CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- limesurveyA Remote Code Execution (RCE) vulnerabilty exists in LimeSurvey 5.2.4 via the upload and install...8.8 High
- processwireA Directory Traversal vulnerability exits in Processwire CMS before 2.7.1 via the download...7.5 High
- rosariosisSQL injection in francoisjacquet/rosariosis9.8 Critical
- gnu fribidi, redhat enterprise linux +1 moreA segmentation fault (SEGV) flaw was found in the Fribidi package and affects the...5.5 Medium
- gnu fribidi, redhat enterprise linux +1 moreA heap-based buffer overflow flaw was found in the Fribidi package and affects the...5.5 Medium
- gnu fribidi, redhat enterprise linux +1 moreA stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker...7.8 High
- gnu gnutls, netapp active iq unified manager, hci bootstrap os +5 more +7 moreA NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally...6.5 Medium
- requarks wiki, wiki.js +1 moreImproper write access check in Requarks/wiki8.1 High
- rosariosisCross site scripting in francoisjacquet/rosariosis5.4 Medium
- rosariosisCross site scripting in francoisjacquet/rosariosis5.4 Medium
- clastix capsule-proxyPrivilege escalation using hop-by-hop Connection header8.8 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreHeap-based Buffer Overflow in radareorg/radare25.3 Medium
- tribal systems zenario cms, tribalsystems zenario +1 moreFile upload restriction bypass in Zenario CMS7.2 High
- cyrusimap cyrus-sasl, debian linux, fedoraproject fedora +8 more +10 moreIn Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for...8.8 High
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreNULL Pointer Dereference in radareorg/radare25.9 Medium
- siemens simcenter femapA vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected...7.8 High
- siemens simcenter femapA vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected...7.8 High
- pimcore, pimcore pimcore/pimcore +1 morePath Traversal in pimcore/pimcore4.9 Medium
- zyxel armor z1 (nbg6816) firmware, armor z2 (nbg6817) firmware, nbg6816 firmware +1 more +3 moreA command injection vulnerability in the CGI program of the Zyxel ARMOR Z1/Z2 firmware could...8.8 High
- zyxel armor z1 (nbg6816) firmware, armor z2 (nbg6817) firmware, nbg6816 firmware +1 more +3 moreA cross-site request forgery vulnerability in the HTTP daemon of the Zyxel ARMOR Z1/Z2 firmware...8.0 High
- filecloudAll versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability...5.3 Medium
- accounting journal management project journal managementAccounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter...5.4 Medium
- checkmkCheckmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 Fixed in 1.6.0p28 are affected by a...5.4 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreHeap-based Buffer Overflow in radareorg/radare27.8 High
- seatd project seatdseatd-launch in seatd 0.6.x before 0.6.4 allows removing files with escalated privileges when...9.8 Critical
- debian linux, linux kernel, netapp h300e +10 more +12 morenet/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain...7.8 High
- audiofile, debian linux, fedoraproject fedora +2 moreIn autofile Audio File Library 0.3.6, there exists one memory leak vulnerability in printfileinfo...6.5 Medium
- teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 moreUse after free in PJSIP8.1 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vim8.4 High
- libreoffice, fedoraproject fedora +1 moreIncorrect trust validation of signature with ambiguous KeyInfo children7.5 High
- checkmkCheckmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing...6.1 Medium
- ibm planning analytics, planning analytics workspace +1 moreIBM Planning Analytics 2.0 is vulnerable to a Remote File Include (RFI) attack. User input could...7.1 High
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS before Brocade Fabric OS v8.2.1c, v8.1.2h, and all versions of Brocade Fabric...9.8 Critical
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in Brocade Fabric OS versions before Brocade Fabric OS v8.0.1b, v7.4.1d could...6.5 Medium
- ays-pro survey maker, survey maker team maker (wordpress plugin) +1 moreWordPress Survey Maker plugin <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability4.7 Medium
- spiffyplugins spiffy calendar, spiffy plugins calendar (wordpress plugin) +1 moreWordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- okta advanced server access client for windows, advanced server access client +1 moreOkta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable...8.8 High
- gvectors wpdiscuz, gvectors team comments – wpdiscuz (wordpress plugin) +1 moreWordPress wpDiscuz plugin <= 7.3.11 - Sensitive Information Disclosure3.7 Low
- wp-buy wp content copy protection & no right click (wordpress plugin), wp content copy protection \& no right click +1 moreWordPress WP Content Copy Protection & No Right Click plugin <= 3.4.4 - Cross-Site Request Forgery (CSRF) leads to Settings Update vulnerability4.3 Medium
- mattermostTeam Creator's Email Address is disclosed to Team Members via one of the APIs4.3 Medium
- hcltech hcl sametime"Sametime Android potential path traversal vulnerability when using File class"5.5 Medium
- hcltech hcl sametime"Sametime Android PathTraversal Vulnerability"5.5 Medium
- opensuse libsolvTwo heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the...6.5 Medium
- imagemagickA heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel...7.1 High
- alltube project alltube, rudloff rudloff/alltube +1 moreOpen Redirect on Rudloff/alltube in rudloff/alltube4.7 Medium
- zfaka project zfakaAn issue was found in Zfaka <= 1.4.5. The verification of the background file upload function...9.8 Critical
- pleskPlesk CMS 18.0.37 is affected by an insecure permissions vulnerability that allows privilege...8.8 High
- wow-estore float menu, unknown float menu – awesome floating side menu +1 moreFloat Menu < 4.3.1 - Arbitrary Menu Deletion via CSRF4.3 Medium
- ad inserter pro project inserter pro, ad inserter project inserter, notfound ad inserter pro +1 more +3 moreAd Inserter < 2.7.10 - Reflected Cross-Site Scripting6.1 Medium
- alexander anycommentAnyComment < 0.2.18 - Comment Rating Increase/Decrease via Race Condition3.1 Low
- Show moreLoading…