Archive

8 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /8 March 2022 →

All Critical High Medium Low Exploited only Public exploit

43 results · Feed

High 7.7

CVE-2022-0506

Cross-site Scripting (XSS) - Stored in microweber/microweber

Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.

microweber microweber/microweber microweber/microweber Packagist

Feb 8, 2022
High 8.8

CVE-2022-24450

Incorrect Authorization in NATS nats-server

NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature.

github.com/nats-io/nats-server/v2 github.com/nats-io/nats-server github.com/nats-io/nats-streaming-server Go

Feb 8, 2022
High 8.8

CVE-2022-0523

Use After Free in radareorg/radare2

Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.

radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine

Feb 8, 2022