Skip to content
OpenAdvisories

Archive

17 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /17 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.9
    CVE-2022-23646

    Improper CSP in Image Optimization API for Next.js

    Next.js is a React framework. Starting with version 10.0.0 and prior to version 12.1.0, Next.js is vulnerable to User Interface (UI) Misrepresentation of Critical Information. In order to be affected, the `next.config.js` file must have an `images.domains` ar…

    vercel next.js next npm
  • Medium 4.3
    CVE-2022-0638

    Cross-Site Request Forgery (CSRF) in microweber/microweber

    Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.

    microweber microweber/microweber microweber/microweber Packagist
  • Medium 5.3
    CVE-2021-39034

    IBM MQ 9.1 LTS is vulnerable to a denial of service attack caused by an issue within the channel process. IBM X-Force I…

    IBM MQ
  • Medium 5.3
    CVE-2022-20750

    Cisco Redundancy Configuration Manager for Cisco StarOS Software TCP Denial of Service Vulnerability

    A vulnerability in the checkpoint manager implementation of Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS Software could allow an unauthenticated, remote attacker to cause the checkpoint manager process to restart upon receipt of malformed TCP…

    Cisco Cisco Redundancy Configuration Manager Network devices
  • Medium 6.1
    CVE-2022-20659

    Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the inter…

    Cisco Cisco Prime Infrastructure Network devices
  • Medium 6.5
    CVE-2022-0623

    Out-of-bounds Read in mruby/mruby

    Out-of-bounds Read in Homebrew mruby prior to 3.2.

    mruby mruby/mruby mruby Ubuntu
  • Medium 5.3
    CVE-2022-24953

    Crypt_GPG does not prevent additional options in GPG calls

    The Crypt_GPG extension before 1.6.7 for PHP does not prevent additional options in GPG calls, which presents a risk for certain environments and GPG versions.

    pear/crypt_gpg php-crypt-gpg php-crypt-gpg Debian Ubuntu Packagist
  • Medium 5.3
    CVE-2022-0622

    Generation of Error Message Containing Sensitive Information in snipe/snipe-it

    Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11.

    snipe snipe/snipe-it snipe/snipe-it Packagist
  • Medium 6.5
    CVE-2022-0639

    Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

    Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.

    unshiftio unshiftio/url-parse url-parse node-url-parse Debian Ubuntu npm