Archive

January 2022

Vulnerabilities first published in this month (UTC), newest first.

← December 2021 2022 / January February 2022 →

All Critical High Medium Low Exploited only Public exploit

464 results · Clear filters · Feed

Medium 6.1

CVE-2022-21970 Public exploit

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jan 11, 2022
Medium 5.5

CVE-2022-21964

Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability

Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability

Microsoft Windows 10 Version 1607 Windows

Jan 11, 2022
Medium 6.4

CVE-2022-21963

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 6.8

CVE-2022-21962

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 6.8

CVE-2022-21961

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 6.8

CVE-2022-21960

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 6.8

CVE-2022-21959

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 6.8

CVE-2022-21958

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 6.1

CVE-2022-21954

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jan 11, 2022
Medium 4.2

CVE-2022-21931

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jan 11, 2022
Medium 4.2

CVE-2022-21930

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jan 11, 2022
Medium 6.3

CVE-2022-21928

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 5.3

CVE-2022-21924

Workstation Service Remote Protocol Security Feature Bypass Vulnerability

Workstation Service Remote Protocol Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 5.3

CVE-2022-21925

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability

Microsoft Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Service Pack 1 (Server Core installation) Windows Server 2008 Service Pack 2 Windows

Jan 11, 2022
Medium 4.4

CVE-2022-21921

Windows Defender Credential Guard Security Feature Bypass Vulnerability

Windows Defender Credential Guard Security Feature Bypass Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 11 version 21H2 Windows

Jan 11, 2022
Medium 6.5

CVE-2022-21918

DirectX Graphics Kernel File Denial of Service Vulnerability

DirectX Graphics Kernel File Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 6.5

CVE-2022-21915

Windows GDI+ Information Disclosure Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 5.3

CVE-2022-21913

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 5.5

CVE-2022-21906

Windows Defender Application Control Security Feature Bypass Vulnerability

Windows Defender Application Control Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 4.6

CVE-2022-21905

Windows Hyper-V Security Feature Bypass Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 4.6

CVE-2022-21900

Windows Hyper-V Security Feature Bypass Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 5.5

CVE-2022-21899

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

Microsoft Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2012 Windows

Jan 11, 2022
Medium 4.4

CVE-2022-21894 Public exploit

Secure Boot Security Feature Bypass Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 6.8

CVE-2022-21892

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 5.5

CVE-2022-21879

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 5.5

CVE-2022-21877 Public exploit

Storage Spaces Controller Information Disclosure Vulnerability

Storage Spaces Controller Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 5.5

CVE-2022-21876

Win32k Information Disclosure Vulnerability

Win32k Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 6.5

CVE-2022-21847

Windows Hyper-V Denial of Service Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 5.5

CVE-2022-21838

Windows Cleanup Manager Elevation of Privilege Vulnerability

Windows Cleanup Manager Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 6.1

CVE-2022-21839 Public exploit

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 11, 2022
Medium 5.9

CVE-2021-43055

TIBCO eFTL Token Caching Vulnerability

The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows clients to inherit the permissions of the client th…

TIBCO Software TIBCO eFTL - Developer Edition TIBCO eFTL - Community Edition TIBCO eFTL - Enterprise Edition

Jan 11, 2022
Medium 4.3

CVE-2021-29701

IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could …

IBM Rational Team Concert Engineering Workflow Management

Jan 11, 2022
Medium 5.3

CVE-2022-0170

Improper Access Control in chocobozzz/peertube

peertube is vulnerable to Improper Access Control

Chocobozzz chocobozzz/peertube

Jan 11, 2022
Medium 6.5

CVE-2022-21672

/etc/pki/tls and /etc/ssl/certs include distrusted certificates in make-ca

make-ca is a utility to deliver and manage a complete PKI configuration for workstations and servers. Starting with version 0.9 and prior to version 1.10, make-ca misinterprets Mozilla certdata.txt and treats explicitly untrusted certificates like trusted one…

lfs-book make-ca

Jan 10, 2022
Medium 5.3

CVE-2022-21670

Uncontrolled Resource Consumption in markdown-it

markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds asi…

markdown-it markdown-it node-markdown-it markdown-it Debian Ubuntu npm

Jan 10, 2022
Medium 4.3

CVE-2022-0174

Improper Validation of Specified Quantity in Input in dolibarr/dolibarr

Improper Validation of Specified Quantity in Input vulnerability in dolibarr dolibarr/dolibarr.

Dolibarr dolibarr/dolibarr dolibarr dolibarr/dolibarr Ubuntu Packagist

Jan 10, 2022
Medium 5.4

CVE-2022-22117

Directus - Stored Cross-Site Scripting (XSS) in Profile Avatar Image

In Directus, versions 9.0.0-alpha.4 through 9.4.1 allow unrestricted file upload of .html files in the media upload functionality, which leads to Cross-Site Scripting vulnerability. A low privileged attacker can upload a crafted HTML file as a profile avatar,…

directus directus

Jan 10, 2022
Medium 5.4

CVE-2022-22116

Directus - Stored Cross-Site Scripting (XSS) via SVG File Upload

In Directus, versions 9.0.0-alpha.4 through 9.4.1 are vulnerable to stored Cross-Site Scripting (XSS) vulnerability via SVG file upload in media upload functionality. A low privileged attacker can inject arbitrary javascript code which will be executed in a v…

directus directus

Jan 10, 2022
Medium 6.8

CVE-2022-0156

Use After Free in vim/vim

vim is vulnerable to Use After Free

vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine

Jan 10, 2022
Medium 5.2

CVE-2022-0157

Cross-site Scripting (XSS) - Stored in phoronix-test-suite/phoronix-test-suite

phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

phoronix-test-suite phoronix-test-suite/phoronix-test-suite phoronix-test-suite Ubuntu

Jan 10, 2022