Archive

7 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /7 February 2022 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2021-42392 Public exploit Scanner template EPSS 83%

RCE in H2 Console

The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This…

h2database h2 com.h2database:h2 h2database Debian Ubuntu Maven

Jan 7, 2022
High 7.5

CVE-2021-22569 Public exploit

Denial of Service of protobuf-java parsing procedure

An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived o…

Google protobuf-kotlin protobuf-java google-protobuf [JRuby Gem] Debian Ubuntu Azure Linux Wolfi Maven RubyGems

Jan 7, 2022