Skip to content
OpenAdvisories

Archive

23 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /23 March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.4
    CVE-2022-24707 Public exploit

    SQL injection in anuko timetracker

    Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-based blind injection vulnerabilities existed in Time Tracker Puncher plugin in versions of anuko timetracker prior to 1.20.0.5642. This was…

    anuko timetracker
  • High 7.5
    CVE-2022-22336

    IBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a r…

    IBM Sterling Secure Proxy
  • High 7.2
    CVE-2022-21705 Scanner template

    Authenticated remote code execution in octobercms

    Octobercms is a self-hosted CMS platform based on the Laravel PHP Framework. In affected versions user input was not properly sanitized before rendering. An authenticated user with the permissions to create, modify and delete website pages can exploit this vu…

    October CMS october october/system Packagist
  • High 8.6
    CVE-2022-20623 EPSS 12%

    Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability

    A vulnerability in the rate limiter for Bidirectional Forwarding Detection (BFD) traffic of Cisco NX-OS Software for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause BFD traffic to be dropped on an affected device. Thi…

    Cisco Cisco NX-OS Software Network devices
  • High 8.6
    CVE-2022-20624 EPSS 12%

    Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability

    A vulnerability in the Cisco Fabric Services over IP (CFSoIP) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validat…

    Cisco Cisco NX-OS Software Network devices
  • High 8.8
    CVE-2022-20650 EPSS 15%

    Cisco NX-OS Software NX-API Command Injection Vulnerability

    A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation of user supplied data that is sent to the…

    Cisco Cisco NX-OS Software Network devices
  • High 7.3
    CVE-2022-0476

    Denial of Service in radareorg/radare2

    Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • High 8.8
    CVE-2022-0721

    Insertion of Sensitive Information Into Debugging Code in microweber/microweber

    Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3.

    microweber microweber/microweber microweber/microweber Packagist
  • High 7.6
    CVE-2022-0719

    Cross-site Scripting (XSS) - Reflected in microweber/microweber

    Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.

    microweber microweber/microweber microweber/microweber Packagist
  • High 8.2
    CVE-2022-0736

    Insecure Temporary File in mlflow/mlflow

    Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.

    MLflow mlflow/mlflow mlflow PyPI
  • High 7.8
    CVE-2022-0729

    Use of Out-of-range Pointer Offset in vim/vim

    Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine