CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- samsung bixby visionExposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows...4.0 Medium
- samsung link sharingImproper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers...4.0 Medium
- google android, samsung mobile devices +1 moreInformation disclosure vulnerability in Edge Panel prior to Android S(12) allows physical...3.8 Low
- google android, samsung mobile devices +1 morePendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release...3.9 Low
- google android, samsung mobile devices +1 morePendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local...3.9 Low
- samsung cameraImproper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R(11), 10...6.2 Medium
- samsung wear os, samsung mobile wearable devices +1 moreUnprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to...4.0 Medium
- samsung wear os, samsung mobile wearable devices +1 moreUnprotected component vulnerability in StTheaterModeReceiver in Wear OS 3.0 prior to Firmware...4.0 Medium
- samsung wear os, samsung mobile wearable devices +1 moreUnprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to...4.0 Medium
- samsung wear os, samsung mobile wearable devices +1 moreAn Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to...3.3 Low
- samsung bixby, samsung mobile bixby vision +1 moreA vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12),...4.4 Medium
- samsung reminderImproper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12)...4.3 Medium
- google android, samsung mobile devices with exynos chipsets +1 moreAn improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release...6.4 Medium
- google android, samsung mobile devices with exynos chipsets +1 moreAn improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory...6.4 Medium
- google android, samsung mobile devices +1 moreAn improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers...5.3 Medium
- google android, samsung mobile devices with exynos chipsets +1 moreAn improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows...8.4 High
- google android, samsung mobile devices +1 morePendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release...3.9 Low
- google android, samsung mobile devices +1 moreA vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1...4.4 Medium
- google android, samsung mobile devices +1 moreImproper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to...8.6 High
- google android, samsung mobile devices +1 moreUnprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted...7.1 High
- google android, samsung mobile devices +1 moreLogging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows...5.5 Medium
- tcman gimTCMAN GIM Cross-Site Scripting (XSS)5.4 Medium
- a3sec wocu monitoringWocu Monitoring stored Cross-Site Scripting (XSS)3.5 Low
- nokia bts trs web consoleNokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. A malicious...9.8 Critical
- s-cartPath Traversal in S-Cart4.4 Medium
- fastify fastify-multipartDenial of Service (DoS)7.5 High
- projeqtorA Cross Site Scripting (XSS) vulnerability exists in Projeqtor 9.3.1 via /projeqtor/tool...9.9 Critical
- rockcarry ffjpegA Null Pointer Dereference vulnerability exits in ffjpeg d5cfd49 (2021-12-06) in bmp_load(). When...6.5 Medium
- drupal core, drupal +1 moreAccess bypass in Drupal Core 8/96.1 Medium
- phpgurukul dairy farm shop management systemDairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the...9.8 Critical
- linux kernelThe check_alu_op() function in kernel/bpf/verifier.c in the Linux kernel through v5.16-rc5 did...5.5 Medium
- linn products limited kazoo serverImproper Authentication in Kazoo Server6.5 Medium
- microweber, microweber microweber/microweber +1 moreOpen Redirect in microweber/microweber4.3 Medium
- factorfx ocs inventoryOCS Inventory 2.9.1 is affected by Cross Site Scripting (XSS). To exploit the vulnerability, the...5.4 Medium
- apache cayenneDeserialization of untrusted data in the Hessian Component of Apache Cayenne 4.1 with older Java versions8.8 High
- apache apisixapisix/batch-requests plugin allows overwriting the X-REAL-IP header9.8 Critical
- apache cassandraRemote code execution for scripted UDFs9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +51 more +53 morePossible assertion due to improper size validation while processing the DownlinkPreemption IE in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +99 more +101 moreImproper validation of maximum size of data write to EFS file can lead to memory corruption in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +96 more +98 morePossible out of bounds write due to improper validation of number of GPIOs configured in an...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +135 more +137 moreImproper validation of input when provisioning the HDCP key can lead to memory corruption in...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +112 more +114 moreImproper validation of program headers containing ELF metadata can lead to image verification...9.3 Critical
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm mdm9650 firmware, qca6174a firmware +41 more +43 moreImproper size validation of QXDM commands can lead to memory corruption in Snapdragon Compute,...7.8 High
- microweber, microweber microweber/microweber +1 moreOS Command Injection in microweber/microweber8.1 High
linuxUbuntu,linux-awsUbuntu,linux-aws-5.4Ubuntu +13 more +15 morelinux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-ibm, linux-kvm, linux-oracle, linu…No score- portainerIn Portainer Agent before 2.11.1, an API server can continue running even if not associated with...9.8 Critical
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moredrivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.7.8 High
- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in...5.5 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer...9.8 Critical
- foxit pdf editor, pdf reader +1 moreFoxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search...9.8 Critical
- Show moreLoading…