CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- tp-link tl-wr841n, tl-wr841n firmware +1 moreVulnerability in TP-LinK TL-WR841N wireless router8.4 High
- tobesoft nexacro, tobesoft co., ltd nexacro 17 +1 moretobesoft nexacro arbitrary file creation vulnerability8.1 High
- sap solution manager, sap se solution manager (diagnostics root cause analysis tools) +1 moreSolution Manager (Diagnostics Root Cause Analysis Tools) - version 720, allows an administrator...9.1 Critical
- sap se business objects web intelligence (bi launchpad), sap businessobjects web intelligence +1 moreDue to improper HTML encoding in input control summary, an authorized attacker can execute XSS...5.4 Medium
- sap se netweaver application server abap and abap platform, sap netweaver abap +1 moreA high privileged user who has access to transaction SM59 can read connection details stored with...4.9 Medium
- sap se netweaver application server for abap (kernel) and abap platform (kernel), sap netweaver abap, netweaver as abap +2 moreSAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7...7.5 High
- sap s\/4hana, sap se s/4hana (supplier factsheet and enterprise search for business partner, supplier and customer) +1 moreS/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business...6.5 Medium
- sap 3d visual enterprise viewerWhen a user opens a manipulated JPEG file format (.jpg, 2d.x3d) received from untrusted sources...6.5 Medium
- sap se netweaver as abap (workplace server), sap netweaver application server abap +1 moreSAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753,...7.5 High
- sap content server, netweaver application server abap, web dispatcher +2 more +4 moreSAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP...10.0 Critical
- sap 3d visual enterprise viewerWhen a user opens a manipulated Adobe Illustrator file format (.ai, ai.x3d) received from...6.5 Medium
- sap 3d visual enterprise viewerWhen a user opens a manipulated Tagged Image File Format (.tiff, 2d.x3d)) received from untrusted...6.5 Medium
- sap erp human capital management, sap se erp hcm (portugal) +1 moreSAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks...6.5 Medium
- sap netweaver, sap se netweaver (abap and java application servers) +1 moreDue to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to...6.1 Medium
- sap netweaver application server javaDue to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22...7.5 High
- sap netweaver application server javaIn SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22...9.8 Critical
- sap adaptive server enterpriseSAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system...7.8 High
- apple swiftnio http\/2, swift project swiftnio http2 +1 moreswift-nio-http2 vulnerable to denial of service via ALTSVC or ORIGIN frames7.5 High
- apple swiftnio http\/2, swift project swiftnio http2 +1 moreswift-nio-http2 vulnerable to denial of service via mishandled HPACK variable length integer encoding7.5 High
- apple swiftnio http\/2, swift project swiftnio http2 +1 moreswift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length7.5 High
- zoom meetings, zoom video communications inc client for meetings for android, client for meetings for ios +3 more +5 moreZoom Chat Susceptible to Zip Bombing4.7 Medium
- keybase, zoom video communications inc keybase client for macos, keybase client for windows +2 moreRetained exploded messages in Keybase clients for macOS and Windows3.7 Low
- gitlabAn authorization logic error in the External Status Check API in GitLab EE affecting all versions...4.3 Medium
- kubernetes cri-o, redhat openshift container platform +1 moreIncorrect Permission Assignment for Critical Resource in CRI-O4.2 Medium
- schneider-electric clearscada, ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +2 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...7.5 High
- schneider-electric vijeo designer, hmibmiea5dd1001 firmware, hmibmiea5dd100a firmware +34 more +36 moreA CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized...7.8 High
- schneider-electric clearscada, ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +2 moreA CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in...5.9 Medium
- schneider-electric clearscada, ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +2 moreA CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in...5.9 Medium
- schneider-electric clearscada, ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +2 moreA CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted...7.5 High
- schneider-electric fellerlynk firmware, spacelynk firmware, wiser for knx firmware +2 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...6.1 Medium
- schneider-electric fellerlynk firmware, spacelynk firmware, wiser for knx firmware +2 moreA CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could induce users to...8.1 High
- schneider-electric fellerlynk firmware, spacelynk firmware, wiser for knx firmware +2 moreA CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that...9.8 Critical
- schneider-electric easergy p141 firmware, easergy p142 firmware, easergy p143 firmware +30 more +32 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the...9.8 Critical
- schneider-electric interactive graphical scada system data serverA CWE-862: Missing Authorization vulnerability exists that could cause information exposure when...7.5 High
- schneider-electric interactive graphical scada system data serverA CWE-665: Improper Initialization vulnerability exists that could cause information exposure...7.5 High
- schneider-electric interactive graphical scada system data serverA CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an...7.5 High
- schneider-electric interactive graphical scada system data serverA CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially...7.5 High
- schneider-electric interactive graphical scada system data serverA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...9.8 Critical
- schneider-electric interactive graphical scada system data serverA CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that...9.8 Critical
- schneider-electric interactive graphical scada system data serverA CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that...9.8 Critical
- schneider-electric interactive graphical scada system data serverA CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer...9.8 Critical
- intel quartus primeImproper restriction of XML external entity for Intel(R) Quartus(R) Prime Pro Edition before...7.8 High
- intel trace analyzer and collectorUncaught exception in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow...5.5 Medium
- intel quartus primeImproper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R)...7.5 High
- intel trace analyzer and collectorOut-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow...5.5 Medium
- intel quartus primeImproper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard...7.8 High
- intel smart campusImproper access control in the Intel(R) Smart Campus Android application before version 6.1 may...5.5 Medium
- intel quartus primeImproper permissions for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an...7.8 High
- intel trace analyzer and collectorAccess of uninitialized pointer in the Intel(R) Trace Analyzer and Collector before version 2021...5.5 Medium
- intel quartus primeImproper input validation in a third-party component for Intel(R) Quartus(R) Prime Pro Edition...7.8 High
- Show moreLoading…