CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- home owners collection management system project owners collection management systemHome Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user...9.8 Critical
- home owners collection management system project owners collection management systemHome Owners Collection Management System v1.0 was discovered to contain a remote code execution ...8.8 High
- weblateCross-site Scripting in Weblate5.4 Medium
- jetbrains youtrackJetBrains YouTrack before 2021.4.40426 was vulnerable to SSTI (Server-Side Template Injection)...9.8 Critical
- jetbrains hubJetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS.6.1 Medium
- jetbrains hubJetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).9.1 Critical
- karma project karmaOpen Redirect5.4 Medium
- jetbrains teamcityJetBrains TeamCity before 2021.2.2 was vulnerable to reflected XSS.6.1 Medium
- jetbrains hubIn JetBrains Hub before 2022.1.14434, SAML request takeover was possible.9.8 Critical
- jetbrains teamcityJetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push...9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be...7.5 High
- zeplAll pervious versions before October 25, 2021 of Zepl Notebooks are affeced by a sandbox escape...9.9 Critical
- tp-link tl-wr840n firmwareTP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability...9.8 Critical
- tp-link tl-wr840n firmwareTP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a remote code execution (RCE)...9.8 Critical
- tp-link tl-wr840n firmwareTP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain an integer overflow via the function...7.5 High
- tp-link tl-wr840n firmwareTP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection vulnerability...9.8 Critical
- c-data onu4ferw project onu4ferw firmwareA command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1...7.8 High
- notimoo project notimooA cross-site scripting (XSS) vulnerability in PaquitoSoftware Notimoo v1.2 allows attackers to...6.1 Medium
- hayageek jquery upload filejQuery-Upload-File XSS in fileNameStr6.1 Medium
- honor pcmanagerPCManager versions 11.1.1.95 has a privilege escalation vulnerability. Successful exploit could...9.8 Critical
- huawei ais-bw80h-00 firmwareThe laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H...7.8 High
- huawei emui, magic ui +1 moreThere is an improper permission management vulnerability in the Wallet apps. Successful...5.5 Medium
- huawei emui, harmonyos, magic ui +2 moreThere is a memory address out of bounds in smartphones. Successful exploitation of this...9.8 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is a vulnerability when configuring permission isolation in smartphones. Successful...9.8 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is a logic bypass vulnerability in smartphones. Successful exploitation of this...9.8 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is a memory address out of bounds in smartphones. Successful exploitation of this...9.8 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is a vulnerability when configuring permission isolation in smartphones. Successful...9.8 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is a memory address out of bounds in smartphones. Successful exploitation of this...9.8 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is a memory address out of bounds vulnerability in smartphones. Successful exploitation of...9.8 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is a code injection vulnerability in smartphones. Successful exploitation of this...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a buffer overflow vulnerability in smartphones. Successful exploitation of this...9.1 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is an improper verification vulnerability in smartphones. Successful exploitation of this...7.5 High
- huawei emui, magic ui +1 moreThere is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may...7.5 High
- huawei emui, magic ui +1 moreThere is an improper verification vulnerability in smartphones. Successful exploitation of this...9.1 Critical
- huawei harmonyosThe interface of a certain HarmonyOS module has an integer overflow vulnerability. Successful...9.8 Critical
- huawei emui, magic ui +1 moreThere is a software integer overflow leading to a TOCTOU condition in smartphones. Successful...7.0 High
- huawei harmonyosThe interface of a certain HarmonyOS module has an invalid address access vulnerability....5.5 Medium
- huawei harmonyosThe interface of a certain HarmonyOS module has a UAF vulnerability. Successful exploitation of...5.5 Medium
- huawei harmonyosSome Huawei products have an integer overflow vulnerability. Successful exploitation of this...5.5 Medium
- firstmallGabia Firstmall remote code execution vulnerability8.1 High
- ge cimplicity, general electric proficy cimplicity +1 moreICSA-22-053-02 GE Proficy CIMPLICITY-Cleartext7.5 High
- fatek fvdesignerICSA-22-055-01 FATEK Automation FvDesigner7.8 High
- general electric proficy cimplicity, ge proficy cimplicitiy +1 moreICSA-22-053-01 GE Proficy CIMPLICITY-IPM7.5 High
- fatek fvdesignerICSA-22-055-01 FATEK Automation FvDesigner7.8 High
- fatek fvdesignerICSA-22-055-01 FATEK Automation FvDesigner7.8 High
- eset endpoint antivirus for linux, endpoint antivirus, server security +1 more +3 moreUse-after-free vulnerability in ESET products for Linux5.9 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a...6.2 Medium
- jetbrains clion, goland, intellij idea +4 more +6 moreJetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3...9.8 Critical
- jetbrains youtrackJetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon.5.4 Medium
- Show moreLoading…