9 February 2022

86 results · Clear filters · Feed

• Medium 6.5
  CVE-2021-3813

  Improper Privilege Management in chatwoot/chatwoot

  Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2.

  chatwoot chatwoot/chatwoot
  Feb 9, 2022
• Medium 6.3
  CVE-2022-0539

  Cross-site Scripting (XSS) - Stored in ptrofimov/beanstalk_console

  Cross-site Scripting (XSS) - Stored in Packagist ptrofimov/beanstalk_console prior to 1.7.14.

  ptrofimov ptrofimov/beanstalk_console ptrofimov/beanstalk_console Packagist
  Feb 9, 2022
• Medium 6.5
  CVE-2022-0538

  DoS vulnerability in bundled XStream library in Jenkins Core

  Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage.

  Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven
  Feb 9, 2022
• Medium 4.6
  CVE-2021-40837

  Denial-of-Service (DoS) Vulnerability

  A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will…

  F-Secure F-Secure endpoint protection products on Windows and Mac. F-Secure Linux Security (32-bit) F-Secure Linux Security 64 F-Secure Internet Gatekeeper & F-Secure Atlant Linux Windows
  Feb 9, 2022
• Medium 6.1
  CVE-2022-0527

  Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot

  Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0.

  chatwoot chatwoot/chatwoot
  Feb 9, 2022
• Medium 6.1
  CVE-2022-24682 Exploited · Ransomware Scanner template EPSS 31%

  An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), …

  Feb 9, 2022

  KEV Feb 25, 2022