Archive
2 February 2022
Vulnerabilities first published on this day (UTC), newest first.
10 results · Clear filters · Feed
-
High 7.4CVE-2022-0432 Scanner template
Prototype Pollution in mastodon/mastodon
Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0.
-
High 7.5
CODESYS: Null Pointer Dereference in CODESYS PROFINET stack
Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service (DoS) attack of an unauthenticated user via SNMP.
-
High 8.8
PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment
In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.
-
High 7.0
Unchecked Class Instantiation when providing Plugin Classes
pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc…
-
High 8.8
An authenticated and authorized agent user could potentially gain administrative access via an SQLi vulnerability to Ca…
-
High 8.8
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb versi…
-
High 8.8
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb versi…
-
High 7.8
A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiExtender version…
-
High 8.1
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb ma…
-
High 8.4
Use After Free in vim/vim
Use After Free in GitHub repository vim/vim prior to 8.2.