Archive

29 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /29 February 2022 →

All Critical High Medium Low Exploited only Public exploit

7 results · Feed

Unscored —

CVE-2021-46660

Signiant Manager+Agents before 15.1 allows XML External Entity (XXE) attacks.

Jan 29, 2022
Unscored —

CVE-2022-24123

MarkText through 0.16.3 does not sanitize the input of a mermaid block before rendering. This could lead to Remote Code…

Jan 29, 2022
High 7.5

CVE-2022-24124 Public exploit Scanner template EPSS 55%

SQL Injection in Casdoor

The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.

github.com/casdoor/casdoor casdoor PyPI Go

Jan 29, 2022
Unscored —

CVE-2021-46657

get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.

mariadb-10.3 mariadb-10.5 mariadb Debian Ubuntu Azure Linux

Jan 29, 2022
Unscored —

CVE-2021-46658

save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_…

mariadb-10.3 mariadb-10.5 mariadb Debian Ubuntu Azure Linux

Jan 29, 2022
Unscored —

CVE-2021-46659

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to…

mariadb-10.3 mariadb mariadb-10.5 mariadb Debian Ubuntu Azure Linux Alpine

Jan 29, 2022
Unscored —

CVE-2022-24122 Public exploit

kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-af…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Jan 29, 2022