CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- siemens spectrum power 4A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch...6.1 Medium
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0)....6.1 Medium
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
- siemens sicam toolbox iiA vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use...6.5 Medium
- siemens jt2go, solid edge se2021, solid edge se2022 +5 more +7 moreA vulnerability has been identified in JT2Go (All versions), Solid Edge SE2021 (All versions <...7.8 High
- siemens jt2go, solid edge se2021, solid edge se2022 +5 more +7 moreA vulnerability has been identified in JT2Go (All versions), Solid Edge SE2021 (All versions <...7.8 High
- siemens jt2go, solid edge se2021, solid edge se2022 +5 more +7 moreA vulnerability has been identified in JT2Go (All versions), Solid Edge SE2021 (All versions <...7.8 High
- siemens simatic pcs 7 v8.2, simatic pcs 7 v9.0, simatic pcs 7 v9.1 +7 more +9 moreA vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS...7.8 High
- siemens simatic pcs 7 v8.2, simatic pcs 7 v9.0, simatic pcs 7 v9.1 +7 more +9 moreA vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS...8.8 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic s7-1200 cpu family (incl. siplus variants) +52 more +54 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...7.5 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc (incl. siplus variants), simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +54 more +56 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...7.5 High
- siemens comos, comos v10.2, comos v10.3 +1 more +3 moreA vulnerability has been identified in COMOS V10.2 (All versions only if web components are used)...7.5 High
- siemens simatic drive controller family, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic s7-1200 cpu family (incl. siplus variants) +52 more +54 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.4),...7.5 High
- chatwoot, chatwoot chatwoot/chatwoot +1 moreImproper Privilege Management in chatwoot/chatwoot6.5 Medium
- beanstalk console project console, ptrofimov ptrofimov/beanstalk console +1 moreCross-site Scripting (XSS) - Stored in ptrofimov/beanstalk_console6.3 Medium
- jenkinsDoS vulnerability in bundled XStream library in Jenkins Core7.5 High
- cybelesoft thinfinity virtualuiThinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an...7.5 High
- tastyigniterA Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The ...5.4 Medium
- arangodbArangoDB - Blind SSRF when Downloading Foxx Service from URL2.7 Low
- f-secure atlant, elements endpoint detection and response, elements endpoint protection +4 more +6 moreDenial-of-Service (DoS) Vulnerability4.6 Medium
- follow-redirects follow-redirects/follow-redirects, follow-redirects project follow-redirects +1 moreImproper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirects2.6 Low
dotnetAlmaLinux,aspnetcore-runtime-5.0AlmaLinux,aspnetcore-runtime-6.0AlmaLinux +17 more +19 moreImportant: .NET 5.0 security and bugfix updateNo score- microsoft .net, fedoraproject fedora, microsoft .net 5.0 +7 more +9 more.NET Denial of Service Vulnerability7.5 High
- eset endpoint antivirus, endpoint security, endpoint antivirus for windows +23 more +25 moreLPE in ESET products for Windows7.8 High
- maharaIn Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of...4.3 Medium
- chatwoot, chatwoot chatwoot/chatwoot +1 moreCross-site Scripting (XSS) - Stored in chatwoot/chatwoot6.1 Medium
- chatwoot, chatwoot chatwoot/chatwoot +1 moreCross-site Scripting (XSS) - Stored in chatwoot/chatwoot7.3 High
- mruby, mruby mruby/mruby +1 moreOut-of-bounds Read in mruby/mruby8.4 High
- synacor zimbra collaboration suite, zimbra collaborate suite (zcs) +1 moreAn issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15...6.1 Medium
libredwgOSS-FuzzHeap-buffer-overflow in dwg_free_HATCH_privateNo score- schneider-electric fellerlynk firmware, spacelynk firmware, wiser for knx firmware +2 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow...5.3 Medium
- schneider-electric hmibscea53d1edb firmware, hmibscea53d1edl firmware, hmibscea53d1edm firmware +4 more +6 moreA CWE-942: Permissive Cross-domain Policy with Untrusted Domains vulnerability exists that could...8.8 High
- schneider-electric hmibscea53d1edb firmware, hmibscea53d1edl firmware, hmibscea53d1edm firmware +4 more +6 moreA CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could...7.4 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWeb-accessible extension pages (pages with a moz-extension:// scheme) were not correctly...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen importing resources using Web Workers, error messages would distinguish the difference...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently...9.6 Critical
- mozilla firefoxRemote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf a user was convinced to drag and drop an image to their desktop or other folder, the resulting...8.8 High
- Show moreLoading…