Skip to content
OpenAdvisories

Archive

9 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /9 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Unscored —
    CVE-2021-45334

    Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authenti…

  • Unscored —
    CVE-2021-45856

    Accu-Time Systems MAXIMUS 1.0 telnet service suffers from a remote buffer overflow which causes the telnet service to c…

  • Unscored —
    CVE-2021-46163

    Kentico Xperience 13.0.44 allows XSS via an XML document to the Media Libraries subsystem.

  • Unscored —
    CVE-2022-22845 Public exploit

    QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key …

  • Unscored —
    CVE-2020-10137

    Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_I…

    Silicon Labs UZB-7
  • Unscored —
    GSD-2022-1000008

    faker.js 6.6.6 is broken and the developer has wiped the original GitHub repo

    faker.js had it's version updated to 6.6.6 in NPM (which reports it as having 2,571 dependent packages that rely upon it) and the GitHub repo has been wiped of content. This appears to have been done intentionally as the repo only has a single commit (so it w…

    faker.js npm
  • High 7.5
    CVE-2022-22846

    dnslib has DNS reply verification issue

    The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query.

    dnslib python-dnslib python-dnslib Debian Ubuntu PyPI
  • Unscored —
    CVE-2021-46164

    Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complet…

  • Unscored —
    CVE-2021-46165

    Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, bu…

  • Unscored —
    CVE-2021-46166

    Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the d…