Archive

18 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /18 March 2022 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 8.8

CVE-2022-23642 Public exploit EPSS 74%

Code Injection in Sourcegraph

Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.37 is vulnerable to remote code execution in the `gitserver` service. The service acts as a git exec proxy, and fails to properly restrict calling `git config`. This allows an …

sourcegraph sourcegraph

Feb 18, 2022
High 8.8

CVE-2022-24355 Public exploit

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-…

TP-Link Systems TL-WR940N Network devices

Feb 18, 2022
High 7.5

CVE-2022-25314 Public exploit

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.

thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine

Feb 18, 2022