Skip to content
OpenAdvisories

Archive

9 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /9 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.3
    GHSA-h6gw-r52c-724r

    NULL Pointer Dereference and Access of Uninitialized Pointer in TensorFlow

    ### Impact The [code for boosted trees in TensorFlow](https://github.com/tensorflow/tensorflow/blob/e0b6e58c328059829c3eb968136f17aa72b6c876/tensorflow/core/kernels/boosted_trees/stats_ops.cc) is still missing validation. This allows malicious users to read a…

    tensorflow tensorflow-cpu tensorflow-gpu PyPI
  • Critical 9.8
    CVE-2022-22536 Exploited Public exploit Scanner template EPSS 98%

    SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 an…

    SAP SAP NetWeaver and ABAP Platform SAP Web Dispatcher SAP Content Server
    KEV Aug 18, 2022
  • Critical 9.1
    CVE-2022-23631

    Prototype Pollution leading to Remote Code Execution in superjson

    superjson is a program to allow JavaScript expressions to be serialized to a superset of JSON. In versions prior to 1.8.1 superjson allows input to run arbitrary code on any server using superjson input without prior authentication or knowledge. The only requ…

    blitz-js superjson blitz superjson npm
  • Critical 9.9
    CVE-2021-36302

    All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A r…

    Dell Dell EMC Integrated System for Microsoft Azure Stack Hub
  • Critical 9.8
    CVE-2021-45331

    Reuse of one time passwords allowed in Gitea

    An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges. If captured, the TOTP code for the 2FA can be submitted correctly more than once.

    code.gitea.io/gitea gitea Alpine Go
  • Critical 9.8
    CVE-2021-45330

    Improper Privilege Management in Gitea

    An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse.

    code.gitea.io/gitea Go