Archive

25 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /25 February 2022 →

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

Critical 9.8

CVE-2021-36294

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability. A remote unauthe…

Dell VNX Control Station

Jan 25, 2022
Critical 9.8

CVE-2022-0332 Public exploit EPSS 32%

SQL injection in Moodle

A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.

moodle/moodle moodle Web / CMS Ubuntu Packagist

Jan 25, 2022
Critical 9.1

CVE-2021-3850

Authentication Bypass by Primary Weakness in adodb/adodb

Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21.

ADOdb adodb/adodb libphp-adodb libphp-adodb Debian Ubuntu Packagist

Jan 25, 2022
Critical 9.8

CVE-2021-46089

SQL Injection in JeecgBoot

In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.

org.jeecgframework.boot:jeecg-boot-base org.jeecgframework.boot:jeecg-boot-base-core Maven

Jan 25, 2022
Critical 9.1

CVE-2022-23944 Scanner template EPSS 79%

Apache ShenYu 2.4.1 Improper access control

User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

Apache Software Foundation Apache ShenYu (incubating) org.apache.shenyu:shenyu-common Maven

Jan 25, 2022
Critical 9.8

CVE-2021-45029

Apache ShenYu 2.4.1 Groovy Code Injection & SpEL Injection

Groovy Code Injection & SpEL Injection which lead to Remote Code Execution. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

Apache Software Foundation Apache ShenYu (incubating) org.apache.shenyu:shenyu-common Maven

Jan 25, 2022