Skip to content
OpenAdvisories

Archive

7 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /7 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.1
    CVE-2022-23623

    Validation bypass in frourio

    Frourio is a full stack framework, for TypeScript. Frourio users who uses frourio version prior to v0.26.0 and integration with class-validator through `validators/` folder are subject to a input validation vulnerability. Validators do not work properly for r…

    frouriojs frourio frourio npm
  • High 8.1
    CVE-2022-23624

    Validation bypass in frourio-express

    Frourio-express is a minimal full stack framework, for TypeScript. Frourio-express users who uses frourio-express version prior to v0.26.0 and integration with class-validator through `validators/` folder are subject to a input validation vulnerability. Valid…

    frouriojs frourio-express frourio-express npm
  • High 8.2
    CVE-2021-3861

    The RNDIS USB device class includes a buffer overflow vulnerability

    The RNDIS USB device class includes a buffer overflow vulnerability. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hvfp-w4h8-gxvj

    zephyrproject-rtos Zephyr zephyr Ubuntu
  • High 8.2
    CVE-2021-3835

    Buffer overflow in usb device class

    Buffer overflow in usb device class. Zephyr versions >= v2.6.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jf

    zephyrproject-rtos Zephyr zephyr Ubuntu
  • High 7.8
    CVE-2022-23613

    Privilege escalation on xrdp

    xrdp is an open source remote desktop protocol (RDP) server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root.…

    neutrinolabs xrdp xrdp xrdp Debian Ubuntu Alpine
  • High 7.7
    CVE-2022-23263

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • High 7.5
    CVE-2022-21712

    Cookie and header exposure in twisted

    twisted is an event-driven networking engine written in Python. In affected versions twisted exposes cookies and authorization headers when following cross-origin redirects. This issue is present in the `twited.web.RedirectAgent` and `twisted.web. BrowserLike…

    twisted twisted twisted twisted Debian Ubuntu Azure Linux Alpine PyPI