CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override)...7.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2021.2.4, local code execution (without permission from a user)...7.8 High
- jetbrains youtrackJetBrains YouTrack before 2021.4.31698 was vulnerable to stored XSS on the Notification templates...5.4 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only...4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.8.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't...7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was...9.8 Critical
- jetbrains teamcityJetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS.5.4 Medium
- jetbrains teamcityJetBrains TeamCity before 2021.2.1 was vulnerable to reflected XSS.6.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.2, health items of pull requests were shown to users who lacked...6.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via...5.3 Medium
- jetbrains teamcityJetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use (TOCTOU) race...8.1 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, the Agent Push feature allowed selection of any private...5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible.6.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie.5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible.9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible.6.1 Medium
- jetbrains kotlin, oracle communications cloud native core binding support function, communications pricing design center +2 moreImproper Locking in JetBrains Kotlin5.3 Medium
- jetbrains hubIn JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS.6.5 Medium
- jetbrains hubIn JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with...7.5 High
- hashicorp terraform enterpriseHashiCorp Terraform Enterprise before 202202-1 inserts Sensitive Information into a Log File.7.5 High
oqscrates.iooqs's Post-Quantum Signature scheme Rainbow level I parametersets brokenNo score- walineIn waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address.5.3 Medium
- eyesofnetworkAn authenticated user can upload an XML file containing an XSS via the ITSM module of...5.4 Medium
- google fuchsiaWrite access to VMO data through copy-on-write in Fuchsia7.5 High
- google fscryptPrivilege escalation through command injection in fscrypt5.0 Medium
- google fscryptLocal Denial of Service in fscrypt PAM module5.5 Medium
- google fscryptDenial of Service in fscrypt5.5 Medium
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreBusiness Logic Errors in dolibarr/dolibarr4.3 Medium
- apache jspwikiApache JSPWiki Cross-site scripting vulnerability on User Preferences screen6.1 Medium
- apache jspwikiApache JSPWiki CSRF Account Takeover8.8 High
- apache airflowApache Airflow: RCE in example DAGs8.8 High
- apache airflowApache Airflow: Reflected XSS via Origin Query Argument in URL6.1 Medium
- qnap systems inc. proxy server, qnap nas proxy server +1 moreReflected XSS Vulnerability in Proxy Server5.3 Medium
- qnap systems inc. proxy server, qnap nas proxy server +1 moreStored XSS Vulnerability in Proxy Server6.9 Medium
- visual voice mail project voice mail** DISPUTED ** The Visual Voice Mail (VVM) application through 2022-02-24 for Android allows...8.1 High
ghostscriptOSS-FuzzStack-buffer-overflow in check_user_password_preR5No scoreujsonPyPIHeap-buffer-overflow in ujson.cpython-38-x86_64-linux-gnu.soNo score- honeywell hbw2per1 firmware, hdzp252di firmware +1 moreHoneywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow a video replay attack...9.8 Critical
- honeywell hbw2per1 firmware, hdzp252di firmware +1 moreHoneywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing (for...7.5 High
- hp ilo amplifier packMultiple buffer overflow security vulnerabilities have been identified in HPE iLO Amplifier Pack...7.2 High
- hpe integrated lights-outA potential remote host header injection security vulnerability has been identified in HPE...5.3 Medium
- hewlett packard enterprise hpe oneview global dashboard, hpe oneview global dashboard +1 moreA remote URL redirection vulnerability was discovered in HPE OneView Global Dashboard version(s):...6.1 Medium
- hewlett packard enterprise hpe oneview global dashboard, hpe oneview global dashboard +1 moreA remote cross-site scripting vulnerability was discovered in HPE OneView Global Dashboard...6.1 Medium
- trillium notes project trillum notesA Denial of Service vulnerabilty exists in Trilium Notes 0.48.6 in the setupPage function5.5 Medium
- xerteA Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when...6.5 Medium
- xerteAn Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in...8.8 High
- amazon awsui\/components-react, aws awsui-documentation +1 moreCross site scripting in @awsui/components-react8.8 High
- nottingham.ac xerte online toolkitsA Remote Code Execution (RCE) vulnerability exists in the Xerte Project Xerte through 3.8.4 via a...9.8 Critical
- nottingham.ac xerte online toolkitsA Site Scripting (XSS) vulnerability exists in the Xerte Project Xerte through 3.8.4 via the link...6.1 Medium
- Show moreLoading…