Archive

8 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /8 March 2022 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2021-45327

Capture-replay in Gitea

Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. which could let a remote malisious user execute arbitrary code.

code.gitea.io/gitea github.com/go-gitea/gitea gitea golang-code.gitea-git Ubuntu Alpine Go

Feb 8, 2022
Critical 9.8

CVE-2022-23340

Joplin Vulnerable to Code Injection

Joplin 2.6.10 allows remote attackers to execute system commands through malicious code in user search results.

joplin npm

Feb 8, 2022