Skip to content
OpenAdvisories

Archive

January 2022

Vulnerabilities first published in this month (UTC), newest first.

← December 2021 2022 / January February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.1
    CVE-2021-40407 Exploited EPSS 48%

    An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13…

    KEV Dec 18, 2024
  • High 7.8
    CVE-2021-4034 Exploited · Ransomware Public exploit EPSS 95%

    A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid too…

    policykit-1 policykit-1 polkit polkit Debian Ubuntu Azure Linux Alpine
    KEV Jun 27, 2022
  • Medium 6.6
    CVE-2021-22600 Exploited Public exploit

    Double Free in net/packet/af_packet.c leading to priviledge escalation

    A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1…

    Linux kernel kernel linux-raspi2 linux-hwe Debian Ubuntu Azure Linux
    KEV Apr 11, 2022
  • Critical 9.8
    CVE-2021-35587 Exploited Public exploit Scanner template EPSS 96%

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported ve…

    Oracle Access Manager
    KEV Nov 28, 2022
  • Critical 9.8
    CVE-2022-23227 Exploited EPSS 48%

    NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused t…

    KEV Dec 18, 2024
  • Low 3.7
    CVE-2022-23134 Exploited Public exploit Scanner template EPSS 95%

    Possible view of the setup pages by unauthenticated users if config file already exists

    After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

    Zabbix Frontend zabbix Debian
    KEV Feb 22, 2022
  • Critical 9.1
    CVE-2022-23131 Exploited Public exploit Scanner template EPSS 96%

    Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML

    In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to esca…

    Zabbix Frontend
    KEV Feb 22, 2022
  • High 7.0
    CVE-2022-21919 Exploited

    Windows User Profile Service Elevation of Privilege Vulnerability

    Windows User Profile Service Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Apr 25, 2022
  • High 7.0
    CVE-2022-21882 Exploited · Ransomware Public exploit EPSS 59%

    Win32k Elevation of Privilege Vulnerability

    Win32k Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Feb 4, 2022
  • Medium 4.3
    CVE-2021-35247 Exploited

    Improper Input Validation Vulnerability in Serv-U

    Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as t…

    SolarWinds Serv-U
    KEV Jan 21, 2022
  • Medium 5.0
    CVE-2022-22265 Exploited

    An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary …

    Samsung Mobile Samsung Mobile Devices
    KEV Sep 18, 2023
  • Low 3.3
    CVE-2021-44168 Exploited Public exploit

    A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0…

    Fortinet Fortinet FortiOS Network devices
    KEV Dec 10, 2021