Skip to content
OpenAdvisories

Archive

4 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /4 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2021-4154 Public exploit

    A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 par…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • High 8.8
    CVE-2022-23614 Public exploit

    Code injection in Twig

    Twig is an open source template language for PHP. When in a sandbox mode, the `arrow` parameter of the `sort` filter must be a closure to avoid attackers being able to run arbitrary PHP functions. In affected versions this constraint was not properly enforced…

    twigphp Twig php-twig twig/twig Debian Ubuntu Packagist
  • High 7.7
    CVE-2022-24348 Public exploit

    Path traversal and dereference of symlinks in Argo CD

    Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. For example, an attacker may be able to discover credentials stored in a YAML file.

    github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go
  • High 8.8
    CVE-2021-46398 Public exploit

    Cross-Site Request Forgery in Filebrowser

    A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor user with admin privilege and get access to the filesystem via a malicious HTML webpage that is sent to the victim. An admin can run commands …

    github.com/filebrowser/filebrowser/v2 Go
  • Medium 5.8
    CVE-2021-4043 Public exploit

    NULL Pointer Dereference in gpac/gpac

    NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.

    gpac gpac/gpac gpac Debian