Skip to content
OpenAdvisories

Archive

22 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /22 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-43825

    Use-after-free in Envoy

    Envoy is an open source edge and service proxy, designed for cloud-native applications. Sending a locally generated response must stop further processing of request or response data. Envoy tracks the amount of buffered request and response data and aborts the…

    envoyproxy envoy
  • Medium 6.8
    CVE-2022-21657

    X.509 Extended Key Usage and Trust Purposes bypass in Envoy

    Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions Envoy does not restrict the set of certificates it accepts from the peer, either as a TLS client or a TLS server, to only those certificates that cont…

    envoyproxy envoy
  • Medium 4.4
    CVE-2022-23606

    Crash when a cluster is deleted in Envoy

    Envoy is an open source edge and service proxy, designed for cloud-native applications. When a cluster is deleted via Cluster Discovery Service (CDS) all idle connections established to endpoints in that cluster are disconnected. A recursion was introduced in…

    envoyproxy envoy
  • Medium 5.4
    CVE-2021-44566

    Cross site scripting in francoisjacquet/rosariosis

    A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 4.3 via the SanitizeMarkDown function in ProgramFunctions/MarkDownHTML.fnc.php.

    francoisjacquet/rosariosis Packagist
  • Medium 5.4
    CVE-2021-44565

    Cross site scripting in francoisjacquet/rosariosis

    A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 7.6.1 via the xss_clean function in classes/Security.php, which allows remote malicious users to inject arbitrary JavaScript or HTML. An example of affected components are all Markdown inp…

    francoisjacquet/rosariosis Packagist
  • Medium 5.3
    CVE-2022-0713

    Heap-based Buffer Overflow in radareorg/radare2

    Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • Medium 5.9
    CVE-2022-0712

    NULL Pointer Dereference in radareorg/radare2

    NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4.

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • Medium 4.9
    CVE-2022-0665

    Path Traversal in pimcore/pimcore

    Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2.

    pimcore pimcore/pimcore pimcore/pimcore Packagist