CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- emerson openenterprise scada software, openenterprise scada server +1 moreICSA-20-140-02 Emerson OpenEnterprise6.5 Medium
- emerson openenterprise scada software, openenterprise scada server +1 moreICSA-20-140-02 Emerson OpenEnterprise10.0 Critical
- emerson openenterprise scada software, openenterprise scada server +1 moreICSA-20-140-02 Emerson OpenEnterprise8.8 High
- radare radare2A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping...7.5 High
- kuka sim proICSA-20-098-05 KUKA.Sim Pro Improper Enforcement of Message Integrity During Transmission in a Communication Channel4.3 Medium
- blender, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds...7.8 High
- blender, debian linux +1 moreAn integer overflow in the processing of loaded 2D images leads to a write-what-where...7.8 High
- blender, debian linux +1 moreAn integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly...5.5 Medium
- rockwell automation factorytalk view se, rockwellautomation factorytalk view +1 moreDue to usernames/passwords being stored in plaintext in Random Access Memory (RAM), a local,...5.5 Medium
- rockwell automation factorytalk view se, rockwellautomation factorytalk view +1 moreThe DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may...7.8 High
- rockwell automation factorytalk services platformIMPROPER RESTRICTION OF XML EXTERNAL ENTITY REFERENCE CWE-6117.1 High
- veronalabs wp statistics, wp statistics statistics +1 moreWP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via platform7.2 High
- veronalabs wp statistics, wp statistics statistics +1 moreWP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via IP7.2 High
- veronalabs wp statistics, wp statistics statistics +1 moreWP Statistics <= 13.1.5 Unauthenticated Stored Cross-Site Scripting via browser7.2 High
- veronalabs wp statistics, wp statistics statistics +1 moreWP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via IP9.8 Critical
- essential addons for elementor lite addons for elementor lite, wpdeveloper essential addons for elementor +1 moreEssential Addons for Elementor Lite <= 5.0.8 Reflected Cross-Site Scripting6.1 Medium
- veronalabs wp statistics, wp statistics statistics +1 moreWP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_type9.8 Critical
- 99robots header footer code managerHeader Footer Code Manager <= 1.1.16 Reflected XSS6.1 Medium
- cozmoslabs profile builder – user profile & user registration forms, profile builder +1 moreProfile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site Scripting6.1 Medium
- win-911, win-911 2021 r1, 2021 r2 +2 moreWIN-911 2021 Incorrect Default Permissions5.6 Medium
- win-911, win-911 2021 r1, 2021 r2 +2 moreWIN-911 2021 Incorrect Default Permissions5.6 Medium
- rockwell automation 1734-aentr, rockwellautomation 1734-aentr point i\/o dual port network adaptor series b firmware, 1734-aentr point i\/o dual port network adaptor series c firmware +2 moreThe web interface of the 1734-AENTR communication module is vulnerable to stored XSS. A remote,...6.1 Medium
- rockwell automation 1734-aentr, rockwellautomation 1734-aentr point i\/o dual port network adaptor series b firmware, 1734-aentr point i\/o dual port network adaptor series c firmware +2 moreThe web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST...5.3 Medium
- zte zxhn f477 firmware, zxhn f677 firmware +1 moreThere is a directory traversal vulnerability in some home gateway products of ZTE. Due to the...6.5 Medium
- hospital\'s patient records management system project patient records management systemHospital Patient Record Management System v1.0 was discovered to contain a SQL injection...9.8 Critical
- hospital\'s patient records management system project patient records management systemHospital Patient Record Management System v1.0 was discovered to contain a SQL injection...9.8 Critical
- hospital\'s patient records management system project patient records management systemA local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to...7.8 High
- ibm sterling external authentication serverIBM Sterling External Authentication Server 3.4.3.2, 6.0.2.0, and 6.0.3.0 is vulnerable to path...4.3 Medium
- ibm websphere application server, websphere application server liberty +1 moreIBM WebSphere Application Server 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3...4.4 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a...6.2 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a...6.2 Medium
- cybonet pineapp mail relay, pineapp mail secure +1 moreCybonet - PineApp Mail Relay Local File Inclusion6.1 Medium
- cybonet pineapp mail relay, pineapp mail secure +1 moreCybonet - PineApp Mail Relay Unauthenticated Sql Injection6.8 Medium
- 1byte copy9, exactspy, fonetracker +6 more +8 moreThe backend infrastructure shared by multiple mobile device monitoring services does not...7.5 High
- hashicorp consulHashiCorp Consul Ingress Gateway Panic Can Shutdown Servers6.5 Medium
- zip4j project zip4jUncaught Exception in zip4j5.5 Medium
snapdUbuntusnapd regressionNo score- metadata-extractor project metadata-extractorAllocation of Resources Without Limits or Throttling in metadata-extractor5.5 Medium
- metadata-extractor project metadata-extractorImproper Handling of Exceptional Conditions inn metadata-extractor5.5 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreDenial of Service in radareorg/radare26.8 Medium
- alecto dvc-215ip firmwareSettings/network settings/wireless settings on the Alecto DVC-215IP camera version 63.1.1.173 and...8.6 High
- ec-cube, ec-cube co.,ltd. 3 series and ec-cube 4 series +1 moreEC-CUBE improperly handles HTTP Host header values5.3 Medium
- dojin club micmnis phpuploaderCross-site scripting vulnerability in phpUploader v1.2 and earlier allows a remote...6.1 Medium
- appleple a-blog cmsCross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75,...6.1 Medium
- dojin club micmnis phpuploaderSQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated...7.5 High
- appleple a-blog cmsCross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75,...6.1 Medium
- appleple a-blog cmsTemplate injection (Improper Neutralization of Special Elements Used in a Template Engine)...6.5 Medium
- ec-cube co.,ltd. plugin 'mail magazine management plugin', ec-cube e-mail newsletter management +1 moreCross-site request forgery (CSRF) vulnerability in EC-CUBE plugin 'Mail Magazine Management...4.3 Medium
- appleple a-blog cmsAuthentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74,...9.8 Critical
- watchguard firewareAn integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote...8.8 High
- Show moreLoading…