Skip to content
OpenAdvisories

Archive

26 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /26 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2021-32849 Public exploit

    Arbitrary command execution in Gerapy

    Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in version 0.9.9. There are no known workarounds.

    Gerapy Gerapy gerapy PyPI
  • Unscored —
    CVE-2022-22852 Public exploit

    A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management Syste…

  • Unscored —
    CVE-2022-22850 Public exploit

    A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management Syste…

  • High 7.5
    CVE-2022-23990 Public exploit

    Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

    thunderbird firefox expat swish-e Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2022-22851 Public exploit

    A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodtester Hospital's Patient Records Management Syste…

  • Medium 5.3
    CVE-2022-22932 Public exploit

    Path traversal flaws

    Apache Karaf obr:* commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder. The risk is low as obr:* commands are not very used and the entry is set by user. This has been fixed in revision: htt…

    Apache Software Foundation Apache Karaf org.apache.karaf:apache-karaf Maven
  • Medium 6.6
    CVE-2021-22600 Exploited Public exploit

    Double Free in net/packet/af_packet.c leading to priviledge escalation

    A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1…

    Linux kernel kernel linux-raspi2 linux-hwe Debian Ubuntu Azure Linux
    KEV Apr 11, 2022