Skip to content
OpenAdvisories

Archive

22 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /22 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • High 8.1
    CVE-2022-0654

    Exposure of Sensitive Information to an Unauthorized Actor in fgribreau/node-request-retry

    Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository fgribreau/node-request-retry prior to 7.0.0.

    fgribreau fgribreau/node-request-retry requestretry npm
  • High 7.5
    CVE-2022-23612

    Directory Traversal in OpenMRS Startup Filter

    OpenMRS is a patient-based medical record system focusing on giving providers a free customizable electronic medical record system. Affected versions are subject to arbitrary file exfiltration due to failure to sanitize request when satisfying GET requests fo…

    openmrs openmrs-core
  • High 7.5
    CVE-2021-43826

    Crash when tunneling TCP over HTTP in Envoy

    Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions of Envoy a crash occurs when configured for :ref:`upstream tunneling <envoy_v3_api_field_extensions.filters.network.tcp_proxy.v3.TcpProxy.tunneling_co…

    envoyproxy envoy
  • High 7.5
    CVE-2022-21655

    Incorrect handling of internal redirects results in crash in Envoy

    Envoy is an open source edge and service proxy, designed for cloud-native applications. The envoy common router will segfault if an internal redirect selects a route configured with direct response or redirect actions. This will result in a denial of service.…

    envoyproxy envoy
  • High 7.4
    CVE-2022-21654

    Incorrect configuration handling allows TLS session re-use without re-validation in Envoy

    Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy's tls allows re-use when some cert validation settings have changed from their default configuration. The only workaround for this issue is to ensure that default tl…

    envoyproxy envoy
  • High 7.4
    CVE-2022-21656

    X.509 subjectAltName matching bypass in Envoy

    Envoy is an open source edge and service proxy, designed for cloud-native applications. The default_validator.cc implementation used to implement the default certificate validation routines has a "type confusion" bug when processing subjectAltNames. This proc…

    envoyproxy envoy
  • High 7.5
    CVE-2021-43824

    Null pointer dereference in envoy

    Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions a crafted request crashes Envoy when a CONNECT request is sent to JWT filter configured with regex match. This provides a denial of service attack vec…

    envoyproxy envoy
  • High 7.5
    CVE-2022-23635

    Unauthenticated control plane denial of service attack in Istio

    Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, `istiod`, is vulnerable to a request processing error, allowing a malicious attacker that sends a specially crafted message which results in …

    istio istio istio.io/istio Go
  • High 8.1
    CVE-2022-23654

    Improper write access check in Requarks/wiki

    Wiki.js is a wiki app built on Node.js. In affected versions an authenticated user with write access on a restricted set of paths can update a page outside the allowed paths by specifying a different target page ID while keeping the path intact. The access co…

    requarks wiki
  • High 8.8
    CVE-2022-23652

    Privilege escalation using hop-by-hop Connection header

    capsule-proxy is a reverse proxy for Capsule Operator which provides multi-tenancy in Kubernetes. In versions prior to 0.2.1 an attacker with a proper authentication mechanism may use a malicious `Connection` header to start a privilege escalation attack towa…

    clastix capsule-proxy github.com/clastix/capsule-proxy Go
  • High 7.2
    CVE-2022-23043

    File upload restriction bypass in Zenario CMS

    Zenario CMS 9.2 allows an authenticated admin user to bypass the file upload restriction by creating a new 'File/MIME Types' using the '.phar' extension. Then an attacker can upload a malicious file, intercept the request and change the extension to '.phar' i…

    tribalsystems/zenario Packagist
  • High 8.8
    CVE-2021-4029

    A command injection vulnerability in the CGI program of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker to execu…

    Zyxel ARMOR Z1 (NBG6816) firmware ARMOR Z2 (NBG6817) firmware Network devices
  • High 8.0
    CVE-2021-4030

    A cross-site request forgery vulnerability in the HTTP daemon of the Zyxel ARMOR Z1/Z2 firmware could allow an attacker…

    Zyxel ARMOR Z1 (NBG6816) firmware ARMOR Z2 (NBG6817) firmware Network devices
  • High 7.8
    CVE-2022-0676

    Heap-based Buffer Overflow in radareorg/radare2

    Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • High 8.4
    CVE-2022-0714 EPSS 13%

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 8.1
    CVE-2022-23608

    Use after free in PJSIP

    PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions up to and including 2.11.1 when in a dialog set (or forking) scenario, a hash …

    pjsip pjproject asterisk asterisk Debian Ubuntu Alpine