CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
firejailopenSUSESecurity update for firejailNo score- tenda ax12 firmwareA Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4...7.5 High
- easycmsEasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search...9.8 Critical
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreUse After Free in radareorg/radare28.4 High
- mruby, mruby mruby/mruby +1 moreUse of Out-of-range Pointer Offset in mruby/mruby8.4 High
- medialize medialize/uri.js, uri.js project uri.js, fedoraproject fedora +2 moreAuthorization Bypass Through User-Controlled Key in medialize/uri.js5.3 Medium
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat6.7 Medium
- filecloudIn FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request...8.8 High
- filecloudIn FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).8.8 High
- postgresql jdbc driver, debian linux +1 morepgjdbc Arbitrary File Write Vulnerability9.8 Critical
libplistOSS-FuzzHeap-buffer-overflow in parse_primitiveNo score- drupal core, drupal, fedoraproject fedora +2 moreDrupal core Denial of Service vulnerability7.5 High
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreAn issue was discovered in the Linux kernel before 5.16.10. The USB Gadget subsystem lacks...4.6 Medium
- debian linux, teluu pjsip +1 moreBuffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer'...9.8 Critical
- debian linux, teluu pjsip +1 moreRead out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled ...9.1 Critical
- debian linux, teluu pjsip +1 moreStack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled ...9.8 Critical
- debian linux, teluu pjsip +1 moreStack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename'...9.8 Critical
- debian linux, teluu pjsip +1 moreStack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename'...9.8 Critical
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreMissing Authorization in snipe/snipe-it6.3 Medium
- scratch-wiki scratch confirmaccount v3A Cross-Site Request Forgery (CSRF) in RequirementsBypassPage.php of Scratch Wiki scratch...6.5 Medium
- scratchoauth2 project scratchoauth2A reflected cross-site scripting (XSS) in ScratchOAuth2 before commit...6.1 Medium
- scratchoauth2 project scratchoauth2An issue in SOA2Login::commented of ScratchOAuth2 before commit...10.0 Critical
- scratchoauth2 project scratchoauth2An authorization bypass exploited by a user-controlled key in SpecificApps REST API in...6.5 Medium
- sourcegraphSide-channel attack in Sourcegraph Code Monitors6.5 Medium
- solari termtalk serverA Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2...7.5 High
- discourseDenial of Service in Discourse6.5 Medium
- tenda ac11 firmwareTenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in...9.8 Critical
- tenda ac11 firmwareTenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in...9.8 Critical
- tenda ac11 firmwareTenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in...9.8 Critical
- tenda ac11 firmwareTenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in...9.8 Critical
- tenda ac11 firmwareTenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in...9.8 Critical
- xerox phaser 4622 firmwareXerox Phaser 4622 v35.013.01.000 was discovered to contain a buffer overflow in the function...9.8 Critical
- ricoh aficio sp 3500sf firmware, m 2700 firmware, m 2701 firmware +63 more +65 moreRICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP...9.8 Critical
- splashtopSplashtop Remote Client (Personal Edition) through 3.4.6.1 creates a Temporary File in a...7.8 High
- burden project burdenBurden v3.0 was discovered to contain a stored cross-site scripting (XSS) in the Add Category...6.1 Medium
- splashtopSplashtop Remote Client (Business Edition) through 3.4.8.3 creates a Temporary File in a...7.8 High
- tibco auditsafeTIBCO AuditSafe API Authentication vulnerability9.8 Critical
- tibco businessconnect, tibco software inc. businessconnect container edition +1 moreTIBCO BusinessConnect Container Edition administrative username and passwords leakage8.4 High
- tibco businessconnect, tibco software inc. businessconnect container edition +1 moreTIBCO BusinessConnect Container Edition username and password leakage9.8 Critical
- jenkins swamp, jenkins project swamp plugin +1 moreCSRF vulnerability in Jenkins SWAMP Plugin allows capturing credentials8.8 High
- jenkins swamp, jenkins project swamp plugin +1 moreMissing permission check in Jenkins SWAMP Plugin allows capturing credentials8.8 High
- jenkins convertigo mobile platform, jenkins project convertigo mobile platform plugin +1 moreImproper Synchronization in Jenkins Convertigo Mobile Platform Plugin6.5 Medium
- jenkins chef sinatra, jenkins project chef sinatra plugin +1 moreImproper Restriction of XML External Entity Reference in Jenkins Chef Sinatra8.8 High
- jenkins chef sinatra, jenkins project chef sinatra plugin +1 moreMissing permission checks in Jenkins Chef Sinatra Plugin allow XXE8.8 High
- jenkins chef sinatra, jenkins project chef sinatra plugin +1 moreCSRF vulnerability in Jenkins Chef Sinatra Plugin allow XXE8.8 High
- jenkins dbcharts, jenkins project dbcharts plugin +1 moreMissing Authorization in Jenkins dbCharts Plugin8.8 High
- jenkins dbcharts, jenkins project dbcharts plugin +1 moreCross-Site Request Forgery in Jenkins dbCharts Plugin8.8 High
- jenkins doktor, jenkins project doktor plugin +1 moreProtection Mechanism Failure in Jenkins Doktor Plugin5.4 Medium
- jenkins team views, jenkins project team views plugin +1 moreStored Cross-site Scripting vulnerability in Jenkins Team Views Plugin5.4 Medium
- jenkins project promoted builds (simple) plugin, jenkins promoted builds \(simple\) +1 moreStored Cross-site Scripting vulnerability in Jenkins Promoted Builds (Simple) Plugin4.8 Medium
- Show moreLoading…