radareorg radareorg/radare2 +1 moreUse After Free in radareorg/radare27.1 High
java-1.8.0-openjdkTuxCare,java-1.8.0-openjdk-accessibilityTuxCare,java-1.8.0-openjdk-accessibility-fastdebugTuxCare +17 more +19 moreUpdate of java-1.8.0-openjdk-accessibility, java-1.8.0-openjdk-devel, java-1.8.0-openjdk-headless-slowdebug, java-1.8.0-openjdk-javadoc-zip, java-1.8.0-openjdk-headless-fastdebug, java-1.8.0-openjdk-a…No score- giteaOpen redirect in Gitea6.1 Medium
- samba, debian linux, redhat enterprise linux +4 more +6 moreA flaw was found in the way Samba handled file/directory metadata. This flaw allows an...6.8 Medium
- giteaCapture-replay in Gitea9.8 Critical
- giteaCross Site Request Forgery in Gitea8.8 High
- giteaGitea displaying raw OpenID error in UI7.5 High
- tp-link wn886n firmwareTP-Link WR886N 3.0 1.0.1 Build 150127 Rel.34123n is vulnerable to Buffer Overflow. Authenticated...6.5 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcore4.3 Medium
- rockcarry ffjpegTwo Heap based buffer overflow vulnerabilities exist in ffjpeg through 01.01.2021. It is similar...6.5 Medium
- rockcarry ffjpegGlobal buffer overflow vulnerability exist in ffjpeg through 01.01.2021. It is similar to CVE...6.5 Medium
- joplin project joplinJoplin Vulnerable to Code Injection9.8 Critical
- dataeaseIn DataEase v1.6.1, an authenticated user can gain unauthorized access to all user information...8.8 High
structoptcrates.io`structopt` is in maintenance modeNo score- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore6.6 Medium
- chocobozzz chocobozzz/peertube, framasoft peertube +1 moreServer-Side Request Forgery (SSRF) in chocobozzz/peertube6.5 Medium
- dounokouno transmitmailCross-site scripting vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated...6.1 Medium
- econosys system php mailformReflected cross-site scripting vulnerability in the checkbox of php_mailform versions prior to...6.1 Medium
- econosys system php mailformReflected cross-site scripting vulnerability in the attached file name of php_mailform versions...6.1 Medium
- elecom wrc-300febk-r firmware, elecom co.,ltd. lan router +1 moreCross-site scripting vulnerability in ELECOM LAN router WRC-300FEBK-R firmware v1.13 and earlier...5.2 Medium
- plus one csv+, csv\+ project csv\+ +1 moreCross-site scripting vulnerability in CSV+ prior to 0.8.1 allows a remote unauthenticated...9.6 Critical
- dounokouno transmitmailDirectory traversal vulnerability in TransmitMail 2.5.0 to 2.6.1 allows a remote unauthenticated...7.5 High
- elecom wrh-300bk3-s firmware, wrh-300bk3 firmware, wrh-300dr3-s firmware +6 more +8 moreHidden functionality vulnerability in ELECOM LAN routers (WRH-300BK3 firmware v1.05 and earlier,...8.8 High
- canon 2204f, 2204n, 2206if +32 more +34 moreCross-site scripting vulnerability in Canon laser printers and small office multifunctional...4.8 Medium
- microweber, microweber microweber/microweber +1 moreGeneration of Error Message Containing Sensitive Information in microweber/microweber6.5 Medium
- microweber, microweber microweber/microweber +1 moreCross-Site Request Forgery (CSRF) in microweber/microweber5.7 Medium
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Stored in microweber/microweber7.7 High
- linuxfoundation nats-server, nats streaming server +1 moreIncorrect Authorization in NATS nats-server8.8 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreUse After Free in radareorg/radare28.8 High
- Show moreLoading…