Skip to content
OpenAdvisories

Archive

19 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /19 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2021-46700

    In libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in encoder.c) has a doubl…

    libsixel libsixel Debian Ubuntu
  • Unscored —
    CVE-2016-1239

    duck before 0.10 did not properly handle loading of untrusted code from the current directory.

    Debian duck duck duck Debian Ubuntu
  • High 8.8
    CVE-2022-0690

    Cross-site Scripting (XSS) - Reflected in microweber/microweber

    Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.

    microweber microweber/microweber microweber/microweber Packagist
  • Medium 5.3
    CVE-2022-0689

    Use multiple time the one-time coupon in microweber/microweber

    Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11.

    microweber microweber/microweber microweber/microweber Packagist
  • Unscored —
    CVE-2022-23375 EPSS 20%

    WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability. An attacker can upload a malicious fi…

  • Unscored —
    CVE-2022-23376

    WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages.

  • Medium 5.5
    CVE-2022-0632

    NULL Pointer Dereference in mruby/mruby

    NULL Pointer Dereference in Homebrew mruby prior to 3.2.

    mruby mruby/mruby rust mruby Ubuntu Azure Linux Alpine
  • High 7.1
    CVE-2022-0630

    Out-of-bounds Read in mruby/mruby

    Out-of-bounds Read in Homebrew mruby prior to 3.2.

    mruby mruby/mruby mruby Ubuntu
  • Medium 6.5
    CVE-2022-0678 Scanner template

    Cross-site Scripting (XSS) - Reflected in microweber/microweber

    Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.

    microweber microweber/microweber microweber/microweber Packagist
  • High 7.2
    CVE-2022-0409

    Unrestricted Upload of File with Dangerous Type in star7th/showdoc

    Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2.

    star7th star7th/showdoc showdoc/showdoc Packagist
  • Unscored —
    CVE-2016-20013

    sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because the algo…

    zabbix eglibc glibc sssd Ubuntu
  • High 7.5
    CVE-2022-24980

    SSRF in Kitodo.Presentation

    An issue was discovered in the Kitodo.Presentation (aka dif) extension before 2.3.2, 3.x before 3.2.3, and 3.3.x before 3.3.4 for TYPO3. A missing access check in an eID script allows an unauthenticated user to submit arbitrary URLs to this component. This re…

    kitodo/presentation Packagist
  • Unscored —
    CVE-2022-24979

    An issue was discovered in the Varnishcache extension before 2.0.1 for TYPO3. The Edge Site Includes (ESI) content elem…

  • Unscored —
    CVE-2022-25366

    Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has …

  • High 7.8
    CVE-2022-25365 Public exploit

    Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an …

  • Unscored —
    CVE-2022-25256 Public exploit

    SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfs_request_backlabe…