Archive

17 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /17 February 2022 →

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

High 7.2

CVE-2022-0242

Unrestricted Upload of File with Dangerous Type in crater-invoice/crater

Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.

crater-invoice crater-invoice/crater bytefury/crater Packagist

Jan 17, 2022
High 8.3

CVE-2022-0258

SQL Injection in pimcore/pimcore

pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command

pimcore pimcore/pimcore pimcore/pimcore Packagist

Jan 17, 2022
High 7.1

CVE-2022-0253

Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist

Jan 17, 2022
High 7.6

CVE-2021-4164

Cross-Site Request Forgery (CSRF) in janeczku/calibre-web

calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

janeczku janeczku/calibre-web calibreweb PyPI

Jan 17, 2022
High 7.3

CVE-2021-3857

Cross-site Scripting (XSS) - Stored in chaskiq/chaskiq

chaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Chaskiq chaskiq/chaskiq

Jan 17, 2022
High 7.7

CVE-2021-4171

Business Logic Errors in janeczku/calibre-web

calibre-web is vulnerable to Business Logic Errors

janeczku janeczku/calibre-web calibreweb PyPI

Jan 17, 2022