CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation, microstation connect +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley view, microstation, microstation connect +2 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- bentley microstation, microstation connect, view +2 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- mingsoft mcmsServer Side Template Injection in MCMS9.1 Critical
- mingsoft mcmsMCMS Arbitrary File Deletion vulnerability7.1 High
- mingsoft mcmsPath traversal in MCMS8.1 High
- mingsoft mcmsFile upload leading to RCE in MCMS9.8 Critical
- bigfile bigfileagentBigFileAgent arbitrary file Deleting vulnerability7.1 High
- broadcom layer7 api management oauth toolkitA reflected cross-site scripting (XSS) vulnerability in the Symantec Layer7 API Management OAuth...6.1 Medium
- expressionengineUnsanitized user input in ExpressionEngine <= 5.4.0 control panel member creation leads to an SQL...7.2 High
- debian linux, fedoraproject fedora, isync project isync +1 more +3 moreA flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large...9.8 Critical
- qemuA stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in...5.5 Medium
- eclipse lemminxPath Traversal in LemMinX6.5 Medium
- eclipse lemminxExposure of Sensitive Information to an Unauthorized Actor in LemMinX5.5 Medium
- redhat vscode-xmlServer-Side Request Forgery and Uncontrolled Resource Consumption in LemMinX9.1 Critical
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moreA flaw use after free in the Linux kernel Management Component Transport Protocol (MCTP)...7.8 High
- tmax toofficeTmax ToOffice arbitrary file creation vulnerability7.1 High
- airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 moreAirspan Networks Mimosa SQL Injection8.6 High
- airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 moreAirspan Networks Mimosa Incorrect Authorization10.0 Critical
- airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 moreAirspan Networks Mimosa OS Command Injection7.5 High
- airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 moreAirspan Networks Mimosa Use of a Broken or Risky Cryptographic Algorithm6.5 Medium
- airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 moreAirspan Networks Mimosa Deserialization of Untrusted Data7.5 High
- airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 moreAirspan Networks Mimosa Improper Authorization10.0 Critical
- quadlayers perfect brands for woocommerce, perfect brands for woocommerce (wordpress plugin) +1 moreWordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Server Information Exposure vulnerability4.3 Medium
- airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 moreAirspan Networks Mimosa Server-Side Request Forgery (SSRF)10.0 Critical
- quadlayers perfect brands for woocommerce, perfect brands for woocommerce (wordpress plugin) +1 moreWordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Set Featured Brand vulnerability4.3 Medium
- ibexa ez platform kernelExposure of Resource to Wrong Sphere in ezsystems/ezplatform-kernel5.3 Medium
- ibexa ez platform kernelCode injection in ezsystems/ezpublish-kernel9.8 Critical
- ibm guardium data encryption, security guardium data encryption +1 moreIBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain...5.9 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.1.2 does not require that users should have strong passwords by...5.9 Medium
- rigoblock dragoRigoBlock Dragos through 2022-02-17 lacks the onlyOwner modifier for setMultipleAllowances. This...7.5 High
- tendacn ac10u firmwareA Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router...9.8 Critical
- iobit advanced systemcareA Use after Free vulnerability exists in IOBit Advanced SystemCare 15 pro via requests sent in...7.8 High
- zerof web serverZEROF Web Server 2.0 allows /HandleEvent SQL Injection.9.8 Critical
- zerof web serverZEROF Web Server 2.0 allows /admin.back XSS.6.1 Medium
- microweber, microweber microweber/microweber +1 moreCRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber7.6 High
- Show moreLoading…