CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreImproper Access Control (IDOR) in dolibarr/dolibarr5.4 Medium
- intelliants subrion cmsA Cross Site Scripting (XSS) vulnerability exits in Subrion CMS through 4.2.1 in the Create Page...4.8 Medium
- cisco nx-os software, nx-os +1 moreCisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability8.6 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability8.6 High
- cisco nx-os software, nx-os, firepower extensible operating system +2 moreCisco FXOS and NX-OS Software Cisco Discovery Protocol Service Denial of Service Vulnerability4.3 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software NX-API Command Injection Vulnerability8.8 High
drupal/govuk_themePackagistThe GOV.UK Theme (govuk_theme) is a Drupal theme for the GOV.UK Design System. The theme doesn't sanitize user input in certain cases, which leads to Cross-Site-Scripting (XSS) vulnerabilities. An att…No scoredrupal/entity_reference_treePackagistThis module provides an entity relationship hierarchy tree widget for an entity reference field. The module doesn't sufficiently filter on output, leading to a Cross Site Scripting vulnerability. This…No score- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreDenial of Service in radareorg/radare27.3 High
- piwigoPiwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to...5.4 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused...7.1 High
- chocobozzz chocobozzz/peertube, framasoft peertube +1 moreImproper Access Control in chocobozzz/peertube5.4 Medium
- checkmkIn Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a...5.4 Medium
- microweber, microweber microweber/microweber +1 moreInsecure Storage of Sensitive Information in microweber/microweber9.1 Critical
- microweber, microweber microweber/microweber +1 moreInsertion of Sensitive Information Into Debugging Code in microweber/microweber8.8 High
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Reflected in microweber/microweber7.6 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreInsecure Temporary File in mlflow/mlflow8.2 High
- amazon echo dot firmwareImproper Neutralization of audio output from 3rd and 4th Generation Amazon Echo Dot devices...9.8 Critical
- mruby, mruby mruby/mruby +1 moreOut-of-bounds Read in mruby/mruby6.8 Medium
ndpiOSS-FuzzHeap-buffer-overflow in ndpi_handle_ipv6_extension_headersNo scoreopencvOSS-FuzzIncorrect-function-pointer-type in cv::splitNo score- vim, vim vim/vim, apple macos +2 more +4 moreUse of Out-of-range Pointer Offset in vim/vim7.8 High
- chocobozzz chocobozzz/peertube, framasoft peertube +1 moreMissing Authorization in chocobozzz/peertube5.4 Medium
- fgribreau fgribreau/node-request-retry, node-request-retry project node-request-retry +1 moreExposure of Sensitive Information to an Unauthorized Actor in fgribreau/node-request-retry8.1 High
- openmrs, openmrs openmrs-core +1 moreDirectory Traversal in OpenMRS Startup Filter7.5 High
- envoyproxy envoyCrash when tunneling TCP over HTTP in Envoy7.5 High
- envoyproxy envoyUse-after-free in Envoy6.1 Medium
- tenda ac9 firmwareTenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function openSchedWifi.9.8 Critical
- tenda ac9 firmwareTenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the function...9.8 Critical
- tenda ac9 firmwareTenda AC9 V15.03.2.21_cn was discovered to contain a stack overflow via the parameter NPTR.9.8 Critical
- totolink t6 firmwareTOTOLink T6 V5.9c.4085_B20190428 was discovered to contain a command injection vulnerability in...9.8 Critical
- totolink a860r firmwareTOTOLink A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection...9.8 Critical
- totolink a950rg firmwareTOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a...9.8 Critical
- totolink t10 v2 firmwareTOTOLink T10 V5.9c.5061_B20200511 was discovered to contain a command injection vulnerability in...9.8 Critical
- totolink a830r firmwareTOTOLink A830R V5.9c.4729_B20191112 was discovered to contain a command injection vulnerability...9.8 Critical
- totolink a810r firmwareTOTOLink A810R V4.1.2cu.5182_B20201026 was discovered to contain a command injection...9.8 Critical
- totolink a3600r firmwareTOTOLink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a command injection...9.8 Critical
- totolink a3100r firmwareTOTOLink A3100R V4.1.2cu.5050_B20200504 was discovered to contain a command injection...9.8 Critical
- totolink a800r firmwareTOTOLink A800R V4.1.2cu.5137_B20200730 was discovered to contain a command injection...9.8 Critical
- totolink a3000ru firmwareTOTOLink A3000RU V5.9c.2280_B20180512 was discovered to contain a command injection vulnerability...9.8 Critical
- tp-link tl-wr902ac firmwareTP-Link TL-WR902AC(US)_V3_191209 routers were discovered to contain a stack overflow in the...9.8 Critical
- tp-link tl-wr841n firmwareTL-WR841Nv14_US_0.9.1_4.18 routers were discovered to contain a stack overflow in the function...9.8 Critical
- tp-link archer a54 firmwareTP-Link Archer A54 Archer A54(US)_V1_210111 routers were discovered to contain a stack overflow...9.8 Critical
- envoyproxy envoyIncorrect handling of internal redirects results in crash in Envoy7.5 High
- envoyproxy envoyIncorrect configuration handling allows TLS session re-use without re-validation in Envoy7.4 High
- envoyproxy envoyX.509 Extended Key Usage and Trust Purposes bypass in Envoy6.8 Medium
- envoyproxy envoyX.509 subjectAltName matching bypass in Envoy7.4 High
- envoyproxy envoyCrash when a cluster is deleted in Envoy4.4 Medium
- envoyproxy envoyNull pointer dereference in envoy7.5 High
- istioUnauthenticated control plane denial of service attack in Istio7.5 High
- Show moreLoading…