CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- tenda ax12 firmwareA Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4...7.5 High
- antd-admin project antd-adminantd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to...7.5 High
- hashicorp nomadHashiCorp Nomad Artifact Download Race Condition5.9 Medium
- emerson dixell xweb-500 firmware** UNSUPPORTED WHEN ASSIGNED ** Emerson Dixell XWEB-500 products are affected by arbitrary file...9.8 Critical
- emerson dixell xweb-500 firmware** UNSUPPORTED WHEN ASSIGNED ** Emerson Dixell XWEB-500 products are affected by information...7.5 High
- polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 moreThere is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to...5.5 Medium
permissionsSUSE,rpmlint-miniSUSE +1 moreSecurity update for permissionsNo score- custom popup builder project popup builder, unknown popup | custom popup builder +1 morePopup | Custom Popup Builder < 1.3.1 - Unauthenticated Denial of Service7.5 High
- 10web spidercalendarSpiderCalendar <= 1.5.65 - Reflected Cross-Site Scripting6.1 Medium
- mappresspro mappress, unknown mappress maps for wordpress +1 moreMapPress Maps for WordPress < 2.73.4 - Reflected Cross-Site scripting6.1 Medium
- ice00 newstatpressNewStatPress < 1.3.6 - Reflected Cross-Site Scripting6.1 Medium
- maciej bis permalink manager lite, permalink manager pro, permalink manager lite project manager lite +1 more +3 morePermalink Manager < 2.2.15 - Reflected Cross-Site Scripting6.1 Medium
- themify portfolio post, themifyme themify portfolio post +1 moreThemify Portfolio Post < 1.1.7 - Reflected Cross-Site Scripting5.4 Medium
- really-simple-plugins complianz, complianz – gdpr/ccpa cookie consent, unknown complianz – gdpr/ccpa cookie consent +2 moreComplianz - GDPR/CCPA Cookie Consent < 6.0.0 - Reflected Cross-Site Scripting6.1 Medium
- acnam ad invalid click protector, unknown ad invalid click protector (aicp) +1 moreAd Invalid Click Protector (AICP) < 1.2.6 - Authenticated SQL Injection8.8 High
- niteothemes cmpComing Soon & Maintenance Plugin by NiteoThemes < 4.0.19 - Unauthenticated Arbitrary CSS Update5.3 Medium
- ideaboxcreations powerpack lite for beaver builder, ideabox powerpack for beaver builder +1 morePowerPack Lite for Beaver Builder < 1.2.9.3 - Reflected Cross-Site Scripting6.1 Medium
- opajaap wp photo album plusWP Photo Album Plus < 8.0.10 - Stored Cross-Site Scripting (XSS)6.4 Medium
- futuriowp futurio extraFuturio Extra < 1.6.3 - Subscriber+ User Email Address Disclosure4.3 Medium
- futuriowp futurio extraFuturio Extra < 1.6.3 - Authenticated SQL Injection2.7 Low
- accesspressthemes form store to dbForm Store to DB < 1.1.1 - Unauthenticated Stored Cross-Site Scripting6.1 Medium
- unknown remove footer creditRemove Footer Credit < 1.0.11 - Admin+ Stored Cross-Site Scripting4.8 Medium
- noptin, unknown wordpress newsletter plugin – noptin +1 moreNoptin < 1.6.5 - Open Redirect6.1 Medium
- najeebmedia ppom for woocommercePPOM for WooCommerce < 24.0 - Subscriber+ Settings Update to Stored XSS5.4 Medium
- vowelweb ibtana, unknown ibtana – wordpress website builder +1 moreIbtana < 1.1.4.9 - Subscriber+ Settings Update to Stored XSS3.5 Low
- lenderd mortgage calculators wpMortgage Calculators WP < 1.56 - Admin+ Stored Cross-Site Scripting4.8 Medium
- brevo newsletter, smtp, email marketing and subscribe forms by sendinblue, newsletter\, smtp\, email marketing and subscribe +1 moreNewsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site Scripting6.1 Medium
- unknown remove footer creditRemove Footer Credit < 1.0.6 - CSRF to Stored Cross-Site Scripting5.4 Medium
- accellion managed file transferKiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed...6.5 Medium
open62541OSS-FuzzHeap-buffer-overflow in extensionObjectOrderNo scorelibcoapOSS-FuzzHeap-buffer-overflow in coap_split_uri_subNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in read_xref_stream_entriesNo score- wireshark, debian linux, fedoraproject fedora +2 moreInfinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows...6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreCrash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows...6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreUnaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11...6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreCrash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial...6.3 Medium
- unshiftio unshiftio/url-parse, url-parse project url-parse +1 moreAuthorization Bypass Through User-Controlled Key in unshiftio/url-parse8.8 High
- sqlite, netapp ontap select deploy administration utility +1 moreA Memory Leak vulnerabilty exists in SQLite Project SQLite3 3.35.1 and 3.37.0 via maliciously...4.3 Medium
- librenms, librenms librenms/librenms +1 moreCross-site Scripting (XSS) - Stored in librenms/librenms5.4 Medium
- librenms, librenms librenms/librenms +1 moreCross-site Scripting (XSS) - Generic in librenms/librenms5.4 Medium
- phoronix-test-suite phoronix-test-suite/phoronix-test-suite, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreCross-site Scripting (XSS) - Reflected in phoronix-test-suite/phoronix-test-suite6.8 Medium
- impresscmsPath Traversal in ImpressCMS9.8 Critical
- athemeAtheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication...9.1 Critical
- zsh, apple mac os x, macos +2 more +4 moreIn zsh before 5.8.1, an attacker can achieve code execution if they control a command output...7.8 High
- mruby, mruby mruby/mruby +1 moreHeap-based Buffer Overflow in mruby/mruby8.4 High
libplistOSS-FuzzHeap-buffer-overflow in parse_primitiveNo scorednsmasqOSS-FuzzHeap-use-after-free in dhcp6_no_relayNo scorednsmasqOSS-FuzzHeap-buffer-overflow in print_macNo scorefluent-bitOSS-FuzzSegv on unknown address in onig_free_bodyNo score- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vim8.4 High
- Show moreLoading…