Archive

14 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /14 March 2022 →

All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

Medium 5.4

CVE-2022-21818

NVIDIA License System contains a vulnerability in the installation scripts for the DLS virtual appliance, where a user …

NVIDIA NVIDIA License System

Feb 14, 2022
Medium 6.2

CVE-2022-23638

Cross-site Scripting in svg-sanitizer

svg-sanitizer is a SVG/XML sanitizer written in PHP. A cross-site scripting vulnerability impacts all users of the `svg-sanitizer` library prior to version 0.15.0. This issue is fixed in version 0.15.0. There is currently no workaround available.

darylldoyle svg-sanitizer spip enshrined/svg-sanitize Ubuntu Packagist

Feb 14, 2022
Medium 6.1

CVE-2022-23637

Stored Cross-Site-Scripting (XSS) in Markdown Editor

K-Box is a web-based application to manage documents, images, videos and geodata. Prior to version 0.33.1, a stored Cross-Site-Scripting (XSS) vulnerability is present in the markdown editor used by the document abstract and markdown file preview. A specifica…

k-box k-box

Feb 14, 2022
Medium 6.5

CVE-2022-0579

Missing Authorization in snipe/snipe-it

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9.

snipe snipe/snipe-it snipe/snipe-it Packagist

Feb 14, 2022
Medium 4.8

CVE-2021-39080

Due to weak obfuscation, IBM Cognos Analytics Mobile for Android application prior to version 1.1.14 , an attacker coul…

IBM Cognos Analytics Mobile

Feb 14, 2022
Medium 5.4

CVE-2021-39079

IBM Cognos Analytics Mobile for Android applications prior to version 1.1.14 is vulnerable to cross-site scripting. Thi…

IBM Cognos Analytics Mobile

Feb 14, 2022
Medium 5.9

CVE-2022-24686

HashiCorp Nomad Artifact Download Race Condition

HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17, 1.1.11, and 1.2.5 artifact download functionality has a race condition such that the Nomad client agent could download the wrong artifact into the wrong destination. Fixed in 1.0.18, 1.1.12, and 1.2.6

nomad github.com/hashicorp/nomad nomad Ubuntu Alpine Go

Feb 14, 2022
Medium 6.3

CVE-2022-0581

Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet…

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux Alpine

Feb 14, 2022
Medium 6.3

CVE-2022-0586

Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via …

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux Alpine

Feb 14, 2022
Medium 6.3

CVE-2022-0582

Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of servi…

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux Alpine

Feb 14, 2022
Medium 6.3

CVE-2022-0583

Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packe…

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux Alpine

Feb 14, 2022