CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- watchguard firewareWatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged...6.5 Medium
- watchguard firewareWatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged...6.5 Medium
- watchguard firewareA systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an...8.8 High
- watchguard firewareA wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an...8.8 High
- watchguard firewareWatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged...8.8 High
- atlassian jira service management server, jira service management, jira service management data center +2 moreAffected versions of Atlassian Jira Service Management Server and Data Center allow attackers...4.8 Medium
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreFailure to sanitize input in the SSL VPN web portal of FortiOS 5.2.10 through 5.2.15, 5.4.0...4.7 Medium
- trend micro apex one, worry-free business security, trend micro, inc. micro worry-free business security +1 more +3 moreA security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend...7.8 High
- trend micro apex one, worry-free business security, trend micro, inc. micro worry-free business security +1 more +3 moreA security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend...7.8 High
- trend micro apex one, worry-free business security, trend micro, inc. micro worry-free business security +1 more +3 moreAn security agent resource exhaustion denial-of-service vulnerability in Trend Micro Apex One,...7.5 High
- trendmicro antivirus, trend micro antivirus for mac +1 moreA link following privilege escalation vulnerability in Trend Micro Antivirus for Max 11.0.2150...7.8 High
- trendmicro serverprotect, trend micro serverprotect for emc celerra, serverprotect for microsoft windows / novell netware +3 more +5 moreUncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information...7.5 High
- trendmicro serverprotect, trend micro serverprotect for emc celerra, serverprotect for microsoft windows / novell netware +3 more +5 moreInteger overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server...9.8 Critical
- trendmicro serverprotect, trend micro serverprotect for emc celerra, serverprotect for microsoft windows / novell netware +3 more +5 moreTrend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform...9.8 Critical
- laravel fortifyMulti-Factor Authentication issue in Laravel Fortify8.1 High
- usbguard project usbguard, debian linux, fedoraproject fedora +2 moreAn issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon...7.8 High
- wolfsslIn wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual...7.5 High
- wolfsslIn wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication...6.5 Medium
- watchguard firebox and xtm, fireware +1 moreWatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to...8.8 High
- oracle talent acquisition cloud, oracle corporation talent acquisition cloud - taleo enterprise edition +1 moreA potential vulnerability in the Oracle Talent Acquisition Cloud - Taleo Enterprise Edition. This...9.8 Critical
assimpOSS-FuzzHeap-buffer-overflow in SuperFastHashNo scorew3mOSS-FuzzUNKNOWN READ in GC_generic_malloc_manyNo score- veronalabs wp statistics, wp statistics statistics +1 moreWP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id9.8 Critical
- imagemagick, fedoraproject fedora, redhat enterprise linux +2 moreA heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11...7.5 High
- imagemagick, debian linux, fedoraproject fedora +1 more +3 moreA NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in...6.5 Medium
- anuko time tracker, timetracker +1 moreSQL injection in anuko timetracker7.4 High
- anuko time tracker, timetracker +1 moreStored XSS vulnerability in anuko/timetracker6.5 Medium
- octobercms octoberMissing server signature validation in OctoberCMS4.8 Medium
- backblaze b2 command line toolB2 Command Line Tool TOCTOU application key disclosure4.7 Medium
- backblaze b2-sdk-python, b2 python software development kit +1 moreb2-sdk-python TOCTOU application key disclosure4.7 Medium
- dell bsafe ssl-jOnly customers with active BSAFE maintenance contracts can receive details about this...5.9 Medium
- tongda2000Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in change_box.php via...9.8 Critical
- wbce cmsA vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to...7.8 High
- ectouchArbitrary file delete in ectouch/ectouch9.1 Critical
- wbce cmsA vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to...7.8 High
- horizontcms project horizontcmsHorizontCMS v1.0.0-beta.2 was discovered to contain an arbitrary file download vulnerability via...7.5 High
- cuppacmsThe copy function of the file manager in Cuppa CMS v1.0 allows any file to be copied to the...7.5 High
- hospital management system project management systemHMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php.9.8 Critical
- hospital management system project management systemAn incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify...9.1 Critical
- tongda2000Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the...9.8 Critical
- tongda2000Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete_query.php via...9.8 Critical
- webank wecubeA Directory Traversal vulnerability exists in WeBankPartners wecube-platform 3.2.1 via the file...7.5 High
- stanford corenlpAccess Control vulnerability within CoreNLP9.8 Critical
- v2fly v2fly/v2ray-core, v2ray-core +1 moreOff-by-one Error in v2fly/v2ray-core5.9 Medium
- ibm sterling secure proxy, sterling external authentication server +1 moreIBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3...7.5 High
- ibm sterling secure proxy, sterling external authentication server +1 moreIBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication...6.5 Medium
- bloofox bloofoxcmsMultiple SQL Injection vulnerabilities exist in bloofoxCMS 0.5.2.1 - 0.5.1 via the (1) URLs, (2)...9.8 Critical
- octobercms octoberAuthenticated remote code execution in octobercms7.2 High
- bloofox bloofoxcmsMultiple Cross Site Scripting (XSS) vulnerabilities exists in bloofoxCMS 0.5.2.1 - 0.5.1 via the ...5.4 Medium
- thedaylightstudio fuel cmsA Cross Site Scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 in the Assets page via an SVG...5.4 Medium
- Show moreLoading…