Skip to content
OpenAdvisories

Archive

21 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /21 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

49 results · Feed

  • Unscored —
    CVE-2021-24921

    Advanced Database Cleaner < 3.0.4 - Reflected Cross-Site Scripting

    The Advanced Database Cleaner WordPress plugin before 3.0.4 does not sanitise and escape $_GET keys and values before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

    Web / CMS
  • Unscored —
    CVE-2021-24867 EPSS 18%

    Backdoored Plugins & Themes from AccessPress Themes

    Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However,…

    AccessPress Themes Social Auto Poster AccessPress Social Icons WP TFeed Web / CMS
  • High 7.5
    CVE-2022-25297

    Arbitrary File Write

    This affects the package drogonframework/drogon before 1.7.5. The unsafe handling of file names during upload using HttpFile::save() method may enable attackers to write files to arbitrary locations outside the designated target folder.

  • Medium 5.3
    CVE-2022-0564

    Qlik Sense Enterprise Domain User enumeration

    A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An attacker could exploit this vulnerability by sending authentication requests to an affected system. A successful exploit could allow the a…

    Qlik Sense Qlik Sense Enterprise on Windows Windows
  • Medium 5.5
    CVE-2022-0563

    A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library us…

    util-linux util-linux util-linux Linux Debian Azure Linux Alpine
  • Medium 6.5
    CVE-2022-0691

    Authorization Bypass Through User-Controlled Key in unshiftio/url-parse

    Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.

    unshiftio unshiftio/url-parse url-parse node-url-parse Debian Ubuntu npm
  • Medium 6.2
    CVE-2022-0696

    NULL Pointer Dereference in vim/vim

    NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2021-4115

    There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor…

    policykit-1 policykit-1 Debian Ubuntu
  • Unscored —
    CVE-2021-44141

    All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a fil…

    samba samba samba samba Debian Ubuntu Azure Linux Alpine