Skip to content
OpenAdvisories

Archive

15 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /15 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2021-33827

    The files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings.

  • Unscored —
    CVE-2021-33828

    The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (t…

  • Unscored —
    CVE-2021-44537

    ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading …

    owncloud-client Debian
  • Unscored —
    CVE-2020-28919

    A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote at…

  • Unscored —
    CVE-2021-42555

    Pexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing call-setup input valida…

  • Unscored —
    CVE-2021-35969

    Pexip Infinity before 26 allows temporary remote Denial of Service (abort) because of missing call-setup input validati…

  • Unscored —
    CVE-2021-33499

    Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2).

  • Unscored —
    CVE-2021-33498

    Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2).

  • Unscored —
    CVE-2021-32545

    Pexip Infinity before 26 allows remote denial of service because of missing RTMP input validation.

  • Unscored —
    CVE-2022-23178 Public exploit Scanner template EPSS 75%

    An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI…

  • High 7.8
    CVE-2022-23095

    Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a cra…

  • Unscored —
    CVE-2021-44049

    CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated pri…

  • Unscored —
    CVE-2021-33963

    China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by …

  • Unscored —
    CVE-2022-23094

    Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon cra…

    libreswan libreswan libreswan Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2021-24044

    Access of Resource Using Incompatible Type in Hermes

    By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a…

    Facebook Hermes hermes-engine npm