Archive
January 2022
Vulnerabilities first published in this month (UTC), newest first.
2,026 results · Feed
-
High 7.4
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.
-
Unscored —
Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the …
-
Medium 6.8
Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore
Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.
-
Unscored —
A reflected cross-site scripting (XSS) vulnerability in \lib\packages\themes\themes.php of Navigate CMS v2.9.4 allows a…
-
Unscored —
Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. SQL injection vuln…
-
Unscored —
Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter.
-
Unscored —
jQuery UI is a third-party library used by Drupal. This library was previously thought to be end-of-life. Late in 2021,…
-
High 7.8
Safenet Authentication Service Remote Desktop Gateway prior to 2.0.3 may allow privilege escilation to authenticated users
A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a system where the agent is installed.
-
Medium 4.8
IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. A rem…
-
Unscored —
jQuery UI is a third-party library used by Drupal. The jQuery UI Datepicker module provides the jQuery UI Datepicker li…
-
Unscored —
The Background service in Allwinner R818 SoC Android Q SDK V1.0 is used to manage background applications. Malicious ap…
-
Unscored —
There is a Cross Site Scripting attack (XSS) vulnerability in JavaQuarkBBS <= v2. By entering specific statements into …
-
Unscored —
An issue was discovered in Delta RM 1.2. It is possible for an unprivileged user to access the same information as an a…
-
Unscored —
jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the …
-
Unscored —
There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the i…
-
Unscored —CVE-2021-46104 Scanner template
An issue was discovered in webp_server_go 0.4.0. There is a directory traversal vulnerability that can read arbitrary f…
-
Unscored —
There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could c…
-
Medium 6.6
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…
-
Medium 4.8
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…
-
Medium 6.6
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…
-
Medium 5.4
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…
-
Medium 6.6
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…
-
Medium 5.4
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…
-
Medium 5.4
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…
-
Medium 5.4
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…
-
High 7.2
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…
-
Medium 6.5
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Medium 4.3
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12…
-
High 8.8CVE-2022-21392 Public exploit
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework…
-
Critical 9.9
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications…
-
Critical 10.0
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications…
-
Critical 10.0
Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications…
-
Low 3.3
Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications Applications (compone…
-
Medium 5.3
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Sup…
-
Medium 6.1
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported v…
-
Medium 4.3
Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Log). Sup…
-
High 7.7
Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). S…
-
Medium 6.4
Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). S…
-
Medium 6.3
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are a…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported vers…