Archive

9 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /9 March 2022 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Low 3.7

CVE-2022-22779

Retained exploded messages in Keybase clients for macOS and Windows

The Keybase Clients for macOS and Windows before version 5.9.0 fails to properly remove exploded messages initiated by a user. This can occur if the receiving user switches to a non-chat feature and places the host in a sleep state before the sending user exp…

Zoom Video Communications Keybase Client for Windows Keybase Client for macOS Windows macOS

Feb 9, 2022
Low 2.7

CVE-2021-25939

ArangoDB - Blind SSRF when Downloading Foxx Service from URL

In ArangoDB, versions v3.7.0 through v3.9.0-alpha.1 have a feature which allows downloading a Foxx service from a publicly available URL. This feature does not enforce proper filtering of requests performed internally, which can be abused by a highly-privileg…

Arangodb arangodb

Feb 9, 2022
Low 2.6

CVE-2022-0536

Improper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirects

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8.

follow-redirects follow-redirects/follow-redirects js-jquery node-follow-redirects Debian Ubuntu Azure Linux npm

Feb 9, 2022