Archive

6 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /6 February 2022 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.0

CVE-2022-21661 Public exploit Scanner template EPSS 98%

SQL injection in WordPress

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain wa…

WordPress wordpress-develop wordpress wordpress Web / CMS Debian Ubuntu

Jan 6, 2022
High 8.1

CVE-2021-46143 Public exploit

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

firefox insighttoolkit4 qtwebengine-opensource-src expat Debian Ubuntu Azure Linux Alpine

Jan 6, 2022