Skip to content
OpenAdvisories

Archive

10 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /10 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.0
    CVE-2022-21668 Public exploit

    Pipenv's requirements.txt parsing allows malicious index url in comments

    pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in pipenv's parsing of requirements files allows an attacker to insert a specially crafted string inside a comment anywhere within a requiremen…

    pypa pipenv pipenv pipenv Ubuntu PyPI
  • High 8.0
    CVE-2022-0155 Public exploit

    Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects

    follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

    follow-redirects follow-redirects/follow-redirects js-jquery follow-redirects Debian Ubuntu Azure Linux npm
  • Unscored —
    CVE-2021-24862 Public exploit Scanner template EPSS 73%

    RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection

    The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue

    Web / CMS
  • Critical 9.8
    CVE-2021-43297 Public exploit EPSS 17%

    Dubbo Hessian cause RCE when parse error

    A deserialization vulnerability existed in dubbo hessian-lite 3.2.11 and its earlier versions, which could lead to malicious code execution. Most Dubbo users use Hessian2 as the default serialization/deserialization protocol, during Hessian catch unexpected e…

    Apache Software Foundation Apache Dubbo org.apache.dubbo:dubbo Maven
  • Unscored —
    CVE-2021-25032 Public exploit Scanner template

    PublishPress Capabilities < 2.3.1 - Unauthenticated Arbitrary Options Update to Blog Compromise

    The PublishPress Capabilities WordPress plugin before 2.3.1, PublishPress Capabilities Pro WordPress plugin before 2.3.1 does not have authorisation and CSRF checks when updating the plugin's settings via the init hook, and does not ensure that the options to…

    Web / CMS