Skip to content
OpenAdvisories

Archive

12 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /12 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Unscored —
    CVE-2021-42559 Public exploit

    An issue was discovered in CALDERA 2.8.1. It contains multiple startup "requirements" that execute commands when starti…

  • Unscored —
    CVE-2021-42558 Public exploit

    An issue was discovered in CALDERA 2.8.1. It contains multiple reflected, stored, and self XSS vulnerabilities that may…

  • High 8.8
    CVE-2022-20617 Public exploit

    OS command execution vulnerability in Jenkins Docker Commons Plugin

    Jenkins Docker Commons Plugin 1.17 and earlier does not sanitize the name of an image or a tag, resulting in an OS command execution vulnerability exploitable by attackers with Item/Configure permission or able to control the contents of a previously configur…

    Jenkins Project Jenkins Docker Commons Plugin org.jenkins-ci.plugins:docker-commons Web / CMS Maven
  • Unscored —
    CVE-2021-42560 Public exploit

    An issue was discovered in CALDERA 2.9.0. The Debrief plugin receives base64 encoded "SVG" parameters when generating a…

  • Unscored —
    CVE-2021-42561 Public exploit EPSS 20%

    An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized name parameter to a p…

  • Unscored —
    CVE-2021-42562 Public exploit

    An issue was discovered in CALDERA 2.8.1. It does not properly segregate user privileges, resulting in non-admin users …

  • Critical 9.9
    CVE-2022-21675 Public exploit

    Bytecode Viewer v2.10.x Zip Slip

    Bytecode Viewer (BCV) is a Java/Android reverse engineering suite. Versions of the package prior to 2.11.0 are vulnerable to Arbitrary File Write via Archive Extraction (AKA "Zip Slip"). The vulnerability is exploited using a specially crafted archive that ho…

    Konloch bytecode-viewer