Skip to content
OpenAdvisories

Archive

27 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /27 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2021-46102

    Integer overflow in solana_rbpf

    From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st_value is read directly from ELF file without checking. If the sym.st_value is rather large, an integer overflow is trigger…

    solana_rbpf crates.io
  • High 8.6
    CVE-2021-44793

    Information Leakege via Unauthorized Access in Single Connect

    Single Connect does not perform an authorization check when using the sc-reports-ui" module. A remote attacker could exploit this vulnerability to access the device configuration page and export the data to an external file. The exploitation of this vulnerabi…

    Kron Single Connect
  • High 7.6
    CVE-2022-0372

    Cross-site Scripting (XSS) - Stored in crater-invoice/crater

    Cross-site Scripting (XSS) - Stored in Packagist bytefury/crater prior to 6.0.2.

    crater-invoice crater-invoice/crater bytefury/crater Packagist
  • High 7.1
    CVE-2022-0370

    Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

    Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

    LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  • High 7.0
    CVE-2022-23181

    Local privilege escalation with FileStore

    The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of …

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven