CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- mruby, mruby mruby/mruby +1 moreNULL Pointer Dereference in mruby/mruby5.5 Medium
- mruby, mruby mruby/mruby +1 moreOut-of-bounds Read in mruby/mruby7.1 High
- ceph, redhat ceph storage, fedoraproject fedora +5 more +7 moreA key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the...6.5 Medium
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Reflected in microweber/microweber6.5 Medium
- showdoc, star7th star7th/showdoc +1 moreUnrestricted Upload of File with Dangerous Type in star7th/showdoc7.2 High
- sha256crypt project sha256crypt, sha512crypt project sha512crypt +1 moresha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU...7.5 High
- kitodo kitodo.presentationSSRF in Kitodo.Presentation7.5 High
- mittwald varnishcacheAn issue was discovered in the Varnishcache extension before 2.0.1 for TYPO3. The Edge Site...5.3 Medium
- cryptomatorCryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for...7.8 High
- dockerDocker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue...7.8 High
- sas web report studioSAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters:...6.1 Medium
icuOSS-FuzzHeap-buffer-overflow in ucasemap_internalUTF8ToTitle_70No scorefmtOSS-FuzzHeap-buffer-overflow in fmt::v8::detail::big_decimal_fp fmt::v8::detail::write_padded<No score- baicloud-cms project baicloud-cmsBaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the...8.8 High
- totolink t10 firmware, t6 firmware +1 moreA command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology...9.8 Critical
- totolink t10 firmware, t6 firmware +1 moreA command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers...9.8 Critical
- totolink t6 firmwareA command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology...9.8 Critical
- totolink t6 firmwareA command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6...9.8 Critical
- totolink t6 firmwareA command injection vulnerability in the function isAssocPriDevice of TOTOLINK Technology router...9.8 Critical
- totolink t10 firmware, t6 firmware +1 moreA command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6...9.8 Critical
- totolink t10 firmware, t6 firmware +1 moreA command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK...9.8 Critical
- totolink t10 firmware, t6 firmware +1 moreA command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers...9.8 Critical
- mediawikiMediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows...7.5 High
- sourcegraphCode Injection in Sourcegraph8.8 High
KernelLinuxASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()No scoreKernelLinuxASoC: ops: Reject out of bounds values in snd_soc_put_volsw()No scoreKernelLinuxASoC: hdmi-codec: Fix OOB memory accessesNo scoreKernelLinuxselinux: fix double free of cond_list on error pathsNo scoreKernelLinuxovl: fix NULL pointer dereference in copy up warningNo scoreKernelLinuxaf_packet: fix data-race in packet_setsockopt / packet_setsockoptNo scoreKernelLinuxrtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()No scoreKernelLinuxnet: sched: fix use-after-free in tc_new_tfilter()No scoreKernelLinuxnet: amd-xgbe: Fix skb data length underflowNo scoreKernelLinuxipheth: fix EOVERFLOW in ipheth_rcvbulk_callbackNo scoreKernelLinuxnet/mlx5: Use del_timer_sync in fw reset flow of halting pollNo scoreKernelLinuxnet/mlx5e: Fix handling of wrong devices during bond neteventNo scoreKernelLinuxnet: ipa: prevent concurrent replenishNo scoreKernelLinuxPCI: pciehp: Fix infinite loop in IRQ handler upon power faultNo scoreKernelLinuxblock: Fix wrong offset in bio_truncate()No scoreKernelLinuxnet: bridge: vlan: fix memory leak in __allowed_ingressNo scoreKernelLinuxyam: fix a memory leak in yam_siocdevprivate()No scoreKernelLinuxdrm/msm/dpu: invalid parameter check in dpu_setup_dspp_pccNo scoreKernelLinuxnet/smc: Transitional solution for clcsock race issueNo scoreKernelLinuxpowerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pendingNo scoreKernelLinuxphylib: fix potential use-after-freeNo scoreKernelLinuxpowerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06No scoreKernelLinuxKVM: arm64: pkvm: Use the mm_ops indirection for cache maintenanceNo scoreKernelLinuxdrm/msm/dsi: invalid parameter check in msm_dsi_phy_enableNo scoreKernelLinuxnet: fix information leakage in /proc/net/ptypeNo scoreKernelLinuxARM: 9170/1: fix panic when kasan and kprobe are enabledNo score- Show moreLoading…