CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- golang go, netapp beegfs csi driver, cloud insights telegraf agent +2 more +4 morecmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely...7.5 High
- golang go, debian linux, netapp beegfs csi driver +3 more +5 moreRat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can...7.5 High
curlOSS-FuzzHeap-use-after-free in nghttp2_hd_deflate_hd_bufsNo scorecurlOSS-FuzzHeap-use-after-free in nghttp2_http_record_request_methodNo score- git-scm gitThe --mirror documentation for Git through 2.35.1 does not mention the availability of deleted...7.5 High
- kde kate, ktexteditor +1 moreThe LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91...7.8 High
- golang go, debian linux, netapp beegfs csi driver +3 more +5 moreCurve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly...9.1 Critical
- rails, debian linux +1 moreExposure of sensitive information in Action Pack7.4 High
- apple ipados, macos, safari +4 more +6 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...8.8 High
- apple ipados, macos, safari +5 more +7 moreA validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15...6.1 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreNull source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in...5.5 Medium
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreNull source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in...5.5 Medium
- broadcom tcpreplaytcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv4() at tree.c.5.5 Medium
- broadcom tcpreplaytcpreplay 4.3.4 has a Reachable Assertion in add_tree_ipv6() at tree.c5.5 Medium
- debian debian-edu-config, linux +1 moreIt was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu...9.8 Critical
- cuppacmsCuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink(...8.1 High
- phpgurukul hospital management systemHospital Management System v4.0 was discovered to contain a SQL injection vulnerability in ...7.5 High
- taogogo taocmsTaocms v3.0.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the...4.8 Medium
terminal42/contao-tablelookupwizardPackagistPossible SQL injection in tablelookupwizard Contao Extension9.8 Critical- ping identity pingfederatePing Identity PingFederate Password Reset and Password Change Mishandling with an authentication policy in parallel reset flows5.3 Medium
- gradleDependency verification bypass in Gradle7.5 High
- optimism eth-optimism\/l2gethOptimism before @eth-optimism/l2geth@0.5.11 allows economic griefing because a balance is...7.5 High
- xxyopen novel-plusNovel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user...9.8 Critical
- statamicA Code Execution vulnerability exists in Statamic Version through 3.2.26 via SettingsController.php.9.8 Critical
- amd xilinx z-7007s firmware, xilinx z-7010 firmware, xilinx z-7012s firmware +7 more +9 moreOn Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer...6.8 Medium
- xerox xmpie ustoreA persistent cross-site scripting (XSS) vulnerability exists on two input fields within the...4.8 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon3.3 Low
- palo alto networks cortex xsoarCortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface6.8 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux4.7 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled6.1 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation7.0 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon7.4 High
- palo alto networks pan-os, prisma access +1 morePAN-OS: URL Category Exceptions Match More URLs Than Intended in URL Filtering6.5 Medium
- piwigoCross Site Scripting (XSS) vulnerability exists in Piwigo 12.x via the pwg_activity function in...6.1 Medium
- cisco prime service catalogCisco Prime Service Catalog Information Disclosure Vulnerability4.3 Medium
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco DNA Center Information Disclosure Vulnerability4.4 Medium
- cisco small business rv160, rv260, rv340, and rv345 series routers, small business rv series router firmware, rv340 firmware +3 more +5 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
- cisco small business rv160, rv260, rv340, and rv345 series routers, small business rv series router firmware, rv160 firmware +8 more +10 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
- cisco small business rv160, rv260, rv340, and rv345 series routers, small business rv series router firmware, rv340 firmware +3 more +5 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
- cisco small business rv series router firmware, rv160 firmware, rv160w firmware +7 more +9 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
- cisco small business rv series router firmware, rv160 firmware, rv160w firmware +7 more +9 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
- cisco small business rv160, rv260, rv340, and rv345 series routers, small business rv series router firmware, rv160 firmware +8 more +10 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
- cisco small business rv series router firmware, rv160 firmware, rv160w firmware +7 more +9 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
- cisco small business rv series router firmware, rv160 firmware, rv160w firmware +7 more +9 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
- cisco small business rv160, rv260, rv340, and rv345 series routers, small business rv series router firmware, rv340 firmware +3 more +5 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco Small Business RV Series Routers Vulnerabilities10.0 Critical
- Show moreLoading…