CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- atlassian data center, jira, jira server +1 more +3 moreAffected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers...4.3 Medium
github.com/github/git-sizerGoOn Windows, `git-sizer` might run a `git` executable within the repository being analyzedNo score- github.com/flynn/noise, noiseprotocol noise +1 moreWeak encryption and denial of service in github.com/flynn/noise7.5 High
- hashicorp nomadHashicorp Nomad Information Exposure Through Environmental Variables5.3 Medium
- No product listedImproper Input Validation in yargs-parser5.3 Medium
- atlassian jira server, jira data center +1 moreAffected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers...4.3 Medium
- libexpat project libexpat, debian linux, oracle http server +5 more +7 morexmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator...9.8 Critical
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 morexmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as...9.8 Critical
- jenkins project pipeline: multibranch plugin, jenkins pipeline\ +1 moreLink Following in Jenkins Pipeline Multibranch Plugin6.5 Medium
- jenkins project pipeline: multibranch plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Multibranch Plugin vulnerable to OS Command Injection8.8 High
- boltwireA cross-site scripting (XSS) vulnerability in BoltWire v7.10 allows attackers to execute...6.1 Medium
- fedoraproject extra packages for enterprise linux, fedora, prometheus client golang +1 more +3 moreUncontrolled Resource Consumption in promhttp7.5 High
- microweber, microweber microweber/microweber +1 moreImproper Validation of Specified Quantity in Input in microweber/microweber5.4 Medium
- svgppIn SVGPP SVG++ library 1.3.0, the XMLDocument::getRoot function in the renderDocument function...6.5 Medium
- nvidia license systemNVIDIA License System contains a vulnerability in the installation scripts for the DLS virtual...5.4 Medium
- librenms, librenms librenms/librenms +1 moreIncorrect Authorization in librenms/librenms7.1 High
- f5 njsnjs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a...9.8 Critical
- f5 njsnjs through 0.7.0, used in NGINX, was discovered to contain a heap use-after-free in...9.8 Critical
- f5 njsnjs through 0.7.1, used in NGINX, was discovered to contain a segmentation violation via...7.5 High
- nginx njsnjs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via...9.8 Critical
- artifex mujsArtifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by...9.8 Critical
- darylldoyle svg-sanitizerCross-site Scripting in svg-sanitizer6.2 Medium
- broadcom xcom data transportXCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to...9.8 Critical
- accel-pppBuffer Overflow via Crafted Ipv6 Prefix Attribute Type Client Request in accel-ppp v1.129.8 Critical
- accel-pppBuffer Overflow via Crafted IPv6 Addr Attribute Type Client Request in Accel-PPP v1.129.8 Critical
- forgerock access managementPre-authentication session hijacking9.6 Critical
- axis ip utilityAXIS IP Utility prior to 4.17.0 allows for remote code execution and local privilege escalation...7.8 High
- pybbs project pybbsA cross-site scripting (XSS) vulnerability in Pybbs v6.0 allows attackers to execute arbitrary...6.1 Medium
- diyhi bbs forumAn issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary...9.8 Critical
- publiccmsPublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the...9.8 Critical
- k-boxStored Cross-Site-Scripting (XSS) in Markdown Editor6.1 Medium
- tongda2000 tongda office anywhereTongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobile_seal...9.8 Critical
- tongda2000 tongda office anywhereTongda2000 v11.10 was discovered to contain a SQL injection vulnerability in export_data.php via...9.8 Critical
- dedecmsDedeCMS v5.7.87 was discovered to contain a SQL injection vulnerability in article_coonepage_rule...9.8 Critical
- s-cmsS-CMS v5.0 was discovered to contain a SQL injection vulnerability in member_pay.php via the O_id...9.8 Critical
- metinfoMetinfo v7.5.0 was discovered to contain a SQL injection vulnerability in language_general.class...9.8 Critical
- metinfoMetinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameter_admin.class...9.8 Critical
- sangoma switchvoxSangoma Technologies Corporation Switchvox Version 102409 is affected by an information...5.3 Medium
- r3 cordaIn Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled...7.5 High
- enterprisedt completeftp serverCompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code...8.8 High
- compassplus tranzware online, tranzware online financial institution maintenance interface +1 moreA Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface...6.1 Medium
- attendance management system project management systemAn Arbitrary File Deletion vulnerability exists in SourceCodester Attendance Management System v1...7.5 High
- galois 2p8 project 2p8Buffer Overflow in galois_2p89.8 Critical
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreMissing Authorization in snipe/snipe-it6.5 Medium
- malwarebytes binisoft windows firewall controlIn Malwarebytes Binisoft Windows Firewall Control before 6.8.1.0, programs executed from the...7.8 High
- zzcmsAn Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass...7.5 High
- fulusso project fulussoFulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in ...6.1 Medium
- ibm cognos analytics mobileDue to weak obfuscation, IBM Cognos Analytics Mobile for Android application prior to version 1.1...4.8 Medium
- ibm cognos analytics mobileIBM Cognos Analytics Mobile for Android applications prior to version 1.1.14 is vulnerable to...5.4 Medium
- hospital\'s patient records management system project patient records management systemAn access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management...8.8 High
- Show moreLoading…