CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- microweber, microweber microweber/microweber +1 moreCross-Site Request Forgery (CSRF) in microweber/microweber4.3 Medium
- ibm mqIBM MQ 9.1 LTS is vulnerable to a denial of service attack caused by an issue within the channel...5.3 Medium
- mingsoft mcmsSQL injection in MCMS9.8 Critical
- cisco asyncos, email security appliance (esa) +1 moreCisco Email Security Appliance DNS Verification Denial of Service Vulnerability7.5 High
- cisco redundancy configuration managerCisco Redundancy Configuration Manager for Cisco StarOS Software TCP Denial of Service Vulnerability5.3 Medium
- cisco prime infrastructure, evolved programmable network manager +1 moreCisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerability6.1 Medium
- pcf2bdf project pcf2bdfA segmentation fault during PCF file parsing in pcf2bdf versions >=1.05 allows an attacker to...5.5 Medium
- coreftp core ftpCore FTP / SFTP Server v2 Build 725 was discovered to allow unauthenticated attackers to cause a...5.5 Medium
- pcf2bdf project pcf2bdfA heap-buffer-overflow in pcf2bdf, versions >= 1.05 allows an attacker to trigger unsafe memory...7.1 High
enum-mapcrates.ioenum_map macro can cause UB when `Enum` trait is incorrectly implementedNo score- trigonesoft remote system monitorTRIGONE Remote System Monitor 3.61 is vulnerable to an unquoted path service allowing local users...7.8 High
- mruby, mruby mruby/mruby +1 moreOut-of-bounds Read in mruby/mruby6.5 Medium
- pear crypt gpgCrypt_GPG does not prevent additional options in GPG calls5.3 Medium
- jerryscriptThere is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed...5.5 Medium
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreGeneration of Error Message Containing Sensitive Information in snipe/snipe-it5.3 Medium
- unshiftio unshiftio/url-parse, url-parse project url-parse +1 moreAuthorization Bypass Through User-Controlled Key in unshiftio/url-parse6.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreStack-based Buffer Overflow in vim/vim8.4 High
- google chromeInappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a...8.8 High
- google chrome, chromium animation +1 moreUse after free in Animation8.8 High
- google chromeInteger overflow in Mojo in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to...8.8 High
- google chromeUse after free in GPU in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to...8.8 High
- google chromeUse after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to...8.8 High
- google chromeUse after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who...8.8 High
- google chromeHeap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker...8.8 High
- google chromeUse after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a...8.8 High
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administrator7.8 High
- mozilla pollbotopen redirect in pollbot6.1 Medium
sanicPyPIServer crash if running Python 3.10 w/ Sanic 20.12No score- traefik, oracle communications unified inventory management +1 moreTraefik skips the router TLS configuration when the host header is an FQDN7.4 High
- bytecodealliance cranelift-codegen, wasmtime +1 moreCranelift vulnerable to miscompilation of constant values in division on AArch645.9 Medium
- bytecodealliance wasmtimeInvalid drop of partially-initialized instances in wasmtime5.1 Medium
- hutoolImproper Certificate Validation in Hutool9.8 Critical
- jeecg bootSQL Injection in Jeecg-boot9.8 Critical
- jeecg bootSQL Injection in Jeecg-boot9.8 Critical
- jqueryformForms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to...8.8 High
- jqueryformForms generated by JQueryForm.com before 2022-02-05 (if file-upload capability is enabled) allow...9.8 Critical
- jqueryformForms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to...7.5 High
- jqueryformForms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to...6.5 Medium
- jqueryformA reflected cross-site scripting (XSS) vulnerability in forms generated by JQueryForm.com before...6.1 Medium
- linux kernel, netapp baseboard management controller firmware, h300e firmware +6 more +8 moreIn the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they...7.8 High
- duxcms project duxcmsDuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools...9.8 Critical
- qtIn Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could...7.8 High
- fedoraproject fedora, linux kernel, oracle communications cloud native core binding support function +3 more +5 moreA flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint...9.8 Critical
- bookwyrm-social bookwyrmServer-side request forgery in BookWyrm8.8 High
- hospital\'s patient records management system project patient records management systemA stored cross-site scripting (XSS) vulnerability in Hospital Patient Record Management System v1...5.4 Medium
drupal/quickeditPackagistThis advisory addresses a similar issue to Drupal core - Moderately critical - Information disclosure - SA-CORE-2022-004. The Quick Edit module does not properly check entity access in some circumstan…No score- appwrite, litespeed.js project litespeed.js +1 morePrototype Pollution7.3 High
- ibm maximo anywhereIBM Maximo Anywhere 7.6.4.0 applications could allow obfuscation of the application source code....2.4 Low
- ibm maximo anywhereIBM Maximo Anywhere 7.6.4.0 applications could disclose sensitive information to a user with...2.1 Low
- ibm maximo anywhereIBM Maximo Anywhere 7.6.4.0 could allow an attacker to reverse engineer the application due to...6.5 Medium
- Show moreLoading…