CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- prismjs prismCross-site Scripting in Prism7.5 High
- gravitl gravitl/netmaker, netmaker +1 moreUse of Hard-coded Cryptographic Key in gravitl/netmaker8.8 High
- mruby, mruby mruby/mruby +1 moreHeap-based Buffer Overflow in mruby/mruby5.9 Medium
- google llc dart sdk, dart software development kit +1 moreAuth bypass in Dark SDK6.5 Medium
- cesanta mongooseArbitrary File Write9.8 Critical
- webcc project webccPath Traversal7.5 High
- erudika scooldScoold 1.47.2 is a Q&A/knowledge base platform written in Java. When writing a Q&A, the markdown...5.4 Medium
- microweber, microweber microweber/microweber +1 moreGeneration of Error Message Containing Sensitive Information in microweber/microweber9.4 Critical
- cobbler project cobbler, fedoraproject fedora, opensuse backports +2 more +4 moreCommand Injection in Cobbler7.8 High
- cobbler project cobbler, fedoraproject fedora +1 moreIncorrect Default Permissions in Cobbler7.1 High
- apple ipados, macos, safari +3 more +5 moreA use after free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- bitdefender antivirus plus, internet security, total security +2 moreProcess Control vulnerability in Bitdefender Antivirus Plus8.2 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.7.5 High
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.9.8 Critical
- libexpat project libexpat, debian linux, fedoraproject fedora +6 more +8 moreIn Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via...6.5 Medium
- dlink dsl-2730e firmwareD-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in...5.4 Medium
- tp-link tl-wa850re firmwareTP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable...9.8 Critical
rlwrapMageiaUpdated rlwrap packages fix security vulnerabilityNo scorenasMageia,x11-util-cf-filesMageia +1 moreUpdated nas packages fix security vulnerabilityNo score- mariadb, fedoraproject fedora +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...7.0 High
- mariadb, fedoraproject fedora +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...7.0 High
- mariadb, fedoraproject fedora +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...7.0 High
- mariadb, fedoraproject fedora +1 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...7.0 High
fmtOSS-FuzzStack-buffer-overflow in fmt::v8::basic_memory_buffer<unsigned int, 32ul, std::__1::allocator<unsigned inNo score- cerebrate-project cerebrateAn issue was discovered in Cerebrate through 1.4. XSS could occur in the bookmarks component.6.1 Medium
- cerebrate-project cerebrateAn issue was discovered in Cerebrate through 1.4. Username enumeration could occur.5.3 Medium
- cerebrate-project cerebrateAn issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled.5.3 Medium
- cerebrate-project cerebrateAn issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an...4.3 Medium
- cerebrate-project cerebrateAn issue was discovered in Cerebrate through 1.4. genericForm allows reflected XSS in form...6.1 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreLarge loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow...4.3 Medium
- mozilla thunderbirdIt may be possible for an attacker to craft an email message that causes Thunderbird to perform...8.8 High
- debian redis, redis debian-specific redis servers +1 moreIt was discovered, that redis, a persistent key-value database, due to a packaging issue, is...10.0 Critical
- port389 389-ds-base, redhat enterprise linux desktop, enterprise linux for ibm z systems +5 more +7 moreA double-free was found in the way 389-ds-base handles virtual attributes context in persistent...7.5 High
- konveyor mig-controller, redhat migration toolkit +1 moreAn incorrect default permissions vulnerability was found in the mig-controller. Due to an...6.3 Medium
- centos stream, gnome gnome-shell +1 moreA locking protection bypass flaw was found in some versions of gnome-shell as shipped within...6.1 Medium
- github enterprise serverImproper control flow in GitHub Enterprise Server hosted Pages leads to remote code execution8.8 High
- dlink dir-846 firmwareRemote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin...9.8 Critical
- dlink dir-846 firmwareRemote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D...9.8 Critical
- zoneland o2oaO2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via ...9.8 Critical
- dlink dir-846 firmwareA Remote Command Execution (RCE) vulnerability exists in HNAP1/control...9.8 Critical
- ovidentiaAn incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows...7.5 High
- d-link multiple routers, dlink dir-810l firmware, dir-820l firmware +4 more +6 moreA Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L...9.8 Critical
- php-fusion phpfusionA reflected cross-site scripting (XSS) vulnerability in PHP-Fusion 7.02.07 allows remote...6.1 Medium
- plist project plistPrototype pollution in Plist before 3.0.5 can cause denial of service9.8 Critical
- updraftplus, updraftplus wordpress backup plugin (free), wordpress backup plugin (premium) +2 moreUpdraftPlus Free < 1.22.3 & Premium < 2.22.3 - Subscriber+ Backup Download6.5 Medium
- asus cmax6000 firmwareThe use of a hard-coded cryptographic key significantly increases the possibility encrypted data...7.5 High
- vercel next.jsImproper CSP in Image Optimization API for Next.js5.9 Medium
- canonical snapd, ubuntu linux, debian linux +1 more +3 moresnapd could be made to escalate privileges and run programs as administrator7.8 High
- canonical snapd, ubuntu linux, fedoraproject fedora +2 moresnapd could be made to bypass intended access restrictions through snap content interfaces and layout paths8.2 High
- hashicorp nomadArbitrary file reads in HashiCorp Nomad7.5 High
- Show moreLoading…