Skip to content
OpenAdvisories

Archive

January 2022

Vulnerabilities first published in this month (UTC), newest first.

← December 2021 2022 / January February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

2,026 results · Feed

  • High 8.6
    CVE-2021-44384

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44383

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44381

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44382

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44380

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44379

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44378

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44377

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44376

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44374

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44373

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44372

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44371

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44370

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44369

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44368

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44367

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44365

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44364

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44363

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44362

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44360

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44361

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44359

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • High 8.6
    CVE-2021-44358

    A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.…

  • Medium 6.5
    CVE-2022-0395

    Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

    Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.

    LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist
  • High 7.3
    CVE-2021-23558

    Prototype Pollution

    The package bmoor before 0.10.1 are vulnerable to Prototype Pollution due to missing sanitization in set function. **Note:** This vulnerability derives from an incomplete fix in [CVE-2020-7736](https://security.snyk.io/vuln/SNYK-JS-BMOOR-598664)

    bmoor npm
  • Medium 5.6
    CVE-2021-23760

    Prototype Pollution

    The package keyget from 0.0.0 are vulnerable to Prototype Pollution via the methods set, push, and at which could allow an attacker to cause a denial of service and may lead to remote code execution. **Note:** This vulnerability derives from an incomplete fix…

    keyget npm
  • Critical 9.8
    CVE-2021-23484

    Arbitrary File Write via Archive Extraction (Zip Slip)

    The package zip-local before 0.3.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can lead to an extraction of a crafted file outside the intended extraction directory.

    zip-local npm
  • High 8.4
    CVE-2022-0393

    Out-of-bounds Read in vim/vim

    Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2021-46448

    H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/customers.php?page…

  • Unscored —
    CVE-2021-46447

    A cross-site scripting (XSS) vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary w…

  • Unscored —
    CVE-2021-46446

    H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=a…

  • Unscored —
    CVE-2021-46444

    H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=a…

  • Unscored —
    CVE-2021-46445

    H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/categories.php?box…

  • High 8.5
    CVE-2022-0352

    Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web

    Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16.

    janeczku janeczku/calibre-web calibreweb PyPI
  • Unscored —
    CVE-2021-4160

    BN_mod_exp may produce incorrect results on MIPS

    There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and i…

    OpenSSL OpenSSL openssl edk2 Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2022-23889

    The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to cre…

  • Unscored —
    CVE-2022-23888

    YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component /yzmcms/comment/index/init.h…

  • Unscored —
    CVE-2022-23887

    YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete …