CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- deliciousbrains database backup, unknown database backup for wordpress +1 moreDatabase Backup for WordPress < 2.5.1 - Admin+ SQL Injection7.2 High
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGive < 2.17.3 - Reflected Cross-Site Scripting via Import Tool6.1 Medium
- pluginus woocs, unknown woocs – currency switcher for woocommerce. professional and free multi currency plugin – pay in selected currency +1 moreWOOCS < 1.3.7.5 - Reflected Cross-Site Scripting6.1 Medium
- sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 morePopup Builder < 4.0.7 - Admin+ SQL Injection7.2 High
- getshieldsecurity shield security, unknown shield security – scanners, security hardening, brute force protection & firewall +1 moreShield Security < 13.0.6 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown coming soon and maintenance modeComing soon and Maintenance mode < 3.6.8 - Arbitrary Email Sending to Subscribed Users via CSRF4.3 Medium
- machothemes image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid < 3.5.3 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- unknown coming soon and maintenance modeComing soon and Maintenance mode < 3.6.7 - Subscriber+ Arbitrary Email Sending to Subscribed Users4.3 Medium
- alexander anycommentAnyComment < 0.2.18 - Arbitrary HyperComments Import/Revert via CSRF8.8 High
- exportfeed, unknown exportfeed: list woocommerce products on ebay store +1 moreExportFeed <= 2.0.1.0 - Admin+ SQL Injection7.2 High
- anti-malware security and brute-force firewall project security and brute-force firewall, scheeeli anti-malware security and brute-force firewall +1 moreAnti-Malware Security and Brute-Force Firewall < 4.20.94 - Admin+ Reflected Cross-Site Scripting4.8 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGive < 2.17.3 - Reflected Cross-Site Scripting via Donation Forms Dashboard6.1 Medium
- givewp, stellarwp givewp – donation plugin and fundraising platform +1 moreGive < 2.17.3 - Unauthenticated Reflected Cross-Site Scripting6.1 Medium
- sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 morePopup Builder < 4.0.7 - LFI to RCE8.8 High
- unknown duplicate page or postDuplicate Page or Post < 1.5.1 - Arbitrary Settings Update to Stored XSS3.5 Low
- codename065 download managerWordPress Download Manager < 3.2.34 - Authenticated SQL Injection to Reflected XSS8.8 High
- fivestarplugins five star business profile and schemaFive Star Business Profile and Schema < 2.1.7 - Subscriber+ Page Creation & Settings Update to Stored XSS5.4 Medium
- the buffer button project buffer button, unknown the buffer button +1 moreThe Buffer Button <= 1.0 - Authenticated Stored Cross Site Scripting (XSS)5.4 Medium
- translationexchange translation exchange, unknown translation exchange – translate your wordpress site in minutes! +1 moreTranslation Exchange <= 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)5.4 Medium
- feedwordpress project feedwordpressFeedWordPress < 2022.0123 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- sigmaplugin advanced database cleanerAdvanced Database Cleaner < 3.0.4 - Reflected Cross-Site Scripting6.1 Medium
- access-keys wp popup banners, accesspress themes accessbuddy, basic +141 more +143 moreBackdoored Plugins & Themes from AccessPress Themes9.8 Critical
- drogonArbitrary File Write7.5 High
binutilsOSS-FuzzHeap-buffer-overflow in evax_bfd_print_dstNo scorephpOSS-FuzzHeap-use-after-free in zval_call_destructorNo scorelibaomOSS-FuzzHeap-buffer-overflow in row_mt_worker_hookNo scorelibaomOSS-FuzzHeap-buffer-overflow in row_mt_worker_hookNo scoreghostscriptOSS-FuzzUNKNOWN READ in gx_dc_default_fill_maskedNo score- vim, vim vim/vim, apple macos +2 more +4 moreNULL Pointer Dereference in vim/vim6.2 Medium
- unshiftio unshiftio/url-parse, url-parse project url-parse +1 moreAuthorization Bypass Through User-Controlled Key in unshiftio/url-parse6.5 Medium
- qlik sense, qlik sense enterprise on windows +1 moreQlik Sense Enterprise Domain User enumeration5.3 Medium
- kernel util-linux, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support....5.5 Medium
- premidPreMiD 2.2.0 allows unintended access via the websocket transport. An attacker can receive events...7.2 High
- debian linux, linux kernel +1 moreAn issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10...5.5 Medium
- pritunl pritunl-client-electronPritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related to an...7.8 High
- nasa openmctOpenmct XSS via the “Summary Widget”6.1 Medium
- nasa openmctOpenmct XSS via the “Condition Widget”6.1 Medium
- nasa openmctOpenmct XSS via the “Web Page” element6.1 Medium
- alluxioCommand injection in Alluxio9.8 Critical
- cobbler project cobblerAn issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol...5.9 Medium
- microweber, microweber microweber/microweber +1 moreBusiness Logic Errors in microweber/microweber9.4 Critical
- pleskPlesk 18.0.37 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows an...6.5 Medium
- unshiftio unshiftio/url-parse, url-parse project url-parse +1 moreAuthorization Bypass Through User-Controlled Key in unshiftio/url-parse6.5 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreUse of Out-of-range Pointer Offset in vim/vim8.4 High
- saitoha libsixelIn libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in...6.5 Medium
- debian duckduck before 0.10 did not properly handle loading of untrusted code from the current directory.9.8 Critical
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Reflected in microweber/microweber8.8 High
- microweber, microweber microweber/microweber +1 moreUse multiple time the one-time coupon in microweber/microweber5.3 Medium
- wikidocsWikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can...8.8 High
- wikidocsWikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages.6.1 Medium
- Show moreLoading…