Skip to content
OpenAdvisories

Archive

January 2022

Vulnerabilities first published in this month (UTC), newest first.

← December 2021 2022 / January February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

87 results · Clear filters · Feed

  • Low 3.1
    CVE-2021-38957

    IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validati…

    IBM Security Verify Access
  • Low 3.0
    CVE-2021-38895

    IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting. This vulnerability allows use…

    IBM Security Verify Access
  • Low 2.7
    CVE-2021-38894

    IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when a…

    IBM Security Verify Access
  • Low 3.0
    CVE-2021-25743

    ANSI escape characters in kubectl output are not being filtered

    kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.

    Kubernetes Kubernetes k8s.io/kubernetes kubernetes Debian Wolfi Go
  • Low 3.5
    CVE-2022-21652

    Insufficient Session Expiration in shopware

    Shopware is an open source e-commerce software platform. In affected versions shopware would not invalidate a user session in the event of a password change. With version 5.7.7 the session validation was adjusted, so that sessions created prior to the latest …

    shopware shopware shopware/shopware Packagist
  • Low 3.3
    CVE-2021-44168 Exploited Public exploit

    A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0…

    Fortinet Fortinet FortiOS Network devices
    KEV Dec 10, 2021
  • Low 3.5
    CVE-2021-45916

    SUN & MOON RISE CO., LTD. Shockwall - Improper Input Validation

    The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially.

    SUN & MOON RISE Shockwall