Skip to content
OpenAdvisories

Archive

28 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /28 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-23484

    Arbitrary File Write via Archive Extraction (Zip Slip)

    The package zip-local before 0.3.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can lead to an extraction of a crafted file outside the intended extraction directory.

    zip-local npm
  • Critical 9.1
    CVE-2021-40412 EPSS 27%

    An OScommand injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136…

  • Critical 9.1
    CVE-2021-40410 EPSS 28%

    An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13…

  • Critical 9.1
    CVE-2021-40411

    An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13…

  • Critical 9.1
    CVE-2021-40409

    An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13…

  • Critical 9.1
    CVE-2021-40407 Exploited EPSS 48%

    An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13…

    KEV Dec 18, 2024
  • Critical 9.1
    CVE-2021-40408

    An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13…

  • Critical 9.1
    CVE-2022-21217

    An out-of-bounds write vulnerability exists in the device TestEmail functionality of reolink RLC-410W v3.0.0.136_201211…

  • Critical 10.0
    CVE-2021-40419

    A firmware update vulnerability exists in the 'factory' binary of reolink RLC-410W v3.0.0.136_20121102. A specially-cra…

  • Critical 9.3
    CVE-2022-21796

    A memory corruption vulnerability exists in the netserver parse_command_list functionality of reolink RLC-410W v3.0.0.1…

  • Critical 9.1
    CVE-2022-23096

    An issue was discovered in the DNS proxy in Connman through 1.40. The TCP server reply implementation lacks a check for…

    connman connman connman Debian Ubuntu Alpine