Archive

11 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /11 February 2022 →

All Critical High Medium Low Exploited only Public exploit

135 results · Feed

Unscored —

CVE-2020-28102

cscms v4.1 allows for SQL injection via the "js_del" function.

Jan 11, 2022
Medium 5.3

CVE-2022-0170

Improper Access Control in chocobozzz/peertube

peertube is vulnerable to Improper Access Control

Chocobozzz chocobozzz/peertube

Jan 11, 2022
Unscored —

CVE-2021-43566

All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a direct…

samba samba samba samba Debian Ubuntu Azure Linux Alpine

Jan 11, 2022
High 8.1

CVE-2022-21671

Potential exposure of Replit tokens to an Unauthorized Actor in @replit/crosis

@replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a…

replit crosis @replit/crosis npm

Jan 11, 2022
Unscored —

CVE-2021-45460

A vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18). A service is started by an unquoted re…

Siemens SICAM PQ Analyzer ICS / OT

Jan 11, 2022
Unscored —

CVE-2021-45033

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER…

Siemens CP-8022 MASTER MODULE WITH GPRS CP-8000 MASTER MODULE WITH I/O -25/+70°C CP-8021 MASTER MODULE ICS / OT

Jan 11, 2022
Unscored —

CVE-2021-45034

A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions < V16.20), CP-8000 MASTER…

Siemens CP-8021 MASTER MODULE CP-8000 MASTER MODULE WITH I/O -40/+70°C CP-8022 MASTER MODULE WITH GPRS ICS / OT

Jan 11, 2022
Unscored —

CVE-2021-41769

A vulnerability has been identified in SIPROTEC 5 6MD85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 …

Siemens SIPROTEC 5 6MD85 devices (CPU variant CP300) SIPROTEC 5 7SK85 devices (CPU variant CP300) SIPROTEC 5 7UT85 devices (CPU variant CP300) ICS / OT

Jan 11, 2022
High 8.8

CVE-2021-37198

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All ver…

Siemens COMOS V10.3 COMOS V10.2 COMOS V10.4 ICS / OT

Jan 11, 2022
Unscored —

CVE-2021-37197

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All ver…

Siemens COMOS V10.3 COMOS V10.2 COMOS V10.4 ICS / OT

Jan 11, 2022
Unscored —

CVE-2021-37196

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All ver…

Siemens COMOS V10.3 COMOS V10.2 COMOS V10.4 ICS / OT

Jan 11, 2022
Unscored —

CVE-2021-37195

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All ver…

Siemens COMOS V10.3 COMOS V10.2 COMOS V10.4 ICS / OT

Jan 11, 2022
High 7.1

CVE-2022-0144

Improper Privilege Management in shelljs/shelljs

shelljs is vulnerable to Improper Privilege Management

shelljs shelljs/shelljs shelljs node-shelljs Debian Ubuntu npm

Jan 11, 2022
Critical 9.1

CVE-2022-21669

Bot token exposed in main.py

PuddingBot is a group management bot. In version 0.0.6-b933652 and prior, the bot token is publicly exposed in main.py, making it accessible to malicious actors. The bot token has been revoked and new version is already running on the server. As of time of pu…

PuddingBot pudding-bot

Jan 11, 2022
Unscored —

CVE-2021-44647

Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a …

ntopng lua5.4 lua memcached Debian Azure Linux

Jan 11, 2022