Skip to content
OpenAdvisories

Archive

10 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /10 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.3
    CVE-2021-42000

    Ping Identity PingFederate Password Reset and Password Change Mishandling with an authentication policy in parallel reset flows

    When a password reset or password change flow with an authentication policy is configured and the adapter in the reset or change policy supports multiple parallel reset flows, an existing user can reset another existing users password.

    Ping Identity PingFederate
  • Medium 6.8
    CVE-2022-0020 Public exploit

    Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface

    A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on…

    Palo Alto Networks Cortex XSOAR Network devices
  • Medium 4.7
    CVE-2022-0019

    GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux

    An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the hashed credentials of GlobalProtect users that saved their password during previous GlobalProtect app sessions to other local us…

    Palo Alto Networks GlobalProtect App Network devices
  • Medium 6.1
    CVE-2022-0018

    GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled

    An information exposure vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows and MacOS where the credentials of the local user account are sent to the GlobalProtect portal when the Single Sign-On feature is enabled in the GlobalProtect …

    Palo Alto Networks GlobalProtect App Network devices
  • Medium 6.5
    CVE-2022-0011

    PAN-OS: URL Category Exceptions Match More URLs Than Intended in URL Filtering

    PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are blocked or allowed (depending on your rules) regardless of their associated URL category. This is done by creating a custom URL category list or…

    Palo Alto Networks PAN-OS Prisma Access Network devices
  • Medium 4.3
    CVE-2022-20680

    Cisco Prime Service Catalog Information Disclosure Vulnerability

    A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to improper enforcement of Administrator privil…

    Cisco Cisco Prime Service Catalog Network devices
  • Medium 4.4
    CVE-2022-20630

    Cisco DNA Center Information Disclosure Vulnerability

    A vulnerability in the audit log of Cisco DNA Center could allow an authenticated, local attacker to view sensitive information in clear text. This vulnerability is due to the unsecured logging of sensitive information on an affected system. An attacker with …

    Cisco Cisco Digital Network Architecture Center (DNA Center) Network devices
  • Medium 5.8
    CVE-2022-20738

    Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability

    A vulnerability in the Cisco Umbrella Secure Web Gateway service could allow an unauthenticated, remote attacker to bypass the file inspection feature. This vulnerability is due to insufficient restrictions in the file inspection feature. An attacker could ex…

    Cisco Cisco Umbrella Insights Virtual Appliance Network devices