CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- linux kernel, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +5 more +7 moreIn gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not...5.5 Medium
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreObservable Discrepancy in snipe/snipe-it5.3 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting in pimcore/pimcore7.6 High
- becton dickinson (bd) bd viper lt system, bd viper lt system firmware +1 moreBD Viper LT System - Hardcoded Credentials8.0 High
libarchiveOSS-FuzzHeap-use-after-free in archive_read_format_rar_read_dataNo scoregithub.com/cli/cliGoGitHub CLI can execute a git binary from the current directoryNo score- gobase project gobase, github.com/ntbosscher/gobase github.com/ntbosscher/gobase/auth/httpauth +1 moreRace condition in github.com/ntbosscher/gobase3.7 Low
github.com/personnummer/goGopersonnummer/go vulnerable to Improper Input ValidationNo score- amazon aws software development kit, github.com/aws/aws-sdk-go github.com/aws/aws-sdk-go/service/s3/s3crypto +1 moreExposure of unencrypted plaintext hash in github.com/aws/aws-sdk-go4.3 Medium
- linuxfoundation harborUnauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030)5.3 Medium
- puma, rubyonrails rails, debian linux +1 more +3 moreInformation Exposure when using Puma with Rails8.0 High
- magnolia-cms magnolia cmsCross-Site Request Forgery in Magnolia CMS8.8 High
- magnolia-cms magnolia cmsImproper Restriction of XML External Entity Reference in Magnolia CMS7.8 High
- magnolia-cms magnolia cmsDeserialization of Untrusted Data in Magnolia CMS7.8 High
- magnolia-cms magnolia cmsArbitrary code execution in Magnolia CMS7.8 High
- magnolia-cms magnolia cmsA Server-Side Template Injection (SSTI) vulnerability in the Registration and Forgotten Password...9.8 Critical
- magnolia-cms magnolia cmsArbitrary code execution in Magnolia CMS9.8 Critical
- patriksimek vm2Sandbox Bypass9.8 Critical
parsec-servicecrates.ioChrono has potential segfault issue in SPIFFE authenticatorNo score- mellium xmppImproper Validation of Certificate with Host Mismatch in mellium.im/xmpp/websocket5.9 Medium
- bd pyxis anesthesia station 4000 firmware, pyxis anesthesia station es firmware, pyxis cato firmware +45 more +47 moreBD Pyxis Products - Hardcoded Credentials7.0 High
- tenda ac9 firmwareA vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42_multi and Tenda AC9 V1.0 V15.03.05...9.8 Critical
- tsg-solutions tokheim profleet dialogTokheim Profleet DiaLOG 11.005.02 is affected by SQL Injection. The component is the...9.8 Critical
- google androidIn startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer...7.5 High
- google androidIn isServiceDistractionOptimized of CarPackageManagerService.java, there is a possible disclosure...5.5 Medium
- google androidIn checkUriPermission of MediaProvider.java , there is a possible way to gain access to the...7.8 High
- acronis vss doctorLocal privilege escalation due to insecure folder permissions7.8 High
- schneider-electric interactive graphical scada system data collectorA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in...7.5 High
- schneider-electric interactive graphical scada system data collectorA CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause...9.1 Critical
- schneider-electric modicon m218 firmwareA CWE-20: Improper Input Validation vulnerability exists that could cause a Denial of Service...7.5 High
- schneider-electric interactive graphical scada system data collectorA CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause...9.1 Critical
- schneider-electric interactive graphical scada system data collectorA CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that...7.5 High
- schneider-electric interactive graphical scada system data collectorA CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead...9.8 Critical
- schneider-electric interactive graphical scada system data collectorA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in...9.8 Critical
- schneider-electric connexium network managerA CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary...9.8 Critical
- schneider-electric fellerlynk firmware, spacelynk firmware, wiser for knx firmware +2 moreA CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data...7.5 High
- schneider-electric conext combox firmwareA CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause Sensitive...7.5 High
- schneider-electric 140cpu65150 firmware, 140noc77101 firmware, 140noc78x00 firmware +11 more +13 moreA CWE-787: Out-of-bounds Write vulnerability exists that could cause denial of service when an...7.5 High
- schneider-electric 140cpu65150 firmware, 140noc77101 firmware, 140noc78x00 firmware +11 more +13 moreA CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of...7.5 High
- schneider-electric 140cpu65150 firmware, 140noc77101 firmware, 140noc78x00 firmware +11 more +13 moreA CWE-200: Information Exposure vulnerability exists that could cause sensitive information of...7.5 High
- schneider-electric c-gate serverA CWE-287: Improper Authentication vulnerability exists that could allow remote code execution...7.8 High
- schneider-electric c-bus toolkitA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...8.8 High
- mitsubishi electric cw configurator, fr configurator2, gx works2 +18 more +20 moreMitsubishi Electric Factory Automation Products Path Traversal8.3 High
- mitsubishi electric c controller interface module utility, cc-link ie control network data collector, cc-link ie field network data collector +52 more +54 moreMitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element8.3 High
- elastic kibanaAn XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an...5.4 Medium
- samsung video playerImproper privilege management vulnerability in Samsung Video Player prior to version 7.3.15.30...4.2 Medium
- samsung smarttagpluginImproper input validation vulnerability in SmartTagPlugin prior to version 1.2.15-6 allows...5.7 Medium
- google android, samsung mobile devices +1 moreImproper input validation vulnerability in SettingsProvider prior to Android S(12) allows...4.4 Medium
- samsung livewallpaperservice, samsung mobile livewallpaper +1 moreAn improper access control in LiveWallpaperService prior to versions 3.0.9.0 allows to create a...2.2 Low
- samsung searchwidgetImproper access control vulnerability in Samsung SearchWidget prior to versions 2.3.00.6 in China...4.0 Medium
- Show moreLoading…