Skip to content
OpenAdvisories

Archive

24 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /24 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.0
    CVE-2021-43589

    Dell EMC Unity, Dell EMC UnityVSA and Dell EMC Unity XT versions prior to 5.1.2.0.5.007 contain an operating system (OS…

    Dell Unity
  • Medium 4.3
    CVE-2021-43588

    Dell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability. A remote unauthentic…

    Dell Data Protection Central
  • Medium 4.3
    CVE-2021-36349

    Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC…

    Dell Data Protection Central
  • Medium 5.4
    CVE-2022-21715

    Cross-site Scripting Vulnerability in CodeIgniter4

    CodeIgniter4 is the 4.x branch of CodeIgniter, a PHP full-stack web framework. A cross-site scripting (XSS) vulnerability was found in `API\ResponseTrait` in Codeigniter4 prior to version 4.1.8. Attackers can do XSS attacks if a potential victim is using `API…

    codeigniter4 CodeIgniter4 codeigniter4/framework Packagist
  • Medium 4.7
    CVE-2022-21710

    Cross-site Scripting in ShortDescription extension

    ShortDescription is a MediaWiki extension that provides local short description support. A cross-site scripting (XSS) vulnerability exists in versions prior to 2.3.4. On a wiki that has the ShortDescription enabled, XSS can be triggered on any page or the pag…

    StarCitizenTools mediawiki-extensions-ShortDescription Web / CMS
  • Medium —
    CVE-2022-23857

    SQL injection in github.com/navidrome/navidrome

    model/criteria/criteria.go in Navidrome before 0.47.5 is vulnerable to SQL injection attacks when processing crafted Smart Playlists. An authenticated user could abuse this to extract arbitrary data from the database, including the user table (which contains …

    github.com/navidrome/navidrome navidrome Alpine Go
  • Medium 6.5
    CVE-2022-23437 EPSS 12%

    Infinite loop within Apache XercesJ xml parser

    There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged durat…

    Apache Software Foundation Apache Xerces xerces:xercesImpl libxerces2-java Debian Ubuntu Azure Linux Maven