Archive

23 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /23 March 2022 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.1

CVE-2022-25098

Arbitrary file delete in ectouch/ectouch

ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter.

ectouch/ectouch Packagist

Feb 23, 2022
Critical 9.8

CVE-2021-44550

Access Control vulnerability within CoreNLP

An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).

edu.stanford.nlp:stanford-corenlp Maven

Feb 23, 2022
Critical 9.1

CVE-2022-0724

Insecure Storage of Sensitive Information in microweber/microweber

Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3.

microweber microweber/microweber microweber/microweber Packagist

Feb 23, 2022