Skip to content
OpenAdvisories

Archive

January 2022

Vulnerabilities first published in this month (UTC), newest first.

← December 2021 2022 / January February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

514 results · Clear filters · Feed

  • High 8.6
    CVE-2021-44381

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44382

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44380

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44379

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44378

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44377

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44376

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44374

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44373

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44372

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44371

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44370

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44369

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44368

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44367

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44365

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44364

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44363

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44362

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44360

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44361

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44359

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44358

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 7.3
    CVE-2021-23558

    Prototype Pollution

    The package bmoor before 0.10.1 are vulnerable to Prototype Pollution due to missing sanitization in set function. **Note:** This vulnerability derives from an incomplete fix in [CVE-2020-7736](https://security.snyk.io/vuln/SNYK-JS-BMOOR-598664)

    bmoor npm
  • High 8.4
    CVE-2022-0393

    Out-of-bounds Read in vim/vim

    Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 8.5
    CVE-2022-0352

    Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web

    Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16.

    janeczku janeczku/calibre-web calibreweb PyPI
  • High 8.8
    CVE-2022-22994

    Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices.

    A remote code execution vulnerability was discovered on Western Digital My Cloud devices where an attacker could trick a NAS device into loading through an unsecured HTTP call. This was a result insufficient verification of calls to the device. The vulnerabil…

    Western Digital My Cloud
  • High 7.8
    CVE-2022-22992

    Command Injection Remote Code Execution vulnerability on Western Digital My Cloud devices.

    A command injection remote code execution vulnerability was discovered on Western Digital My Cloud Devices that could allow an attacker to execute arbitrary system commands on the device. The vulnerability was addressed by escaping individual arguments to she…

  • High 7.1
    CVE-2021-40416

    An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RL…

  • High 7.1
    CVE-2021-40415

    An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RL…

  • High 7.1
    CVE-2021-40414

    An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RL…

  • High 7.1
    CVE-2021-40413

    An incorrect default permission vulnerability exists in the cgiserver.cgi cgi_check_ability functionality of reolink RL…

  • High 7.5
    CVE-2021-40406

    A denial of service vulnerability exists in the cgiserver.cgi session creation functionality of reolink RLC-410W v3.0.0…

  • High 8.3
    CVE-2022-21134

    A firmware update vulnerability exists in the "update" firmware checks functionality of reolink RLC-410W v3.0…

  • High 7.5
    CVE-2022-21199

    An information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W v3.0.0.136_20121102. A …

  • High 8.6
    CVE-2022-21801

    A denial of service vulnerability exists in the netserver recv_command functionality of reolink RLC-410W v3.0.0.136_201…

  • High 7.5
    CVE-2021-40423

    A denial of service vulnerability exists in the cgiserver.cgi API command parser functionality of Reolink RLC-410W v3.0…

  • High 8.1
    CVE-2022-21236

    An information disclosure vulnerability exists due to a web server misconfiguration in the Reolink RLC-410W v3.0.0.136_…

  • High 8.1
    CVE-2021-44463

    Emerson DeltaV Uncontrolled Search Path Element

    Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations (All versions) when some DeltaV services are started.

  • High 8.0
    CVE-2021-22825

    A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could allow an attacker…